Story Crater Bot
be2e5c321f
- providers.tf: use host + token + ca_crt from mounted service account secrets - workflow: remove kubeconfig generation step (no longer needed) - variables.tf: remove unused kubeconfig_path variable This is the standard pattern for running terraform inside k8s pods.
143 lines
3.2 KiB
Terraform
143 lines
3.2 KiB
Terraform
variable "cluster_domain" {
|
|
description = "Cluster domain (e.g., riotpiao.homelab.com)"
|
|
type = string
|
|
default = "riotpiao.homelab.com"
|
|
}
|
|
|
|
variable "vault_token" {
|
|
description = "Vault token (set via VAULT_TOKEN env var or tfvars)"
|
|
type = string
|
|
sensitive = true
|
|
default = ""
|
|
}
|
|
|
|
variable "authentik_api_token" {
|
|
description = "Authentik API token for goauthentik provider (terraform configuration management)"
|
|
type = string
|
|
sensitive = true
|
|
default = ""
|
|
}
|
|
|
|
variable "s3_access_key" {
|
|
description = "MinIO S3 access key for terraform state backend"
|
|
type = string
|
|
sensitive = true
|
|
default = ""
|
|
}
|
|
|
|
variable "s3_secret_key" {
|
|
description = "MinIO S3 secret key for terraform state backend"
|
|
type = string
|
|
sensitive = true
|
|
default = ""
|
|
}
|
|
|
|
# Cluster secrets (load from .env.tfvars or vault)
|
|
variable "authentik_secret_key" {
|
|
description = "Authentik secret key"
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
variable "authentik_bootstrap_password" {
|
|
description = "Authentik bootstrap password"
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
variable "authentik_bootstrap_token" {
|
|
description = "Authentik bootstrap token"
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
variable "authentik_pg_password" {
|
|
description = "Authentik PostgreSQL password"
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
variable "postgres_password" {
|
|
description = "PostgreSQL app user password"
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
variable "minio_root_user" {
|
|
description = "MinIO root user"
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
variable "minio_root_password" {
|
|
description = "MinIO root password"
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
variable "minio_oidc_client_secret" {
|
|
description = "MinIO OIDC client secret"
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
variable "grafana_admin_password" {
|
|
description = "Grafana admin password"
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
variable "grafana_oidc_client_secret" {
|
|
description = "Grafana OIDC client secret"
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
variable "forgejo_admin_password" {
|
|
description = "Forgejo admin password"
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
variable "authentik_forgejo_client_secret" {
|
|
description = "Authentik Forgejo OIDC client secret"
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
variable "authentik_argocd_client_id" {
|
|
description = "Authentik ArgoCD OIDC client ID"
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
variable "authentik_argocd_client_secret" {
|
|
description = "Authentik ArgoCD OIDC client secret"
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
variable "authentik_temporal_client_id" {
|
|
description = "Authentik Temporal OIDC client ID"
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
variable "authentik_temporal_client_secret" {
|
|
description = "Authentik Temporal OIDC client secret"
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
variable "argocd_admin_password" {
|
|
description = "ArgoCD admin password"
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
variable "argocd_oidc_client_secret" {
|
|
description = "ArgoCD OIDC client secret"
|
|
type = string
|
|
sensitive = true
|
|
}
|