services-deployment/variables.tf at main · workloads/services-deployment · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
variable "aws_directory_admin_username" {
  type        = string
  description = "AWS Directory Service Admin Username."
}

variable "aws_directory_admin_password" {
  type        = string
  description = "AWS Directory Service Admin Password."
  sensitive   = true
}

# see https://registry.terraform.io/providers/DataDog/datadog/latest/docs#api_key
variable "datadog_api_key" {
  type        = string
  description = "Datadog API Key."
  sensitive   = true
}

# see https://registry.terraform.io/providers/DataDog/datadog/latest/docs#api_url
variable "datadog_api_url" {
  type        = string
  description = "Datadog API URL."
}

# see https://registry.terraform.io/providers/DataDog/datadog/latest/docs#api_url
variable "datadog_api_zone" {
  type        = string
  description = "Datadog API Zone."
}

# see https://registry.terraform.io/providers/DataDog/datadog/latest/docs#app_key
variable "datadog_app_key" {
  type        = string
  description = "Datadog App Key."
  sensitive   = true
}

# see https://registry.terraform.io/providers/hashicorp/hcp/latest/docs/resources/boundary_cluster#password
variable "hcp_boundary_admin_password" {
  type        = string
  description = "HCP Boundary Cluster Admin Password."
  sensitive   = true
}

# see https://registry.terraform.io/providers/hashicorp/hcp/latest/docs/resources/boundary_cluster#username
variable "hcp_boundary_admin_username" {
  type        = string
  description = "HCP Boundary Cluster Admin Username."
}

# this value is set in the `Boundary` Variable Set, inside HCP Terraform
# see https://app.terraform.io/app/workloads/settings/varsets
variable "hcp_boundary_cluster_id" {
  type        = string
  description = "The ID of the HCP Boundary Cluster."
}

variable "hcp_boundary_cluster_tier" {
  type        = string
  description = "The tier that the HCP Boundary cluster will be provisioned as."
  default     = "standard"

  validation {
    condition     = can(regex("^(standard|premium)$", var.hcp_boundary_cluster_tier))
    error_message = "The HCP Boundary cluster tier must be either `standard` or `premium`."
  }
}

# see https://registry.terraform.io/providers/hashicorp/hcp/latest/docs/resources/boundary_cluster#maintenance_window_config
variable "hcp_boundary_maintenance_window" {
  type = object({
    day          = string
    start        = number
    end          = number
    upgrade_type = string
  })

  description = "The maintenance window configuration for when cluster upgrades can take place."

  default = {
    day          = "TUESDAY"
    start        = 2 # time in UTC
    end          = 4 # time in UTC
    upgrade_type = "SCHEDULED"
  }
}

variable "hvn_id_aws" {
  type        = string
  description = "AWS-specific HashiCorp HVN Identifier."
}

variable "management_region_aws" {
  type        = string
  description = "AWS-specific `Management` Region Identifier."
}

variable "project_identifier" {
  type        = string
  description = "Human-readable Project Identifier."
}

variable "tfe_organization" {
  type        = string
  description = "Name of HCP Terraform Organization."
}

variable "tfe_team_token_viewers" {
  type        = string
  description = "HCP Terraform `viewers` Team Token."
  sensitive   = true
}

locals {
  # HCP Vault-specific Configuration Variables for Cluster lifecycle management
  hcp_vault_variables = [
    {
      key         = "hcp_vault_cluster_id"
      category    = "terraform"
      value       = module.hcp_vault_aws.hcp_vault_cluster.cluster_id
      description = "HCP Vault Cluster ID."
      sensitive   = false
    }
  ]
}