From 7f025604f3d8658c4a4fd07e0a8e8d0f713a0a30 Mon Sep 17 00:00:00 2001
From: David Shafer <dshafer@internet2.edu>
Date: Wed, 1 Aug 2018 14:16:49 -0500
Subject: [PATCH] Working on EKS module

---
 outputs.tf                 |  4 ++--
 providers.tf               |  3 ++-
 variables.tf               | 17 +++++++++++------
 workstation-external-ip.tf | 15 +++++++--------
 4 files changed, 22 insertions(+), 17 deletions(-)

diff --git a/outputs.tf b/outputs.tf
index d2c2273..8795605 100644
--- a/outputs.tf
+++ b/outputs.tf
@@ -4,8 +4,6 @@
 
 locals {
   config_map_aws_auth = <<CONFIGMAPAWSAUTH
-
-
 apiVersion: v1
 kind: ConfigMap
 metadata:
@@ -49,6 +47,8 @@ users:
         - "token"
         - "-i"
         - "${var.cluster_name}"
+        - "-r"
+        - "${var.role_arn}"
 KUBECONFIG
 }
 
diff --git a/providers.tf b/providers.tf
index 57d43ac..75c9019 100644
--- a/providers.tf
+++ b/providers.tf
@@ -16,4 +16,5 @@ data "aws_availability_zones" "available" {}
 # icanhazip.com to determine local workstation external IP
 # to open EC2 Security Group access to the Kubernetes cluster.
 # See workstation-external-ip.tf for additional information.
-provider "http" {}
+#provider "http" {}
+
diff --git a/variables.tf b/variables.tf
index 7b93081..2687fc5 100644
--- a/variables.tf
+++ b/variables.tf
@@ -2,12 +2,6 @@
 # Variables Configuration
 #
 
-variable "cluster_name" {
-  type        = "string"
-  default     = "cluster"
-  description = "Kubernetes cluster name"
-}
-
 variable "account_id" {
   type        = "string"
   description = "Account ID containing IAM users to be mapped into the cluster"
@@ -18,3 +12,14 @@ variable "availability_zones" {
   default     = ["us-east-1a", "us-east-1b"]
   description = "List of 2 availability zones in which to create the worker nodes"
 }
+
+variable "cluster_name" {
+  type        = "string"
+  default     = "cluster"
+  description = "Kubernetes cluster name"
+}
+
+variable "role_arn" {
+  type = "string"
+  description = "IAM role to be used when accessing the cluster"
+}
diff --git a/workstation-external-ip.tf b/workstation-external-ip.tf
index adb757b..3718f56 100644
--- a/workstation-external-ip.tf
+++ b/workstation-external-ip.tf
@@ -7,12 +7,11 @@
 # configure inbound EC2 Security Group access
 # to the Kubernetes cluster.
 #
-
-data "http" "workstation-external-ip" {
-  url = "http://ipv4.icanhazip.com"
-}
-
+#data "http" "workstation-external-ip" {
+#  url = "http://ipv4.icanhazip.com"
+#}
 # Override with variable or hardcoded value if necessary
-locals {
-  workstation-external-cidr = "${chomp(data.http.workstation-external-ip.body)}/32"
-}
+#locals {
+#  workstation-external-cidr = "${chomp(data.http.workstation-external-ip.body)}/32"
+#}
+