Configure nOps Kubernetes Agent

provider "aws" {
  region = "us-east-1"
  alias  = "virginia"
}

data "aws_ecrpublic_authorization_token" "token" {
  provider = aws.virginia
}

provider "helm" {
  kubernetes {
    host                   = var.cluster_endpoint # Replace it with your cluster endpoint
    cluster_ca_certificate = base64decode(var.cluster_certificate_authority_data) # Replace it with your cluster certificate authority data
    exec {
      api_version = "client.authentication.k8s.io/v1beta1"
      command     = "aws"
      # This requires the awscli to be installed locally where Terraform is executed
      args = ["eks", "get-token", "--cluster-name", var.cluster_name] # Replace it with your cluster name
    }
  }
}

resource "helm_release" "nops_kubernetes_agent" {
  name                = "nops-kubernetes-agent"
  namespace           = "nops"
  create_namespace    = true
  
  repository          = "oci://public.ecr.aws/nops"
  repository_username = data.aws_ecrpublic_authorization_token.token.user_name
  repository_password = data.aws_ecrpublic_authorization_token.token.password
  description         = "Helm Chart for nOps kubernetes agent"
  chart               = "kubernetes-agent"
  version             = "0.0.69" # Ensure to update this to the latest/desired version: https://gallery.ecr.aws/nops/kubernetes-agent

  # Example to place Prometheus deployment in a on-demand node provisioned by Karpenter (THIS IS THE RECOMMENDED WAY TO RUN PROMETHEUS, Note: using double backslashes (\\) to escape the dot in karpenter.sh/capacity-type) 
  #set { 
  #  name = "prometheus.server.nodeSelector.karpenter\\.sh/capacity-type"
  #  value = "on-demand"
  #}
  
  set {
    name  = "datadog.apiKey"
    value = "<datadog_api_key>" # Get it from the nOps kubernetes agent onboarding process
  }
  
  set {
    name  = "containerInsights.enabled"
    value = "true" # Set it to true to install container insights agent to gain cost visibility in your EKS cluster
  }

  set {
    name  = "containerInsights.imageTag"
    value = "2.0.1" # Ensure to update this to the latest/desired version from [here](https://gallery.ecr.aws/nops/container-insights-agent)
  }

  set {
    name  = "containerInsights.env_variables.APP_NOPS_K8S_AGENT_CLUSTER_ARN"
    value = "<your_eks_cluster_arn>" # Get it from the nOps kubernetes agent onboarding process
  }
  
  set {
    name  = "containerInsights.env_variables.APP_AWS_S3_BUCKET"
    value = "<your_s3_bucket_name>"  # Get it from the nOps kubernetes agent onboarding process
  }
  
  set {
    name  = "karpenops.enabled"
    value = "true" # Set it to true if you have karpenter running in your EKS Cluster and want the karpenOps agent to manage your EC2NodeTemplate/NodePool
  }
  
  set {
    name  = "karpenops.image.tag"
    value = "1.23.2" # Ensure to update this to the latest/desired version: https://gallery.ecr.aws/nops/karpenops
  }
  
  set {
    name  = "karpenops.apiKey"
    value = "<your_karpenops_api_key" # Get it from the nOps kubernetes agent onboarding process
  }
  
  set {
    name  = "karpenops.clusterId"
    value = "<your_karpenops_cluster_id>"  # Get it from the nOps kubernetes agent onboarding process
  }
}

provider "aws" {
  region = "us-east-1"
  alias  = "virginia"
}

data "aws_ecrpublic_authorization_token" "token" {
  provider = aws.virginia
}

provider "helm" {
  kubernetes {
    host                   = var.cluster_endpoint # Replace it with your cluster endpoint
    cluster_ca_certificate = base64decode(var.cluster_certificate_authority_data) # Replace it with your cluster certificate authority data
    exec {
      api_version = "client.authentication.k8s.io/v1beta1"
      command     = "aws"
      # This requires the awscli to be installed locally where Terraform is executed
      args = ["eks", "get-token", "--cluster-name", var.cluster_name] # Replace it with your cluster name
    }
  }
}

module "eks_blueprints_addon" {
  source = "aws-ia/eks-blueprints-addon/aws"
  version = "~> 1.0"
  chart               = "kubernetes-agent"
  chart_version       = "0.0.69" # Ensure to update this to the latest/desired version: https://gallery.ecr.aws/nops/kubernetes-agent
  
  repository          = "oci://public.ecr.aws/nops"
  repository_username = data.aws_ecrpublic_authorization_token.token.user_name
  repository_password = data.aws_ecrpublic_authorization_token.token.password
  description         = "Helm Chart for nOps kubernetes agent"
  namespace           = "nops"
  create_namespace    = true
  set = [
    # Example to place Prometheus deployment in a on-demand node provisioned by Karpenter (THIS IS THE RECOMMENDED WAY TO RUN PROMETHEUS, Note: using double backslashes (\\) to escape the dot in karpenter.sh/capacity-type)  
    #{
    #  name  = "prometheus.server.nodeSelector.karpenter\\.sh/capacity-type"
    #  value = "on-demand"
    #},
    {
      name  = "datadog.apiKey" # Get it from the nOps kubernetes agent onboarding process  
      value = "<datadog_api_key>" # Get it from the nOps kubernetes agent onboarding process
    },
    {
      name  = "containerInsights.enabled"
      value = "true" # Set it to true to install container insights agent to gain cost visibility in your EKS cluster
    },
    {
      name  = "containerInsights.imageTag"
      value = "2.0.1" # Ensure to update this to the latest/desired version from [here](https://gallery.ecr.aws/nops/container-insights-agent)
    },
    {
      name  = "containerInsights.env_variables.APP_NOPS_K8S_AGENT_CLUSTER_ARN"
      value = "<your_eks_cluster_arn>" # Get it from the nOps kubernetes agent onboarding process
    },
    {
      name  = "containerInsights.env_variables.APP_AWS_S3_BUCKET"
      value = "<your_s3_bucket_name>" # Get it from the nOps kubernetes agent onboarding process
    },
    {
      name  = "karpenops.enabled"
      value = "true" # Set it to true if you have karpenter running in your EKS Cluster and want the karpenOps agent to manage your EC2NodeTemplate/NodePool
    },
    {
      name  = "karpenops.image.tag"
      value = "1.23.2" # Ensure to update this to the latest/desired version from [here](https://gallery.ecr.aws/nops/karpenops)
    },
    {
      name  = "karpenops.apiKey"
      value = "<your_karpenops_api_key" # Get it from the nOps kubernetes agent onboarding process
    },
    {
      name  = "karpenops.clusterId"
      value = "<your_karpenops_cluster_id>"  # Get it from the nOps kubernetes agent onboarding process
    }
  ]
}