Story Crater Bot
dd608d3231
- ArgoCD migrated to argocd namespace - Cert-manager issuers/certs created - 20 namespaces imported with pod-security labels - S3 backend temporarily offline (MinIO), using local backup - Pending: Remove metadata drift from helm releases, re-apply
142 lines
3.1 KiB
Terraform
142 lines
3.1 KiB
Terraform
variable "kubeconfig_path" {
|
|
description = "Path to kubeconfig file"
|
|
type = string
|
|
default = "cluster-config/kubeconfig"
|
|
}
|
|
|
|
variable "cluster_domain" {
|
|
description = "Cluster domain (e.g., riotpiao.homelab.com)"
|
|
type = string
|
|
default = "riotpiao.homelab.com"
|
|
}
|
|
|
|
variable "vault_token" {
|
|
description = "Vault token (set via VAULT_TOKEN env var or tfvars)"
|
|
type = string
|
|
sensitive = true
|
|
default = ""
|
|
}
|
|
|
|
variable "s3_access_key" {
|
|
description = "MinIO S3 access key for terraform state backend"
|
|
type = string
|
|
sensitive = true
|
|
default = ""
|
|
}
|
|
|
|
variable "s3_secret_key" {
|
|
description = "MinIO S3 secret key for terraform state backend"
|
|
type = string
|
|
sensitive = true
|
|
default = ""
|
|
}
|
|
|
|
# Cluster secrets (load from .env.tfvars or vault)
|
|
variable "authentik_secret_key" {
|
|
description = "Authentik secret key"
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
variable "authentik_bootstrap_password" {
|
|
description = "Authentik bootstrap password"
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
variable "authentik_bootstrap_token" {
|
|
description = "Authentik bootstrap token"
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
variable "authentik_pg_password" {
|
|
description = "Authentik PostgreSQL password"
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
variable "postgres_password" {
|
|
description = "PostgreSQL app user password"
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
variable "minio_root_user" {
|
|
description = "MinIO root user"
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
variable "minio_root_password" {
|
|
description = "MinIO root password"
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
variable "minio_oidc_client_secret" {
|
|
description = "MinIO OIDC client secret"
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
variable "grafana_admin_password" {
|
|
description = "Grafana admin password"
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
variable "grafana_oidc_client_secret" {
|
|
description = "Grafana OIDC client secret"
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
variable "forgejo_admin_password" {
|
|
description = "Forgejo admin password"
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
variable "authentik_forgejo_client_secret" {
|
|
description = "Authentik Forgejo OIDC client secret"
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
variable "authentik_argocd_client_id" {
|
|
description = "Authentik ArgoCD OIDC client ID"
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
variable "authentik_argocd_client_secret" {
|
|
description = "Authentik ArgoCD OIDC client secret"
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
variable "authentik_temporal_client_id" {
|
|
description = "Authentik Temporal OIDC client ID"
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
variable "authentik_temporal_client_secret" {
|
|
description = "Authentik Temporal OIDC client secret"
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
variable "argocd_admin_password" {
|
|
description = "ArgoCD admin password"
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
variable "argocd_oidc_client_secret" {
|
|
description = "ArgoCD OIDC client secret"
|
|
type = string
|
|
sensitive = true
|
|
}
|