diff --git a/cluster/eks.tf b/cluster/eks.tf index 18e9873..8d0c7b9 100644 --- a/cluster/eks.tf +++ b/cluster/eks.tf @@ -53,7 +53,7 @@ module "eks" { { key : "dmz-pod", operator : "Equal", - value : "false", + value : "yes", effect : "NoExecute" } ], @@ -126,9 +126,10 @@ module "eks" { # Do we need this in the general template? taints = [{ - key = "dmz-pod" - value = "false" - effect = "NO_EXECUTE" + key = "dmz-pod" + operator = "Equal" + value = "yes" + effect = "NO_EXECUTE" }] instance_types = var.instance_types diff --git a/config/karpenter.tf b/config/karpenter.tf index 8822287..9c00207 100644 --- a/config/karpenter.tf +++ b/config/karpenter.tf @@ -50,6 +50,32 @@ resource "helm_release" "karpenter" { name = "settings.aws.interruptionQueueName" value = module.karpenter[0].queue_name } + + set { + name = "replicas" + value = 1 # The initial value should match var.dmz_node_size["desired"] defined in cluster/variables.tf + } + + set { + name = "tolerations[0].key" + value = "dmz-pod" + } + + set { + name = "tolerations[0].value" + value = "yes" + } + + set { + name = "tolerations[0].operator" + value = "Equal" + } + + set { + name = "tolerations[0].effect" + value = "NoExecute" + } + } resource "kubectl_manifest" "karpenter_provisioner" {