Ben Vincent
8070b6f66b
- migrate from individual terraform files to config-driven terragrunt module structure - add vault_cluster module with config discovery system - replace individual .tf files with centralized config.hcl - restructure auth and secret backends as configurable modules - move auth roles and secret backends to yaml-based configuration - convert policies from .hcl to .yaml format, add rules/auth definition - add pre-commit hooks for yaml formatting and file cleanup - add terragrunt cache to gitignore - update makefile with terragrunt commands and format target
67 lines
1.4 KiB
HCL
67 lines
1.4 KiB
HCL
variable "country" {
|
|
description = "Country identifier"
|
|
type = string
|
|
}
|
|
|
|
variable "region" {
|
|
description = "Region identifier"
|
|
type = string
|
|
}
|
|
|
|
variable "path" {
|
|
description = "Mount path of the Consul secrets engine"
|
|
type = string
|
|
}
|
|
|
|
variable "description" {
|
|
description = "Human-friendly description of the mount"
|
|
type = string
|
|
default = null
|
|
}
|
|
|
|
variable "address" {
|
|
description = "The address of the Consul instance"
|
|
type = string
|
|
}
|
|
|
|
variable "bootstrap" {
|
|
description = "Whether to bootstrap the Consul backend"
|
|
type = bool
|
|
default = false
|
|
}
|
|
|
|
variable "scheme" {
|
|
description = "The scheme to use when connecting to Consul"
|
|
type = string
|
|
default = "https"
|
|
}
|
|
|
|
variable "ca_cert" {
|
|
description = "CA certificate for TLS verification"
|
|
type = string
|
|
default = null
|
|
}
|
|
|
|
variable "client_cert" {
|
|
description = "Client certificate for TLS authentication"
|
|
type = string
|
|
default = null
|
|
}
|
|
|
|
variable "client_key" {
|
|
description = "Client key for TLS authentication"
|
|
type = string
|
|
default = null
|
|
}
|
|
|
|
variable "default_lease_ttl_seconds" {
|
|
description = "Default lease TTL in seconds"
|
|
type = number
|
|
default = null
|
|
}
|
|
|
|
variable "max_lease_ttl_seconds" {
|
|
description = "Maximum lease TTL in seconds"
|
|
type = number
|
|
default = null
|
|
} |