fix: comment out more managed node groups

we're going to try to use just fargate and then maybe do a combo support of fargate + managed node groups with variable inputs
GSA-TTS · Oct 5, 2023 · 9389025 · 9389025
1 parent ba9ec7b
commit 9389025
Showing 1 changed file with 81 additions and 81 deletions.
diff --git a/terraform/modules/provision-aws/managed-node-groups.tf b/terraform/modules/provision-aws/managed-node-groups.tf
@@ -1,82 +1,82 @@
 
-data "aws_iam_policy" "ssm_managed_instance" {
-  arn = "arn:aws:iam::aws:policy/AmazonSSMManagedInstanceCore"
-}
-
-resource "aws_iam_role_policy_attachment" "karpenter_ssm_policy" {
-  role       = module.eks.cluster_iam_role_name
-  policy_arn = data.aws_iam_policy.ssm_managed_instance.arn
-}
-
-resource "aws_iam_instance_profile" "karpenter" {
-  name = "KarpenterNodeInstanceProfile-${local.cluster_name}"
-  role = module.eks.cluster_iam_role_name
-}
-
-module "iam_assumable_role_karpenter" {
-  source                        = "terraform-aws-modules/iam/aws//modules/iam-assumable-role-with-oidc"
-  version                       = "4.7.0"
-  create_role                   = true
-  role_name                     = "karpenter-controller-${local.cluster_name}"
-  provider_url                  = module.eks.cluster_oidc_issuer_url
-  oidc_fully_qualified_subjects = ["system:serviceaccount:karpenter:karpenter"]
-}
-
-resource "aws_iam_role_policy" "karpenter_controller" {
-  name = "karpenter-policy-${local.cluster_name}"
-  role = module.iam_assumable_role_karpenter.iam_role_name
-
-  policy = jsonencode({
-    Version = "2012-10-17"
-    Statement = [
-      {
-        Action = [
-          "ec2:CreateLaunchTemplate",
-          "ec2:CreateFleet",
-          "ec2:RunInstances",
-          "ec2:CreateTags",
-          "iam:PassRole",
-          "ec2:TerminateInstances",
-          "ec2:DescribeLaunchTemplates",
-          "ec2:DeleteLaunchTemplate",
-          "ec2:DescribeInstances",
-          "ec2:DescribeSecurityGroups",
-          "ec2:DescribeSubnets",
-          "ec2:DescribeInstanceTypes",
-          "ec2:DescribeInstanceTypeOfferings",
-          "ec2:DescribeAvailabilityZones",
-          "ssm:GetParameter"
-        ]
-        Effect   = "Allow"
-        Resource = "*"
-      },
-    ]
-  })
-}
-
-resource "helm_release" "karpenter" {
-  namespace        = "karpenter"
-  create_namespace = true
-
-  name       = "karpenter"
-  repository = "https://charts.karpenter.sh"
-  chart      = "karpenter"
-  version    = "v0.8.0"
-
-  dynamic "set" {
-    for_each = {
-      "serviceAccount.annotations.eks\\.amazonaws\\.com/role-arn" = module.iam_assumable_role_karpenter.iam_role_arn,
-      "clusterName"                                               = local.cluster_name,
-      "clusterEndpoint"                                           = module.eks.cluster_endpoint,
-      "aws.defaultInstanceProfile"                                = aws_iam_instance_profile.karpenter.name
-    }
-    content {
-      name  = set.key
-      value = set.value
-    }
-  }
-
-  depends_on = [
-    null_resource.cluster-functional
-  ]
-}
+# data "aws_iam_policy" "ssm_managed_instance" {
+#   arn = "arn:aws:iam::aws:policy/AmazonSSMManagedInstanceCore"
+# }
+# 
+# resource "aws_iam_role_policy_attachment" "karpenter_ssm_policy" {
+#   role       = module.eks.cluster_iam_role_name
+#   policy_arn = data.aws_iam_policy.ssm_managed_instance.arn
+# }
+# 
+# resource "aws_iam_instance_profile" "karpenter" {
+#   name = "KarpenterNodeInstanceProfile-${local.cluster_name}"
+#   role = module.eks.cluster_iam_role_name
+# }
+# 
+# module "iam_assumable_role_karpenter" {
+#   source                        = "terraform-aws-modules/iam/aws//modules/iam-assumable-role-with-oidc"
+#   version                       = "4.7.0"
+#   create_role                   = true
+#   role_name                     = "karpenter-controller-${local.cluster_name}"
+#   provider_url                  = module.eks.cluster_oidc_issuer_url
+#   oidc_fully_qualified_subjects = ["system:serviceaccount:karpenter:karpenter"]
+# }
+# 
+# resource "aws_iam_role_policy" "karpenter_controller" {
+#   name = "karpenter-policy-${local.cluster_name}"
+#   role = module.iam_assumable_role_karpenter.iam_role_name
+# 
+#   policy = jsonencode({
+#     Version = "2012-10-17"
+#     Statement = [
+#       {
+#         Action = [
+#           "ec2:CreateLaunchTemplate",
+#           "ec2:CreateFleet",
+#           "ec2:RunInstances",
+#           "ec2:CreateTags",
+#           "iam:PassRole",
+#           "ec2:TerminateInstances",
+#           "ec2:DescribeLaunchTemplates",
+#           "ec2:DeleteLaunchTemplate",
+#           "ec2:DescribeInstances",
+#           "ec2:DescribeSecurityGroups",
+#           "ec2:DescribeSubnets",
+#           "ec2:DescribeInstanceTypes",
+#           "ec2:DescribeInstanceTypeOfferings",
+#           "ec2:DescribeAvailabilityZones",
+#           "ssm:GetParameter"
+#         ]
+#         Effect   = "Allow"
+#         Resource = "*"
+#       },
+#     ]
+#   })
+# }
+# 
+# resource "helm_release" "karpenter" {
+#   namespace        = "karpenter"
+#   create_namespace = true
+# 
+#   name       = "karpenter"
+#   repository = "https://charts.karpenter.sh"
+#   chart      = "karpenter"
+#   version    = "v0.8.0"
+# 
+#   dynamic "set" {
+#     for_each = {
+#       "serviceAccount.annotations.eks\\.amazonaws\\.com/role-arn" = module.iam_assumable_role_karpenter.iam_role_arn,
+#       "clusterName"                                               = local.cluster_name,
+#       "clusterEndpoint"                                           = module.eks.cluster_endpoint,
+#       "aws.defaultInstanceProfile"                                = aws_iam_instance_profile.karpenter.name
+#     }
+#     content {
+#       name  = set.key
+#       value = set.value
+#     }
+#   }
+# 
+#   depends_on = [
+#     null_resource.cluster-functional
+#   ]
+# }