generated from cloudposse/terraform-example-module
-
-
Notifications
You must be signed in to change notification settings - Fork 9
/
variables.tf
284 lines (237 loc) · 8.67 KB
/
variables.tf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
## eks_iam
variable "iam_role_enabled" {
type = bool
description = "Whether to create an IAM role. Setting this to `true` will also replace any occurrences of `{service_account_role_arn}` in `var.values_template_path` with the ARN of the IAM role created by this module."
default = false
}
## eks_iam_policy
variable "iam_source_json_url" {
type = string
description = "IAM source json policy to download. This will be used as the `source_json` meaning the `var.iam_policy_statements` and `var.iam_policy_statements_template_path` can override it."
default = null
}
variable "iam_policy_statements" {
type = any
description = "IAM policy for the service account. Required if `var.iam_role_enabled` is `true`. This will not do variable replacements. Please see `var.iam_policy_statements_template_path`."
default = {}
}
## eks_iam_role
variable "aws_account_number" {
type = string
description = "AWS account number of EKS cluster owner"
default = null
}
variable "aws_partition" {
type = string
description = "AWS partition: `aws`, `aws-cn`, or `aws-us-gov`. Applicable when `var.iam_role_enabled` is `true`."
default = "aws"
}
variable "eks_cluster_oidc_issuer_url" {
type = string
description = "OIDC issuer URL for the EKS cluster (initial \"https://\" may be omitted)"
default = null
}
variable "service_account_name" {
type = string
description = "Kubernetes ServiceAccount name. Required if `var.iam_role_enabled` is `true`."
default = null
}
variable "service_account_namespace" {
type = string
description = "Kubernetes Namespace where service account is deployed. Required if `var.iam_role_enabled` is `true`."
default = null
}
### helm_release
variable "chart" {
type = string
description = "Chart name to be installed. The chart name can be local path, a URL to a chart, or the name of the chart if `repository` is specified. It is also possible to use the `<repository>/<chart>` format here if you are running Terraform on a system that the repository has been added to with `helm repo add` but this is not recommended."
}
variable "description" {
type = string
description = "Release description attribute (visible in the history)."
default = null
}
variable "devel" {
type = bool
description = "Use chart development versions, too. Equivalent to version `>0.0.0-0`. If version is set, this is ignored."
default = null
}
variable "repository" {
type = string
description = "Repository URL where to locate the requested chart."
default = null
}
variable "repository_ca_file" {
type = string
description = "The Repositories CA file."
default = null
}
variable "repository_cert_file" {
type = string
description = "The repositories cert file."
default = null
}
variable "repository_key_file" {
type = string
description = "The repositories cert key file."
default = null
}
variable "repository_password" {
type = string
description = "Password for HTTP basic authentication against the repository."
default = null
}
variable "repository_username" {
type = string
description = "Username for HTTP basic authentication against the repository."
default = null
}
variable "chart_version" {
type = string
description = "Specify the exact chart version to install. If this is not specified, the latest version is installed."
default = null
}
variable "create_namespace" {
type = bool
description = "Create the namespace if it does not yet exist. Defaults to `false`."
default = null
}
variable "kubernetes_namespace" {
type = string
description = "The namespace to install the release into. Defaults to `default`."
default = null
}
variable "atomic" {
type = bool
description = "If set, installation process purges chart on fail. The wait flag will be set automatically if atomic is used. Defaults to `false`."
default = null
}
variable "cleanup_on_fail" {
type = bool
description = "Allow deletion of new resources created in this upgrade when upgrade fails. Defaults to `false`."
default = null
}
variable "dependency_update" {
type = bool
description = "Runs helm dependency update before installing the chart. Defaults to `false`."
default = null
}
variable "disable_openapi_validation" {
type = bool
description = "If set, the installation process will not validate rendered templates against the Kubernetes OpenAPI Schema. Defaults to `false`."
default = null
}
variable "disable_webhooks" {
type = bool
description = "Prevent hooks from running. Defaults to `false`."
default = null
}
variable "force_update" {
type = bool
description = "Force resource update through delete/recreate if needed. Defaults to `false`."
default = null
}
variable "keyring" {
type = string
description = "Location of public keys used for verification. Used only if `verify` is true. Defaults to `/.gnupg/pubring.gpg` in the location set by `home`."
default = null
}
variable "lint" {
type = bool
description = "Run the helm chart linter during the plan. Defaults to `false`."
default = null
}
variable "max_history" {
type = number
description = "Maximum number of release versions stored per release. Defaults to `0` (no limit)."
default = null
}
variable "recreate_pods" {
type = bool
description = "Perform pods restart during upgrade/rollback. Defaults to `false`."
default = null
}
variable "render_subchart_notes" {
type = bool
description = "If set, render subchart notes along with the parent. Defaults to `true`."
default = null
}
variable "replace" {
type = bool
description = "Re-use the given name, even if that name is already used. This is unsafe in production. Defaults to `false`."
default = null
}
variable "reset_values" {
type = bool
description = "When upgrading, reset the values to the ones built into the chart. Defaults to `false`."
default = null
}
variable "reuse_values" {
type = bool
description = "When upgrading, reuse the last release's values and merge in any overrides. If `reset_values` is specified, this is ignored. Defaults to `false`."
default = null
}
variable "skip_crds" {
type = bool
description = "If set, no CRDs will be installed. By default, CRDs are installed if not already present. Defaults to `false`."
default = null
}
variable "timeout" {
type = number
description = "Time in seconds to wait for any individual kubernetes operation (like Jobs for hooks). Defaults to `300` seconds."
default = null
}
variable "values" {
type = any
description = "List of values in raw yaml to pass to helm. Values will be merged, in order, as Helm does with multiple `-f` options."
default = null
}
variable "verify" {
type = bool
description = "Verify the package before installing it. Helm uses a provenance file to verify the integrity of the chart; this must be hosted alongside the chart. For more information see the Helm Documentation. Defaults to `false`."
default = null
}
variable "wait" {
type = bool
description = "Will wait until all resources are in a ready state before marking the release as successful. It will wait for as long as `timeout`. Defaults to `true`."
default = null
}
variable "wait_for_jobs" {
type = bool
description = "If wait is enabled, will wait until all Jobs have been completed before marking the release as successful. It will wait for as long as `timeout`. Defaults to `false`."
default = null
}
variable "set" {
type = list(object({
name = string
value = string
type = string
}))
description = "Value block with custom values to be merged with the values yaml."
default = []
}
variable "set_sensitive" {
type = list(object({
name = string
value = string
type = string
}))
description = "Value block with custom sensitive values to be merged with the values yaml that won't be exposed in the plan's diff."
default = []
}
variable "postrender_binary_path" {
type = string
description = "Relative or full path to command binary."
default = null
}
### EKS Addons
variable "addons" {
type = list(object({
addon_name = string
addon_version = string
resolve_conflicts = string
service_account_role_arn = string
}))
description = "Manages [`aws_eks_addon`](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/eks_addon) resources"
default = []
}