Linode Kubernetes Engine Cluster
Production LKE cluster with autoscaling node pools, HA control plane, disk encryption, ACL, and optional Enterprise tier.
Verification
Plan-validatedPassed: module logic verified on a mocked plan - inputs, validation rules, conditional creation and outputs resolve (no real provider, no cloud).
Conformance
- Static validation (fmt · validate · tflint)
- Security scan clean (Checkov)
- Plan tests (mocked: validation rules · outputs)
Provenance
- SHA-256 checksum
- Cosign signature
Functional
- Live test pending (no cloud run yet)
Last verified 2026-06-28 · how we verify
Verify this download
cosign · sha-256Don't take our word for it. Every release is signed with cosign - check the bytes against our pinned public key before you trust them.
# 1. Our pinned public key - fetch once, trust out-of-band
curl -O https://www.iac-bazaar.com/cosign.pub
# 2. This module's Sigstore bundle
curl -o linode-lke-cluster-1.0.0.sigstore.json \
https://www.iac-bazaar.com/api/artifacts/linode-lke-cluster/signature
# 3. Verify the tarball you downloaded
cosign verify-blob \
--key cosign.pub \
--bundle linode-lke-cluster-1.0.0.sigstore.json \
linode-lke-cluster-1.0.0.tar.gz
# → Verified OK
# 4. (optional) confirm the checksum too
echo "5d3c5b0fd1a5c705f83532da5b8af29375b57273f6031b0377a46f1b2c993bbd linode-lke-cluster-1.0.0.tar.gz" | sha256sum -cUse it from the registry
terraform · opentofumodule "lke_cluster" {
source = "www.iac-bazaar.com/iac-bazaar/linode-lke-cluster/linode"
version = "1.0.0"
}Paid module — needs a purchase (or a subscription that covers it) plus a registry token from /account/tokens. Full setup: registry docs.
Inputs & outputs
Create a free account to read this module's contract
The declared contract — every input name, type, default and description, plus every output — is shown to signed-in accounts, not to anonymous visitors.
A free account sees the contract of every Free module. This one is Premium, so its contract unlocks when you buy it.
Documentation
linode-lke-cluster
Production LKE cluster with autoscaling node pools, HA control plane, disk
encryption, ACL, and optional Enterprise tier. Works with Terraform and
OpenTofu (>= 1.6), Linode provider >= 3.14, < 4.0.
Secure / production defaults:
- HA control plane on by default (99.99% SLA; the standard-tier control plane itself is free, HA is billed)
- Control-plane ACL support — lock the Kubernetes API to your CIDRs; the module refuses an enabled ACL with an empty address list (lockout guard)
- Node pools with LKE autoscaler, Kubernetes labels, and taints; pool disks use Local Disk Encryption automatically in LDE-capable regions
- Two pool lifecycles: inline
poolblocks on the cluster and standalonelinode_lke_node_poolresources, withexternal_pool_tagswired automatically so they never fight - LKE Enterprise tier gated behind
tier = "enterprise"(flat monthly platform fee + LA/regional availability — never enabled by accident)
Requirements
- Terraform or OpenTofu
>= 1.6 linode/linodeprovider>= 3.14, < 4.0- Inline pool blocks are positional: treat
node_poolsmap keys as stable identifiers — renaming or reordering keys recreates pools. Useexternal_node_poolsfor pools you expect to churn. - HA cannot be turned off once enabled;
k8s_versionupgrades recycle nodes.
License
Commercial — IaC Bazaar EULA. © IaC Bazaar. Original work (not derived from a third-party module).
Usage code & full reference unlock after purchase
The complete copy-paste usage, the full input/output reference, and operational notes ship with your licence - shown here and bundled in the download.
- Usage
- Inputs
- Outputs
Related modules
Alibaba Cloud ACK Cluster
Managed ACK Kubernetes with node pools, VPC integration, and RAM roles.
Azure Kubernetes Service Cluster
Hardened AKS with system/user node pools, workload identity, Entra RBAC integration, Azure CNI overlay, and Container Insights wired in.
Civo Kubernetes Cluster
Fast-launch k3s cluster with node pools, firewall rules, and network.
DigitalOcean DOKS Cluster
Production DOKS with node pools, VPC, registry hookup, and maintenance windows in one apply.
EKS Cluster with Managed Node Groups
Opinionated EKS cluster with node groups, core add-ons, Pod Identity, and KMS secret encryption.
Exoscale SKS Cluster
SKS Kubernetes with node pools, security groups, and anti-affinity.