Skip to main content

Module: redshift-cluster

This is terraform-example-module project provides all the scaffolding for a typical well-built Cloud Posse module. It's a template repository you can use when creating new repositories.

Usage

For a complete example, see examples/complete.

For automated tests of the complete example using bats and Terratest (which tests and deploys the example on AWS), see test.

module "vpc" {
source = "cloudposse/vpc/aws"
# Cloud Posse recommends pinning every module to a specific version
# version = "x.x.x"

ipv4_primary_cidr_block = "172.19.0.0/16"

context = module.this.context
}

module "subnet" {
source = "cloudposse/dynamic-subnets/aws"
# Cloud Posse recommends pinning every module to a specific version
# version = "x.x.x"

availability_zones = var.availability_zones
vpc_id = module.vpc.vpc_id
igw_id = [module.vpc.igw_id]
ipv4_cidr_block = module.vpc.vpc_cidr_block
nat_gateway_enabled = false
nat_instance_enabled = false

context = module.this.context
}

module "security_group" {
source = "cloudposse/security-group/aws"
# Cloud Posse recommends pinning every module to a specific version
# version = "x.x.x"

vpc_id = module.vpc.vpc_id

rules = [
{
type = "ingress"
from_port = var.port
to_port = var.port
protocol = "all"
cidr_blocks = ["0.0.0.0/0"]
},
{
type = "egress"
from_port = 0
to_port = 0
protocol = "all"
cidr_blocks = ["0.0.0.0/0"]
}
]

context = module.this.context
}

module "redshift_cluster" {
source = "cloudposse/redshift-cluster/aws"
# Cloud Posse recommends pinning every module to a specific version
# version = "x.x.x"

subnet_ids = module.subnet.private_subnet_ids
vpc_security_groups = [module.vpc.vpc_default_security_group_id, module.security_group.id]

admin_user = var.admin_user
admin_password = var.admin_password
database_name = var.database_name
node_type = var.node_type
cluster_type = var.cluster_type
engine_version = var.engine_version
publicly_accessible = var.publicly_accessible
allow_version_upgrade = var.allow_version_upgrade

context = module.this.context
}

Examples

Here is an example of using this module:

Requirements

NameVersion
terraform>= 0.14
aws>= 5.0

Providers

NameVersion
aws>= 5.0

Modules

NameSourceVersion
thiscloudposse/label/null0.25.0

Resources

NameType
aws_redshift_cluster.defaultresource
aws_redshift_parameter_group.defaultresource
aws_redshift_subnet_group.defaultresource

