You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
|[aws_availability_zones.available](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/availability_zones)| data source |
133
+
|[aws_iam_policy_document.ecs_osis_access](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/iam_policy_document)| data source |
125
134
|[aws_iam_role.execution](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/iam_role)| data source |
135
+
|[aws_region.current](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/region)| data source |
126
136
|[aws_ssm_parameter.prometheus_workspace_id](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/ssm_parameter)| data source |
127
137
128
138
## Inputs
@@ -132,44 +142,62 @@ module "production_v1" {
132
142
| <aname="input_cluster_names"></a> [cluster\_names](#input\_cluster\_names)| Names of EKS clusters for application |`list(string)`| n/a | yes |
133
143
| <aname="input_deploy_role_name"></a> [deploy\_role\_name](#input\_deploy\_role\_name)| Override the name of the deploy role |`string`|`null`| no |
134
144
| <aname="input_developer_managed_secrets"></a> [developer\_managed\_secrets](#input\_developer\_managed\_secrets)| Secrets managed manually by developers |`map(list(string))`|`{}`| no |
145
+
| <aname="input_elasticsearch_enabled"></a> [elasticsearch\_enabled](#input\_elasticsearch\_enabled)| Set to true to enable creation of the Elasticsearch database |`bool`|`false`| no |
146
+
| <aname="input_es_admin_principals"></a> [es\_admin\_principals](#input\_es\_admin\_principals)| Principals allowed to peform admin actions (default: current account) |`list(string)`|`null`| no |
147
+
| <aname="input_es_application_name"></a> [es\_application\_name](#input\_es\_application\_name)| Unique name for the opensearch instance |`string`|`""`| no |
148
+
| <aname="input_es_dedicated_master_type"></a> [es\_dedicated\_master\_type](#input\_es\_dedicated\_master\_type)| Instance type of the dedicated main nodes in the cluster. |`string`| n/a | yes |
149
+
| <aname="input_es_ebs_iops"></a> [es\_ebs\_iops](#input\_es\_ebs\_iops)| Baseline input/output (I/O) performance of EBS volumes attached to data nodes |`number`|`3000`| no |
150
+
| <aname="input_es_engine_version"></a> [es\_engine\_version](#input\_es\_engine\_version)| Version of Elasticsearch to deploy. |`string`| n/a | yes |
151
+
| <aname="input_es_instance_count"></a> [es\_instance\_count](#input\_es\_instance\_count)| Number of instances in the cluster |`number`|`2`| no |
152
+
| <aname="input_es_instance_type"></a> [es\_instance\_type](#input\_es\_instance\_type)| Instance type of data nodes in the cluster. |`string`|`""`| no |
153
+
| <aname="input_es_read_principals"></a> [es\_read\_principals](#input\_es\_read\_principals)| Principals allowed to read the secret (default: current account) |`list(string)`|`null`| no |
154
+
| <aname="input_es_volume_size"></a> [es\_volume\_size](#input\_es\_volume\_size)| Size of EBS volumes attached to data nodes (in GiB). |`number`|`100`| no |
155
+
| <aname="input_es_volume_type"></a> [es\_volume\_type](#input\_es\_volume\_type)| Type of EBS volumes attached to data nodes. |`string`|`"gp3"`| no |
135
156
| <aname="input_execution_role_arns"></a> [execution\_role\_arns](#input\_execution\_role\_arns)| ARNs of execution roles allowed to manage this application |`list(string)`|`[]`| no |
136
157
| <aname="input_execution_role_names"></a> [execution\_role\_names](#input\_execution\_role\_names)| Names of execution roles allowed to manage this application |`list(string)`| <pre>[<br> "terraform-execution"<br>]</pre> | no |
158
+
| <aname="input_generate_secret_key"></a> [generate\_secret\_key](#input\_generate\_secret\_key)| Set to true to generate a secret key for the application |`bool`|`false`| no |
137
159
| <aname="input_github_branches"></a> [github\_branches](#input\_github\_branches)| GitHub branches allowed to deploy to this instance |`list(string)`| n/a | yes |
138
160
| <aname="input_github_iam_oidc_provider_arn"></a> [github\_iam\_oidc\_provider\_arn](#input\_github\_iam\_oidc\_provider\_arn)| ARN for the GitHub Actions IAM OIDC provider |`string`| n/a | yes |
139
161
