Ben Vincent
8070b6f66b
- migrate from individual terraform files to config-driven terragrunt module structure - add vault_cluster module with config discovery system - replace individual .tf files with centralized config.hcl - restructure auth and secret backends as configurable modules - move auth roles and secret backends to yaml-based configuration - convert policies from .hcl to .yaml format, add rules/auth definition - add pre-commit hooks for yaml formatting and file cleanup - add terragrunt cache to gitignore - update makefile with terragrunt commands and format target
37 lines
1.1 KiB
HCL
37 lines
1.1 KiB
HCL
variable "country" {
|
|
description = "Country identifier"
|
|
type = string
|
|
}
|
|
|
|
variable "region" {
|
|
description = "Region identifier"
|
|
type = string
|
|
}
|
|
|
|
variable "path" {
|
|
description = "Mount path of the AppRole auth backend"
|
|
type = string
|
|
default = "approle"
|
|
}
|
|
|
|
variable "listing_visibility" {
|
|
description = "Specifies whether to show this mount in the UI-specific listing endpoint. Valid values are 'unauth' or 'hidden'"
|
|
type = string
|
|
default = null
|
|
validation {
|
|
condition = var.listing_visibility == null || contains(["unauth", "hidden"], var.listing_visibility)
|
|
error_message = "listing_visibility must be either 'unauth' or 'hidden'."
|
|
}
|
|
}
|
|
|
|
variable "default_lease_ttl" {
|
|
description = "Specifies the default time-to-live. If set, this overrides the global default. Must be a valid duration string"
|
|
type = string
|
|
default = null
|
|
}
|
|
|
|
variable "max_lease_ttl" {
|
|
description = "Specifies the maximum time-to-live. If set, this overrides the global default. Must be a valid duration string"
|
|
type = string
|
|
default = null
|
|
} |