Inputs

NameDescriptionTypeDefaultRequired
additional_tag_mapAdditional key-value pairs to add to each map in tags_as_list_of_maps. Not added to tags or id.
This is for some rare cases where resources want additional configuration of tags
and therefore take a list of maps with tag key, value, and additional configuration.
map(string){}no
admin_passwordPassword for the master DB user. Required unless a snapshot_identifier is providedstring""no
admin_userUsername for the master DB user. Required unless a snapshot_identifier is providedstring"admin"no
allow_version_upgradeWhether or not to enable major version upgrades which are applied during the maintenance window to the Amazon Redshift engine that is running on the clusterboolfalseno
attributesID element. Additional attributes (e.g. workers or cluster) to add to id,
in the order they appear in the list. New attributes are appended to the
end of the list. The elements of the list are joined by the delimiter
and treated as a single ID element.
list(string)[]no
automated_snapshot_retention_periodThe number of days that automated snapshots are retained. If the value is 0, automated snapshots are disablednumber1no
availability_zoneOptional parameter to place Amazon Redshift cluster instances in a specific availability zone. If left empty, will place randomlystringnullno
availability_zone_relocation_enabledWhether or not the cluster can be relocated to another availability zone, either automatically by AWS or when requested. Available for use on clusters from the RA3 instance familyboolfalseno
cluster_identifierThe Redshift Cluster Identifier. Must be a lower case string. Will use generated label ID if not suppliedstring""no
cluster_parametersList of Redshift parameters to apply
list(object({
name = string
value = string
}))
[]no
cluster_typeThe cluster type to use. Either single-node or multi-nodestring"single-node"no
contextSingle object for setting entire context at once.
See description of individual variables for details.
Leave string and numeric variables as null to use default value.
Individual variable settings (non-null) override settings in context object,
except for attributes, tags, and additional_tag_map, which are merged.
any
{
"additional_tag_map": {},
"attributes": [],
"delimiter": null,
"descriptor_formats": {},
"enabled": true,
"environment": null,
"id_length_limit": null,
"label_key_case": null,
"label_order": [],
"label_value_case": null,
"labels_as_tags": [
"unset"
],
"name": null,
"namespace": null,
"regex_replace_chars": null,
"stage": null,
"tags": {},
"tenant": null
}
no
database_nameThe name of the first database to be created when the cluster is createdstring"dev"no
delimiterDelimiter to be used between ID elements.
Defaults to - (hyphen). Set to "" to use no delimiter at all.
stringnullno
descriptor_formatsDescribe additional descriptors to be output in the descriptors output map.
Map of maps. Keys are names of descriptors. Values are maps of the form
{<br/> format = string<br/> labels = list(string)<br/>}
(Type is any so the map values can later be enhanced to provide additional options.)
format is a Terraform format string to be passed to the format() function.
labels is a list of labels, in order, to pass to format() function.
Label values will be normalized before being passed to format() so they will be
identical to how they appear in id.
Default is {} (descriptors output will be empty).
any{}no
elastic_ipThe Elastic IP (EIP) address for the clusterstringnullno
enabledSet to false to prevent the module from creating any resourcesboolnullno
encryptedSpecifies whether the cluster is encrypted at restboolfalseno
engine_versionThe version of the Amazon Redshift engine to use. See https://docs.aws.amazon.com/redshift/latest/mgmt/cluster-versions.htmlstring"1.0"no
enhanced_vpc_routingIf true , enhanced VPC routing is enabledboolfalseno
environmentID element. Usually used for region e.g. 'uw2', 'us-west-2', OR role 'prod', 'staging', 'dev', 'UAT'stringnullno
final_snapshot_identifierThe identifier of the final snapshot that is to be created immediately before deleting the cluster. If this parameter is provided, skip_final_snapshot must be falsestringnullno
iam_rolesA list of IAM Role ARNs to associate with the cluster. A maximum of 10 can be associated to the cluster at any timelist(string)[]no
id_length_limitLimit id to this many characters (minimum 6).
Set to 0 for unlimited length.
Set to null for keep the existing setting, which defaults to 0.
Does not affect id_full.
numbernullno
kms_key_arnThe ARN for the KMS encryption key. When specifying kms_key_arn, encrypted needs to be set to truestringnullno
label_key_caseControls the letter case of the tags keys (label names) for tags generated by this module.
Does not affect keys of tags passed in via the tags input.
Possible values: lower, title, upper.
Default value: title.
stringnullno
label_orderThe order in which the labels (ID elements) appear in the id.