| <aname="input_github_organization"></a> [github\_organization](#input\_github\_organization)| GitHub organization allowed to deploy to this instance |`string`| n/a | yes |
140
162
| <aname="input_github_repository"></a> [github\_repository](#input\_github\_repository)| GitHub repository allowed to deploy to this instance |`string`| n/a | yes |
141
163
| <aname="input_name"></a> [name](#input\_name)| Name of this application |`string`| n/a | yes |
142
164
| <aname="input_postgres_admin_username"></a> [postgres\_admin\_username](#input\_postgres\_admin\_username)| Username for the admin user |`string`|`"postgres"`| no |
143
-
| <aname="input_postgres_allocated_storage"></a> [postgres\_allocated\_storage](#input\_postgres\_allocated\_storage)| Size in GB for the database instance |`number`|n/a|yes|
165
+
| <aname="input_postgres_allocated_storage"></a> [postgres\_allocated\_storage](#input\_postgres\_allocated\_storage)| Size in GB for the database instance |`number`|`null`|no|
144
166
| <aname="input_postgres_apply_immediately"></a> [postgres\_apply\_immediately](#input\_postgres\_apply\_immediately)| Set to true to immediately apply changes and cause downtime |`bool`|`false`| no |
145
167
| <aname="input_postgres_default_database"></a> [postgres\_default\_database](#input\_postgres\_default\_database)| Name of the default database |`string`|`"postgres"`| no |
146
168
| <aname="input_postgres_enabled"></a> [postgres\_enabled](#input\_postgres\_enabled)| Set to true to enable creation of the Postgres database |`bool`|`false`| no |
147
-
| <aname="input_postgres_engine_version"></a> [postgres\_engine\_version](#input\_postgres\_engine\_version)| Version for RDS database engine |`string`|n/a|yes|
148
-
| <aname="input_postgres_identifier"></a> [postgres\_identifier](#input\_postgres\_identifier)| Unique identifier for this database |`string`|n/a|yes|
149
-
| <aname="input_postgres_instance_class"></a> [postgres\_instance\_class](#input\_postgres\_instance\_class)| Tier for the database instance |`string`|n/a|yes|
150
-
| <aname="input_postgres_max_allocated_storage"></a> [postgres\_max\_allocated\_storage](#input\_postgres\_max\_allocated\_storage)| Maximum size GB after autoscaling |`number`|n/a|yes|
169
+
| <aname="input_postgres_engine_version"></a> [postgres\_engine\_version](#input\_postgres\_engine\_version)| Version for RDS database engine |`string`|`null`|no|
170
+
| <aname="input_postgres_identifier"></a> [postgres\_identifier](#input\_postgres\_identifier)| Unique identifier for this database |`string`|`null`|no|
171
+
| <aname="input_postgres_instance_class"></a> [postgres\_instance\_class](#input\_postgres\_instance\_class)| Tier for the database instance |`string`|`null`|no|
172
+
| <aname="input_postgres_max_allocated_storage"></a> [postgres\_max\_allocated\_storage](#input\_postgres\_max\_allocated\_storage)| Maximum size GB after autoscaling |`number`|`null`|no|
151
173
| <aname="input_postgres_storage_encrypted"></a> [postgres\_storage\_encrypted](#input\_postgres\_storage\_encrypted)| Set to false to disable encryption at rest |`bool`|`true`| no |
152
174
| <aname="input_prometheus_workspace_name"></a> [prometheus\_workspace\_name](#input\_prometheus\_workspace\_name)| Name of the AMP workspace to which metrics will be written |`string`|`null`| no |
175
+
| <aname="input_read_permission_sets"></a> [read\_permission\_sets](#input\_read\_permission\_sets)| AWS IAM permission sets allowed to read application data |`list(string)`|`[]`| no |
176
+
| <aname="input_readwrite_permission_sets"></a> [readwrite\_permission\_sets](#input\_readwrite\_permission\_sets)| AWS IAM permission sets allowed to read and write application data |`list(string)`|`[]`| no |
153
177
| <aname="input_redis_enabled"></a> [redis\_enabled](#input\_redis\_enabled)| Set to true to enable creation of a Redis instance |`bool`|`false`| no |
154
-
| <aname="input_redis_name"></a> [redis\_name](#input\_redis\_name)| Name of the ElastiCache instance for Redis |`string`|n/a|yes|
155
-
| <aname="input_redis_node_type"></a> [redis\_node\_type](#input\_redis\_node\_type)| Node type for the ElastiCache instance for Redis |`string`|n/a|yes|
156
-
