Skip to content

CMS-Enterprise/batcave-tf-efs

Repository files navigation

batcave-tf-efs

Requirements

No requirements.

Providers

Name Version
aws n/a
helm n/a
time n/a

Modules

Name Source Version
iam_assumable_role_admin terraform-aws-modules/iam/aws//modules/iam-assumable-role-with-oidc n/a

Resources

Name Type
aws_backup_plan.daily resource
aws_backup_selection.daily resource
aws_backup_vault.daily resource
aws_backup_vault_policy.efs_backup_vault resource
aws_efs_backup_policy.policy resource
aws_efs_file_system.efs resource
aws_efs_mount_target.efs resource
aws_iam_policy.batcave_efscsidriver resource
aws_iam_policy.efs_kms_backup_restore resource
aws_iam_role.efs_backup_restore_role resource
aws_iam_role.service_role resource
aws_iam_role_policy_attachment.efs_backup_restore_attach resource
aws_iam_role_policy_attachment.service_role_attachment resource
aws_security_group.efs resource
aws_security_group_rule.efs_ingress resource
helm_release.aws-efs-csi-driver resource
time_sleep.iam_delay resource
aws_caller_identity.current data source
aws_eks_cluster_auth.cluster data source
aws_iam_policy_document.backup_assume_role_policy data source
aws_iam_policy_document.backup_efs_policy data source
aws_iam_policy_document.batcave_efscsidriver data source
aws_iam_policy_document.service_link data source
aws_iam_policy_document.vault_policy data source
aws_kms_key.efs data source

Inputs

Name Description Type Default Required
backup_completion_window_minutes Amount of time (in minutes) a backup job can run before it is automatically canceled number 180 no
backup_restore_policy_name n/a string "EFSBackupRestore" no
backup_start_window_minutes Amount if time (in minutes) before starting a backup job number 60 no
cluster_certificate_authority_data CA certificate data for EKS cluster any n/a yes
cluster_endpoint Endpoint for EKS cluster any n/a yes
cluster_name Name of EKS cluster any n/a yes
cluster_oidc_issuer_url OIDC issuer URL for EKS cluster any n/a yes
daily_backup_days_to_retain Days to retain the backup vault backups string "30" no
daily_backup_force_destroy Force destroy the backup vault bool false no
daily_backup_tag_key Tag Key for backing up resources daily string "" no
daily_backup_tag_value Tag Value for backing up resources daily string "" no
directory_perms Storage Class directory permissions string "700" no
gid_range_end Storage Class directory permissions string "2000" no
gid_range_start Storage Class directory permissions string "100" no
helm_name Name for Helm release string "aws-efs-csi-driver" no
helm_namespace Namespace for Helm chart string "kube-system" no
iam_backup_restore_role_name n/a string "EFSBackupRestoreRole" no
iam_path Path for IAM roles string "/delegatedadmin/developer/" no
imagerepo ECR repository for container images string "602401143452.dkr.ecr.us-west-2.amazonaws.com/eks/aws-efs-csi-driver" no
kms_key_id KMS key ID for secrets encryption string "" no
permissions_boundary Permissions boundary for IAM roles string "" no
private_subnet_ids n/a list(any) [] no
tags Optional; Map of key-value tags to apply to applicable resources map(any) {} no
tags_backup_plan Optional; Map of key-value tags to apply to all backup plans map(any) {} no
tags_backup_vault Optional; Map of key-value tags to apply to all backup vaults map(any) {} no
tolerations ## Helm variables list(any) [] no
vpc_id VPC ID for EKS cluster any n/a yes
worker_security_group_id n/a string n/a yes

Outputs

Name Description
oidc_iam_role_arn n/a