OKE Managed Kubernetes Cluster
Enhanced OKE cluster with managed + virtual node pools, private API endpoint, NSGs, addons and OIDC - flagship OCI workload platform.
Compare Managed Kubernetes across clouds →
Part of: OCI Production Landing Zone
Verification
Plan-validatedPassed: module logic verified on a mocked plan - inputs, validation rules, conditional creation and outputs resolve (no real provider, no cloud).
Conformance
- Static validation (fmt · validate · tflint)
- Security scan clean (Checkov)
- Plan tests (mocked: validation rules · outputs)
Provenance
- SHA-256 checksum
- Cosign signature
Functional
- Live test pending (no cloud run yet)
Last verified 2026-06-28 · how we verify
Verify this download
cosign · sha-256Don't take our word for it. Every release is signed with cosign - check the bytes against our pinned public key before you trust them.
# 1. Our pinned public key - fetch once, trust out-of-band
curl -O https://www.iac-bazaar.com/cosign.pub
# 2. This module's Sigstore bundle
curl -o oci-oke-1.0.0.sigstore.json \
https://www.iac-bazaar.com/api/artifacts/oci-oke/signature
# 3. Verify the tarball you downloaded
cosign verify-blob \
--key cosign.pub \
--bundle oci-oke-1.0.0.sigstore.json \
oci-oke-1.0.0.tar.gz
# → Verified OK
# 4. (optional) confirm the checksum too
echo "e1c9d744d3984690e47aa672fb6d7893b424f96474856918a01ead686f546c0e oci-oke-1.0.0.tar.gz" | sha256sum -cUse it from the registry
terraform · opentofumodule "oke" {
source = "www.iac-bazaar.com/iac-bazaar/oci-oke/oci"
version = "1.0.0"
}Paid module — needs a purchase (or a subscription that covers it) plus a registry token from /account/tokens. Full setup: registry docs.
Inputs & outputs
Create a free account to read this module's contract
The declared contract — every input name, type, default and description, plus every output — is shown to signed-in accounts, not to anonymous visitors.
A free account sees the contract of every Free module. This one is Premium, so its contract unlocks when you buy it.
Documentation
oci-oke
Enhanced OKE cluster with managed + virtual node pools, private API endpoint,
NSGs, addons and OIDC — flagship OCI workload platform. Works with
Terraform and OpenTofu (>= 1.6), OCI provider >= 8.0, < 9.0.
Secure defaults:
- Kubernetes API endpoint is private (
endpoint_public_ip_enabled = false) - Kubernetes dashboard, Tiller and PodSecurityPolicy admission all disabled
- In-transit encryption for persistent volumes on by default per node pool
- Optional KMS key for etcd secret encryption and image-signature enforcement
- Nodes are cordoned & drained on scale-down (eviction grace, no force-delete)
Requirements
- Terraform or OpenTofu
>= 1.6 - Provider
oracle/oci>= 8.0, < 9.0
License
Commercial — IaC Bazaar EULA. © IaC Bazaar. Original work (not derived from a third-party module).
Usage code & full reference unlock after purchase
The complete copy-paste usage, the full input/output reference, and operational notes ship with your licence - shown here and bundled in the download.
- Usage
- Inputs
- Outputs
- Notes
Related modules
Alibaba Cloud ACK Cluster
Managed ACK Kubernetes with node pools, VPC integration, and RAM roles.
Azure Kubernetes Service Cluster
Hardened AKS with system/user node pools, workload identity, Entra RBAC integration, Azure CNI overlay, and Container Insights wired in.
Civo Kubernetes Cluster
Fast-launch k3s cluster with node pools, firewall rules, and network.
DigitalOcean DOKS Cluster
Production DOKS with node pools, VPC, registry hookup, and maintenance windows in one apply.
EKS Cluster with Managed Node Groups
Opinionated EKS cluster with node groups, core add-ons, Pod Identity, and KMS secret encryption.
Exoscale SKS Cluster
SKS Kubernetes with node pools, security groups, and anti-affinity.