-
Notifications
You must be signed in to change notification settings - Fork 3
/
variables.tf
65 lines (55 loc) · 1.42 KB
/
variables.tf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
variable "secrets_engines" {
type = list(string)
default = null
description = "A list of secrets engines to enable"
validation {
condition = can(contains(
[
"aws",
"azure",
"gcp",
"consul",
"pki",
"transit",
"rabbitmq",
"ssh",
"db"
], var.secrets_engines))
error_message = "Invalid secrets engines."
}
}
variable "default_lease" {
type = number
default = 3600
description = "Default lease for all secrets engines"
}
variable "max_lease" {
type = number
default = 3600
description = "Maximum lease for all secrets engines"
}
variable "seal_wrap" {
type = bool
default = true
description = "Enable seal wrapping for secrets engines"
}
variable "local_mount" {
type = bool
default = true
description = "Boolean flag that can be explicitly set to true to enforce local mount in HA environment"
}
variable "external_entropy_access" {
type = bool
default = false
description = "Boolean flag that can be explicitly set to true to enable the secrets engine to access Vault's external entropy source"
}
variable "vault_token" {
type = string
default = null
description = "Vault token to use for authentication."
}
variable "vault_addr" {
type = string
default = "http://localhost:8200"
description = "Vault address."
}