| <aname="input_redis_replica_count"></a> [redis\_replica\_count](#input\_redis\_replica\_count)| Number of replicas for the Redis cluster |`number`|n/a|yes|
157
-
| <aname="input_s3_bucket_name"></a> [s3\_bucket\_name](#input\_s3\_bucket\_name)| Name of the S3 bucket for ActiveStorage uploads|`string`|n/a|yes|
178
+
| <aname="input_redis_name"></a> [redis\_name](#input\_redis\_name)| Name of the ElastiCache instance for Redis |`string`|`null`|no|
179
+
| <aname="input_redis_node_type"></a> [redis\_node\_type](#input\_redis\_node\_type)| Node type for the ElastiCache instance for Redis |`string`|`null`|no|
180
+
| <aname="input_redis_replica_count"></a> [redis\_replica\_count](#input\_redis\_replica\_count)| Number of replicas for the Redis cluster |`number`|`null`|no|
181
+
| <aname="input_s3_bucket_name"></a> [s3\_bucket\_name](#input\_s3\_bucket\_name)| Name of the S3 bucket for this application|`string`|`null`|no|
158
182
| <aname="input_s3_enabled"></a> [s3\_enabled](#input\_s3\_enabled)| Set to true to enable creation of an S3 bucket |`bool`|`false`| no |
159
-
| <aname="input_s3_read_principals"></a> [s3\_read\_principals](#input\_s3\_read\_principals)| Additional principals able to read S3 data |`list(string)`|n/a|yes|
160
-
| <aname="input_s3_readwrite_principals"></a> [s3\_readwrite\_principals](#input\_s3\_readwrite\_principals)| Additional principals able to read and write S3 data |`list(string)`|n/a|yes|
183
+
| <aname="input_s3_read_principals"></a> [s3\_read\_principals](#input\_s3\_read\_principals)| Additional principals able to read S3 data |`list(string)`|`[]`|no|
184
+
| <aname="input_s3_readwrite_principals"></a> [s3\_readwrite\_principals](#input\_s3\_readwrite\_principals)| Additional principals able to read and write S3 data |`list(string)`|`[]`|no|
161
185
| <aname="input_secret_key_variable"></a> [secret\_key\_variable](#input\_secret\_key\_variable)| Name of the environment variable for the application secret key |`string`|`"SECRET_KEY_BASE"`| no |
162
-
| <aname="input_sentry_organization"></a> [sentry\_organization](#input\_sentry\_organization)| Slug of the Sentry organization |`string`| n/a | yes |
163
-
| <aname="input_sentry_project"></a> [sentry\_project](#input\_sentry\_project)| Slug of the Sentry project |`string`| n/a | yes |
186
+
| <aname="input_secret_permission_sets"></a> [secret\_permission\_sets](#input\_secret\_permission\_sets)| AWS IAM permission sets allow to read and manage secrets |`list(string)`|`[]`| no |
187
+
| <aname="input_sentry_enabled"></a> [sentry\_enabled](#input\_sentry\_enabled)| Set to true to enable creation of a Sentry DSN |`bool`|`false`| no |
188
+
| <aname="input_sentry_organization"></a> [sentry\_organization](#input\_sentry\_organization)| Slug of the Sentry organization |`string`|`null`| no |
189
+
| <aname="input_sentry_project"></a> [sentry\_project](#input\_sentry\_project)| Slug of the Sentry project |`string`|`null`| no |
164
190
| <aname="input_service_account_name"></a> [service\_account\_name](#input\_service\_account\_name)| Name of the Kubernetes service account for the application |`string`|`null`| no |
165
191
| <aname="input_stage"></a> [stage](#input\_stage)| Software development lifecycle stage for this tenant |`string`| n/a | yes |
192
+
| <aname="input_tags"></a> [tags](#input\_tags)| Tags to apply to the instance in AWS |`map(string)`|`{}`| no |
166
193
167
194
## Outputs
168
195
169
196
| Name | Description |
170
197
|------|-------------|
171
198
| <aname="output_deploy_role_arn"></a> [deploy\_role\_arn](#output\_deploy\_role\_arn)| ARN of the IAM role for deploying to this Kubernetes namespace |
172
199
| <aname="output_deploy_role_name"></a> [deploy\_role\_name](#output\_deploy\_role\_name)| Name of the IAM role for deploying to this Kubernetes namespace |
200
+
| <aname="output_developer_managed_secrets"></a> [developer\_managed\_secrets](#output\_developer\_managed\_secrets)| SecretsManager environment variables managed by developers |
173
201
| <aname="output_namespace"></a> [namespace](#output\_namespace)| Kubernetes namespace to which this application deploys |
174
202
| <aname="output_pod_role_arn"></a> [pod\_role\_arn](#output\_pod\_role\_arn)| ARN of the IAM role for Kubernetes pods |
0 commit comments