n8n-eks-cluster.ts

#!/usr/bin/env node
import 'source-map-support/register'
import { App, aws_ec2, aws_eks } from 'aws-cdk-lib'
import {
  addons,
  AckServiceName,
  MngClusterProvider,
  CreateCertificateProvider,
  EksBlueprint,
  LookupHostedZoneProvider,
} from '@aws-quickstart/eks-blueprints'
import assert = require('assert')

const domainName = process.env.DOMAIN_NAME ?? 'aws.8n8.io'
const region = process.env.AWS_REGION ?? 'eu-central-1'

assert(domainName, 'DOMAIN_NAME env variable not set')

EksBlueprint.builder()
  .version(aws_eks.KubernetesVersion.V1_28)
  .region(region)
  .resourceProvider('hostedZone', new LookupHostedZoneProvider(domainName))
  .resourceProvider('rootCert', new CreateCertificateProvider('rootCert', domainName, 'hostedZone'))
  .resourceProvider('wildcardCert', new CreateCertificateProvider('wildcardCert', `*.${domainName}`, 'hostedZone'))
  .clusterProvider(new MngClusterProvider({
    id: 'n8n-eks-nodes',
    minSize: 8,
    maxSize: 10,
    desiredSize: 8,
    instanceTypes: [new aws_ec2.InstanceType('m5.large')],
  }))
  .addOns(
    new addons.VpcCniAddOn(),
    new addons.CoreDnsAddOn(),
    new addons.ExternalDnsAddOn({
      hostedZoneResources: ['hostedZone']
    }),
    new addons.EbsCsiDriverAddOn(),
    new addons.AwsLoadBalancerControllerAddOn(),
    new addons.NginxAddOn({
      externalDnsHostname: domainName,
      certificateResourceName: 'wildcardCert',
    }),
    new addons.MetricsServerAddOn(),
    new addons.KubeProxyAddOn(),
    new addons.AckAddOn({
      id: "rds-ack",
      serviceName: AckServiceName.RDS,
      saName: "rds-chart",
      name: "rds-chart",
      chart: "rds-chart",
      release: "rds-chart",
      version: "1.1.8",
      repository: "oci://public.ecr.aws/aws-controllers-k8s/rds-chart",
      managedPolicyName: "AmazonRDSFullAccess",
      createNamespace: true,
    }),
    // new addons.ClusterAutoScalerAddOn(),
  )
  .useDefaultSecretEncryption(true)
  .build(new App(), 'n8n-eks-cluster')


/**
 * TODO:
 * - setup CNAME for `*.domainName`
 */