This will create a single node RKE2 cluster running on an EC2 instance with SLES 15 and install NeuVector into the cluster.
The instance will have wide-open security groups and will be accessible over SSH using the SSH keys
id_rsa and id_rsa.pub keys generated by terraform.
Optionally, you can also deploy the Rancher Management Server into the same cluster to test the Rancher and NeuVector integration.
Refer to Requirements/Using Cloud Quickstarts to get started.
| Name | Version |
|---|---|
| terraform | >= 1.0.0 |
| aws | 5.1.0 |
| helm | 2.10.1 |
| kubernetes | 2.21.1 |
| local | 2.4.0 |
| rancher2 | 3.0.0 |
| ssh | 2.6.0 |
| tls | 4.0.4 |
| Name | Version |
|---|---|
| aws | 5.1.0 |
| helm | 2.10.1 |
| local | 2.4.0 |
| rancher2.bootstrap | 3.0.0 |
| ssh | 2.6.0 |
| tls | 4.0.4 |
No modules.
| Name | Type |
|---|---|
| aws_instance.neuvector_server | resource |
| aws_internet_gateway.neuvector_gateway | resource |
| aws_key_pair.quickstart_key_pair | resource |
| aws_route_table.neuvector_route_table | resource |
| aws_route_table_association.neuvector_route_table_association | resource |
| aws_security_group.neuvector_sg_allowall | resource |
| aws_subnet.neuvector_subnet | resource |
| aws_vpc.neuvector_vpc | resource |
| helm_release.cert_manager | resource |
| helm_release.cluster_issuer | resource |
| helm_release.neuvector | resource |
| helm_release.rancher_server | resource |
| local_file.kube_config_server_yaml | resource |
| local_file.ssh_public_key_openssh | resource |
| local_sensitive_file.ssh_private_key_pem | resource |
| rancher2_bootstrap.admin | resource |
| ssh_resource.install_rke2 | resource |
| ssh_resource.retrieve_config | resource |
| ssh_resource.rke2_config | resource |
| ssh_resource.rke2_config_dir | resource |
| tls_private_key.global_key | resource |
| aws_ami.sles | data source |
| Name | Description | Type | Default | Required |
|---|---|---|---|---|
| aws_access_key | AWS access key used to create infrastructure | string |
n/a | yes |
| aws_secret_key | AWS secret key used to create AWS infrastructure | string |
n/a | yes |
| aws_region | AWS region used for all resources | string |
"us-east-1" |
no |
| aws_session_token | AWS session token used to create AWS infrastructure | string |
"" |
no |
| aws_zone | AWS zone used for all resources | string |
"us-east-1b" |
no |
| cert_manager_version | Version of cert-manager to install alongside NeuVector (format: 0.0.0) | string |
"1.11.0" |
no |
| install_rancher | Also install Rancher and setup SSO for NeuVector | bool |
false |
no |
| instance_type | Instance type used for all EC2 instances | string |
"t3a.xlarge" |
no |
| kubernetes_version | Kubernetes version to use | string |
"v1.24.14+rke2r1" |
no |
| neuvector_admin_password | Admin password for NeuVector | string |
"AI2zSYMFuCZ3HUeyNNMj1urUpCSEfgE0" |
no |
| neuvector_chart_version | NeuVector helm chart version | string |
"2.6.1" |
no |
| prefix | Prefix added to names of all resources | string |
"neuvector-quickstart" |
no |
| rancher_helm_repository | The helm repository, where the Rancher helm chart is installed from | string |
"https://releases.rancher.com/server-charts/latest" |
no |
| rancher_server_admin_password | Admin password to use for Rancher server bootstrap, min. 12 characters | string |
"adminadminadmin" |
no |
| rancher_version | Rancher version | string |
"2.7.9" |
no |
| Name | Description |
|---|---|
| neuvector_url | n/a |
| node_ip | n/a |
| rancher_url | n/a |