Defaults to ["namespace", "environment", "stage", "name", "attributes"].
You can omit any of the 6 labels ("tenant" is the 6th), but at least one must be present.
list(string)nullno
label_value_caseControls the letter case of ID elements (labels) as included in id,
set as tag values, and output by this module individually.
Does not affect values of tags passed in via the tags input.
Possible values: lower, title, upper and none (no transformation).
Set this to title and set delimiter to "" to yield Pascal Case IDs.
Default value: lower.
stringnullno
labels_as_tagsSet of labels (ID elements) to include as tags in the tags output.
Default is to include all labels.
Tags with empty values will not be included in the tags output.
Set to [] to suppress all generated tags.
Notes:
The value of the name tag, if included, will be the id, not the name.
Unlike other null-label inputs, the initial setting of labels_as_tags cannot be
changed in later chained modules. Attempts to change it will be silently ignored.
set(string)
[
"default"
]
no
logging_bucket_nameThe name of an existing S3 bucket where the log files are to be stored. Must be in the same region as the cluster and the cluster must have read bucket and put object permissionsstringnullno
logging_enabledIf true, enables logging information such as queries and connection attempts, for the specified Amazon Redshift clusterboolfalseno
logging_s3_key_prefixThe prefix applied to the log file namesstringnullno
nameID element. Usually the component or solution name, e.g. 'app' or 'jenkins'.
This is the only ID element not also included as a tag.
The "name" tag is set to the full id string. There is no tag with the value of the name input.
stringnullno
namespaceID element. Usually an abbreviation of your organization name, e.g. 'eg' or 'cp', to help ensure generated IDs are globally uniquestringnullno
node_typeThe node type to be provisioned for the cluster. See https://docs.aws.amazon.com/redshift/latest/mgmt/working-with-clusters.html#working-with-clusters-overviewstring"dc2.large"no
number_of_nodesThe number of compute nodes in the cluster. This parameter is required when the ClusterType parameter is specified as multi-nodenumber1no
owner_accountThe AWS customer account used to create or copy the snapshot. Required if you are restoring a snapshot you do not own, optional if you own the snapshotstringnullno
portThe port number on which the cluster accepts incoming connectionsnumber5439no
preferred_maintenance_windowWeekly time range during which system maintenance can occur, in UTC. Format: ddd:hh24:mi-ddd:hh24:mistringnullno
publicly_accessibleIf true, the cluster can be accessed from a public networkboolfalseno
regex_replace_charsTerraform regular expression (regex) string.
Characters matching the regex will be removed from the ID elements.
If not set, "/[^a-zA-Z0-9-]/" is used to remove all characters other than hyphens, letters and digits.
stringnullno
skip_final_snapshotDetermines whether a final snapshot of the cluster is created before Amazon Redshift deletes the clusterbooltrueno
snapshot_cluster_identifierThe name of the cluster the source snapshot was created fromstringnullno
snapshot_identifierThe name of the snapshot from which to create the new clusterstringnullno
stageID element. Usually used to indicate role, e.g. 'prod', 'staging', 'source', 'build', 'test', 'deploy', 'release'stringnullno
subnet_idsList of VPC subnet IDslist(string)n/ayes
tagsAdditional tags (e.g. {'BusinessUnit': 'XYZ'}).
Neither the tag keys nor the tag values will be modified by this module.
map(string){}no
tenantID element _(Rarely used, not included by default)_. A customer identifier, indicating who this instance of a resource is forstringnullno
vpc_security_group_idsA list of Virtual Private Cloud (VPC) security groups to be associated with the cluster. Used for EC2-VPC platformlist(string)[]no

Outputs

NameDescription
arnAmazon Resource Name (ARN) of cluster
cluster_identifierThe Cluster Identifier
cluster_parameter_group_nameThe name of the parameter group to be associated with this cluster
cluster_revision_numberThe specific revision number of the database in the cluster
cluster_subnet_group_nameThe name of a cluster subnet group to be associated with this cluster
cluster_typeThe cluster type
database_nameThe name of the default database in the Cluster
dns_nameThe DNS name of the cluster
endpointThe connection endpoint
idThe Redshift Cluster ID
node_typeThe type of nodes in the cluster
portThe Port the cluster responds on
redshift_parameter_group_arnAmazon Resource Name (ARN) of the Redshift parameter group
redshift_parameter_group_idThe Redshift parameter group ID
redshift_subnet_group_arnAmazon Resource Name (ARN) of the Redshift Subnet group name
redshift_subnet_group_idThe Redshift Subnet group ID
vpc_security_group_idsThe VPC security group IDs associated with the cluster