Pass through variable creation for ECR pull through cache

opendatacube · Nov 28, 2024 · 7baa279 · 7baa279
1 parent a87dd83
commit 7baa279
Show file tree

Hide file tree

Showing 3 changed files with 11 additions and 3 deletions.
diff --git a/odc_eks/README.md b/odc_eks/README.md
@@ -165,6 +165,7 @@ module "odc_eks" {
 | extra_kubelet_args                | Additional kubelet command-line arguments                                                                                                                                                                              | string       | "--arg1=value --arg2"                                           | No       |
 | extra_bootstrap_args              | Additional bootstrap command-line arguments                                                                                                                                                                            | string       | "--arg1 value --arg2=value --arg3"                              | No       |
 | extra_userdata                    | Additional EC2 user data commands that will be passed to EKS nodes                                                                                                                                                     | string       | <<USERDATA echo "" USERDATA                                     | No       |
+| enable_ecr_pullthough_cache_permissions  | Create additional cluster node IAM permissions to allow cluster to use ecr pull-through cache rules.                                                                                                                                                    | boolean       | false                                     | No       |
 | tags                              | Additional tags - e.g. `map('StackName','XYZ')`                                                                                                                                                                        | map(string)  | {}                                                              | No       |
 | enabled_cluster_log_types         | List of the desired control plane logging to enable, defaults to none                                                                                                                                                  | list(string) | []                                                              | No       |
 | enable_custom_cluster_log_group   | Create a custom CloudWatch Log Group for the cluster. If you supply `enabled_cluster_log_types` but leave this false, EKS will create a log group automatically with default retention values.                         | bool         | false                                                           | No       |

diff --git a/odc_eks/main.tf b/odc_eks/main.tf
@@ -131,9 +131,10 @@ module "eks" {
 
   enable_ec2_ssm = var.enable_ec2_ssm
 
-  enabled_cluster_log_types       = var.enabled_cluster_log_types
-  enable_custom_cluster_log_group = var.enable_custom_cluster_log_group
-  log_retention_period            = var.log_retention_period
+  enabled_cluster_log_types               = var.enabled_cluster_log_types
+  enable_custom_cluster_log_group         = var.enable_custom_cluster_log_group
+  log_retention_period                    = var.log_retention_period
+  enable_ecr_pullthough_cache_permissions = var.enable_ecr_pullthough_cache_permissions
 
   # Worker configuration
   min_nodes                    = var.min_nodes

diff --git a/odc_eks/variables.tf b/odc_eks/variables.tf
@@ -333,6 +333,12 @@ USERDATA
 
 }
 
+variable "enable_ecr_pullthough_cache_permissions" {
+  type        = bool
+  description = "Create additional cluster node IAM permissions to allow cluster to use ecr pull-through cache rules."
+  default     = false
+}
+
 variable "tags" {
   type        = map(string)
   description = "Additional tags(e.g. `map('StackName','XYZ')`"