-
Notifications
You must be signed in to change notification settings - Fork 0
/
variables.tf
178 lines (149 loc) · 3.84 KB
/
variables.tf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
variable "cluster_name" {
type = string
}
variable "cluster_version" {
type = string
default = "1.25"
}
variable "cluster_endpoint_public_access" {
type = bool
default = true
}
variable "cluster_endpoint_public_access_cidrs" {
type = list(string)
default = []
}
## VPC
variable "vpc_id" {
type = string
}
variable "vpc_subnets" {
type = list(string)
}
## Addons
variable "enable_coredns" {
type = bool
default = false
description = "CoreDNS addon"
}
variable "enable_kube_proxy" {
type = bool
default = false
description = "Kube Proxy addon"
}
variable "enable_vpc_cni" {
type = bool
default = false
description = "VPC CNI addon"
}
variable "enable_aws_ebs_csi_driver" {
type = bool
default = false
description = "AWS EBS CSI driver"
}
variable "enable_aws_load_balancer_controller" {
type = bool
default = false
description = "AWS Load Balancer controller"
}
variable "enable_external_dns" {
type = bool
default = false
description = "ExternalDNS addon"
}
## IRSA roles
variable "create_aws_ebs_csi_driver_irsa_role" {
type = bool
default = false
description = "AWS EBS CSI driver IRSA role"
}
variable "create_aws_load_balancer_controller_irsa_role" {
type = bool
default = false
description = "AWS Load Balancer controller IRSA role"
}
variable "create_external_dns_irsa_role" {
type = bool
default = false
description = "ExternalDNS IRSA role"
}
variable "additional_irsa_roles" {
type = list(object({
name = string
namespace = string
role_policy_arns = optional(map(string))
}))
default = []
}
# Karpenter
variable "enable_karpenter" {
type = bool
default = false
description = "Karpenter"
}
variable "create_karpenter_service_account" {
type = bool
default = false
description = "Karpenter Service Account"
}
## Cluster roles
variable "cluster_roles" {
type = map(any)
default = {}
description = "Map of cluster roles"
}
## KMS
variable "kms_key_owners" {
type = list(string)
default = []
description = "A list of IAM ARNs for those who will have full key permissions (`kms:*`)"
}
variable "kms_key_administrators" {
type = list(string)
default = []
description = "A list of IAM ARNs for [key administrators](https://docs.aws.amazon.com/kms/latest/developerguide/key-policy-default.html#key-policy-default-allow-administrators). If no value is provided, the current caller identity is used to ensure at least one key admin is available"
}
variable "kms_key_service_users" {
type = list(string)
default = []
description = "A list of IAM ARNs for [key service users](https://docs.aws.amazon.com/kms/latest/developerguide/key-policy-default.html#key-policy-service-integration)"
}
variable "kms_key_users" {
type = list(string)
default = []
description = "A list of IAM ARNs for [key users](https://docs.aws.amazon.com/kms/latest/developerguide/key-policy-default.html#key-policy-default-allow-users)"
}
## Node Groups
variable "eks_production_node_group" {
type = map(any)
default = {}
description = "Map of EKS managed production node group definitions to create"
}
variable "eks_staging_node_group" {
type = map(any)
default = {}
description = "Map of EKS managed staging node group definitions to create"
}
## AWS Auth Configmap Roles
variable "aws_auth_roles" {
type = list(any)
default = []
description = ""
}
## Tags
variable "cluster_security_group_tags" {
type = map(string)
default = {}
}
variable "node_security_group_tags" {
type = map(string)
default = {}
}
variable "cluster_tags" {
type = map(string)
default = {}
}
variable "tags" {
type = map(string)
default = {}
}