unkinben
66119e5207
ci/woodpecker/pr/pre-commit Pipeline was successful
- add a ci workflow to verify pre-commit passes - fix pre-commit errors/warnings: - missing required_version - missing required_providers - fixed terraform_deprecated_interpolation - removed terraform_unused_declarations
105 lines
2.2 KiB
Terraform
105 lines
2.2 KiB
Terraform
variable "path" {
|
|
description = "Mount path of the PKI secrets engine"
|
|
type = string
|
|
}
|
|
|
|
variable "description" {
|
|
description = "Human-friendly description of the mount"
|
|
type = string
|
|
default = null
|
|
}
|
|
|
|
variable "max_lease_ttl_seconds" {
|
|
description = "Maximum lease TTL in seconds"
|
|
type = number
|
|
default = 315360000 # 87600 * 3600
|
|
}
|
|
|
|
variable "common_name" {
|
|
description = "Common name for the root certificate"
|
|
type = string
|
|
}
|
|
|
|
variable "issuer_name" {
|
|
description = "Name for the root CA issuer"
|
|
type = string
|
|
}
|
|
|
|
variable "ttl" {
|
|
description = "TTL for the root certificate in seconds"
|
|
type = number
|
|
default = 315360000 # 87600 * 3600
|
|
}
|
|
|
|
variable "format" {
|
|
description = "Format for the certificate"
|
|
type = string
|
|
default = "pem"
|
|
}
|
|
|
|
variable "issuing_certificates" {
|
|
description = "List of issuing certificate URLs"
|
|
type = list(string)
|
|
default = []
|
|
}
|
|
|
|
variable "crl_distribution_points" {
|
|
description = "List of CRL distribution point URLs"
|
|
type = list(string)
|
|
default = []
|
|
}
|
|
|
|
variable "ocsp_servers" {
|
|
description = "List of OCSP server URLs"
|
|
type = list(string)
|
|
default = []
|
|
}
|
|
|
|
variable "enable_templating" {
|
|
description = "Whether to enable templating for URL configuration"
|
|
type = bool
|
|
default = false
|
|
}
|
|
|
|
variable "default_follows_latest_issuer" {
|
|
description = "Whether the default issuer should follow the latest issuer"
|
|
type = bool
|
|
default = false
|
|
}
|
|
|
|
variable "crl_expiry" {
|
|
description = "CRL expiration time"
|
|
type = string
|
|
default = "72h"
|
|
}
|
|
|
|
variable "crl_disable" {
|
|
description = "Whether to disable CRL"
|
|
type = bool
|
|
default = false
|
|
}
|
|
|
|
variable "ocsp_disable" {
|
|
description = "Whether to disable OCSP"
|
|
type = bool
|
|
default = false
|
|
}
|
|
|
|
variable "auto_rebuild" {
|
|
description = "Whether to auto-rebuild CRL"
|
|
type = bool
|
|
default = false
|
|
}
|
|
|
|
variable "enable_delta" {
|
|
description = "Whether to enable delta CRL"
|
|
type = bool
|
|
default = false
|
|
}
|
|
|
|
variable "delta_rebuild_interval" {
|
|
description = "Delta CRL rebuild interval"
|
|
type = string
|
|
default = null
|
|
}
|