variables.tf

variable "namespace" {
  type        = string
  description = "Organization or company namespace prefix"
}

variable "stage" {
  default     = ""
  description = "The stage the deployment covers"
}

variable "environment" {
  default     = ""
  description = "The environment the deployment covers"
}

variable "region" {
  type        = string
  description = "Custom region name the deployment is for"
}

variable "name" {
  type        = string
  default     = "cert-manager"
  description = "Name of this deployment and related resources"
}

variable "app_name" {
  type        = string
  default     = ""
  description = "Overwrite for the helm deployment name"
}

variable "attributes" {
  type        = list
  default     = []
  description = "Additional attributes (e.g. `eu1`)"
}

variable "tags" {
  type        = map
  default     = {}
  description = "Additional tags (e.g. map(`BusinessUnit`,`XYZ`)"
}

variable "delimiter" {
  type        = string
  default     = "-"
  description = "Delimiter to be used between `namespace`, `stage`, `name` and `attributes`"
}

variable "k8s_namespace" {
  type        = string
  default     = "kube-system"
  description = "The kubernetes namespace to deploy the helm release into"
}

variable "dns_zone" {
  type        = string
  description = "Name of the DNS Zone to create Validation Records in. Used for the Issuers created by this Module"
}

variable "private_zone" {
  type    = bool
  default = false
}

variable "issuer_email" {
  type        = string
  description = "The email address of the ACME account to issue certificates"
}

variable "ca_module_state" {
  type        = string
  default     = ""
  description = "S3 Bucket key referencing a file with terraform state information. Must expose an attribute called account_key_pem containing the private key for the ca issuer. Requires tf_bucket to be set to the S3 Bucket"
}

variable "tf_bucket" {
  type        = string
  default     = ""
  description = "S3 Bucket name containing state information for the ca module"
}

variable "ca_private_key_secret" {
  type        = string
  default     = ""
  description = "Either path to a file containing the private key or the plain private key. Can be used if ca_module_state is not set"
}

variable "cert_manager_trust_role" {
  type        = string
  default     = ""
  description = "Role ARN allowed to assume the role created for the cert manager. If not set the trust relationship will allow EC2 to assume the role"
}

variable "helm_values_root" {
  type        = string
  default     = "."
  description = "Path to the directory containing values.yaml for helm to overwrite any defaults"
}

variable "helm_release_version" {
  type        = string
  default     = "v0.16.1"
  description = "The helm chart version to use for this release. Currently this module deploys CRDs from release 0.14"
}

variable "aws_region" {
  type        = string
  description = "AWS Region the hosted zone exists in"
}

variable "apply_assume_role_config" {
  type        = bool
  default     = true
  description = "Configures the AWS provider for cert-manager to assume the created IAM role. In case you use kiam or something similar you have to use the pod annotation instead"
}

variable "disable_deprecated_crd_validation" {
  type        = bool
  default     = true
  description = "Disables validation of previous custom resource definitions from certmanager.k8s.io"
}

variable "iam_role_trusted_services" {
  type        = list(string)
  default     = []
  description = "Trusted AWS Services for the IAM role to allow Assume Role"
}

variable "iam_role_name_override" {
  type        = string
  default     = ""
  description = "Overrides the IAM role name to use for cert-manager DNS challanges with Route53"
}

variable "iam_role_with_external_id" {
  type        = bool
  default     = true
  description = "Controls whether Cert-Manager IAM Role can only be assumed with an External-ID set"
}

variable "iam_role_zone_grants" {
  type        = list(string)
  default     = []
  description = "Additional Zone IDs or Wildcard to allow Cert-Manager Access to multiple Hosted Zones."
}

variable "issuers" {
  type        = list(any)
  default     = []
  description = "List of custom issues to be added containing type (defaults to Issuer), name and namespace (only for non cluster issuers)"
}

variable "configure_kiam" {
  type        = bool
  default     = false
  description = "Attaches Annotations to the Pod required for KIAM to fetch Credentials"
}