Manage EMR on EKS with Terraform

# infra/main.tf

module “eks_blueprints” {
  source = “github.com/aws-ia/terraform-aws-eks-blueprints?ref=v4.7.0”

  cluster_name    = local.name
  cluster_version = local.eks.cluster_version

  # EKS network config
  vpc_id             = module.vpc.vpc_id
  private_subnet_ids = module.vpc.private_subnets

  cluster_endpoint_private_access = true
  cluster_endpoint_public_access  = true

  node_security_group_additional_rules = {
    ingress_self_all = {
      description = “Node to node all ports/protocols, recommended and required for Add-ons”
      protocol    = “-1”
      from_port   = 0
      to_port     = 0
      type        = “ingress”
      self        = true
    }
    egress_all = {
      description      = “Node all egress, recommended outbound traffic for Node groups”
      protocol         = “-1”
      from_port        = 0
      to_port          = 0
      type             = “egress”
      cidr_blocks      = [“0.0.0.0/0”]
      ipv6_cidr_blocks = [“::/0”]
    }
    ingress_cluster_to_node_all_traffic = {
      description                   = “Cluster API to Nodegroup all traffic, can be restricted further eg, spark-operator 8080…”
      protocol                      = “-1”
      from_port                     = 0
      to_port                       = 0
      type                          = “ingress”
      source_cluster_security_group = true
    }
  }

  # EKS manage node groups
  managed_node_groups = {
    ondemand = {
      node_group_name        = “managed-ondemand”
      instance_types         = [“m5.xlarge”]
      subnet_ids             = module.vpc.private_subnets
      max_size               = 5
      min_size               = 1
      desired_size           = 1
      create_launch_template = true
      launch_template_os     = “amazonlinux2eks”
      update_config = [{
        max_unavailable_percentage = 30
      }]
    }
  }

  # EMR on EKS
  enable_emr_on_eks = true
  emr_on_eks_teams = {
    analytics = {
      namespace               = “analytics”
      job_execution_role      = “analytics-job-execution-role”
      additional_iam_policies = [aws_iam_policy.emr_on_eks.arn]
    }
  }

  tags = local.tags
}