77 lines
2.0 KiB
HCL
77 lines
2.0 KiB
HCL
variable "project_domain" {
|
|
type = string
|
|
description = <<-EOT
|
|
The project domain. An fqdn, eg. "test.example.com".
|
|
EOT
|
|
}
|
|
variable "zone" {
|
|
type = string
|
|
description = <<-EOT
|
|
The zone within the domain.
|
|
eg. if the domain is "test.example.com", then this should be "example.com"
|
|
EOT
|
|
}
|
|
variable "zone_id" {
|
|
type = string
|
|
description = <<-EOT
|
|
The ID of the zone within the domain.
|
|
eg. if the domain is "test.example.com", then the zone should be "example.com"
|
|
The ID of that zone.
|
|
EOT
|
|
}
|
|
variable "project_cert_name" {
|
|
type = string
|
|
description = <<-EOT
|
|
The project's cert name
|
|
EOT
|
|
default = ""
|
|
}
|
|
variable "project_cert_key_id" {
|
|
type = string
|
|
description = <<-EOT
|
|
The key name to retrieve the project's cert's private key from AWS
|
|
EOT
|
|
default = ""
|
|
}
|
|
variable "path" {
|
|
type = string
|
|
description = <<-EOT
|
|
The path where we will place the terraform config to deploy.
|
|
EOT
|
|
default = ""
|
|
}
|
|
variable "cert_manager_version" {
|
|
type = string
|
|
description = <<-EOT
|
|
The version of cert manager to install.
|
|
EOT
|
|
}
|
|
variable "configure_cert_manager" {
|
|
type = bool
|
|
description = <<-EOT
|
|
Whether or not to configure cert manager with AWS access keys.
|
|
If left false, we will use the certificate generated by Terraform with the cluster.
|
|
EOT
|
|
default = false
|
|
}
|
|
variable "cert_manager_configuration" {
|
|
type = object({
|
|
aws_region = string
|
|
aws_session_token = string
|
|
aws_access_key_id = string
|
|
aws_secret_access_key = string
|
|
})
|
|
description = <<-EOT
|
|
The AWS access key information necessary to configure cert-manager.
|
|
These will be added as environment variables to configure Cert Manager Ambient Credentials.
|
|
https://cert-manager.io/docs/configuration/acme/dns01/route53/#ambient-credentials
|
|
EOT
|
|
default = {
|
|
aws_region = ""
|
|
aws_session_token = ""
|
|
aws_access_key_id = ""
|
|
aws_secret_access_key = ""
|
|
}
|
|
sensitive = true
|
|
}
|