Skip to content

Latest commit

 

History

History
79 lines (67 loc) · 7.46 KB

README.md

File metadata and controls

79 lines (67 loc) · 7.46 KB

Terraform Modules Template

Requirements

Name Version
terraform >= 1.0
aws >= 4.18
helm >= 2.5
http >= 2.2.0
kubernetes >= 2.11

Providers

Name Version
aws >= 4.18
helm >= 2.5
http >= 2.2.0
kubernetes >= 2.11

Modules

Name Source Version
secrets_manager_role terraform-aws-modules/iam/aws//modules/iam-role-for-service-accounts-eks ~> 4.21.1

Resources

Name Type
helm_release.release resource
kubernetes_manifest.ascp resource
aws_caller_identity.current data source
aws_region.current data source
http_http.ascp_manifest data source

Inputs

Name Description Type Default Required
ascp_manifest_url ASCP YAML file in the GitHub repo deployment directory string "https://raw.githubusercontent.com/aws/secrets-store-csi-driver-provider-aws/main/deployment/aws-provider-installer.yaml" no
chart_name Helm chart name to provision string "secrets-store-csi-driver" no
chart_namespace Namespace to install the chart into string "kube-system" no
chart_repository Helm repository for the chart string "https://kubernetes-sigs.github.io/secrets-store-csi-driver/charts" no
chart_timeout Timeout to wait for the Chart to be deployed. number 300 no
chart_version Version of Chart to install. Set to empty to install the latest version string "1.1.2" no
cluster_name Name of Kubernetes Cluster string n/a yes
create_default_irsa Create default IRSA for service account bool true no
external_secrets_secrets_manager_arns List of Secrets Manager ARNs that contain secrets to mount using External Secrets list(string) 
[
  "arn:aws:secretsmanager:::secret:*"
]
 no
external_secrets_ssm_parameter_arns List of Systems Manager Parameter ARNs that contain secrets to mount using External Secrets list(string) 
[
  "arn:aws:ssm:::parameter/*"
]
 no
iam_role_description Description for IAM role for controller string "Used by AWS Load Balancer Controller for EKS" no
iam_role_name Name of IAM role for controller string "" no
iam_role_path IAM Role path for controller string "" no
iam_role_permission_boundary Permission boundary ARN for IAM Role for controller string "" no
iam_role_policy Override the IAM policy for the controller string "" no
iam_role_tags Tags for IAM Role for controller map(string) {} no
image_repository Image repository on Dockerhub string "k8s.gcr.io/csi-secrets-store/driver" no
image_tag Image tag string "v1.1.2" no
max_history Max History for Helm number 20 no
namespace Kubernetes namespace, where the service account want to create string "default" no
oidc_provider_arn OIDC Provider ARN for IRSA string n/a yes
region The AWS region for the kubernetes cluster. Set to use KIAM or kube2iam for example. string "" no
release_name Helm release name string "secrets-store-csi-driver" no
resources_driver Driver Resources map(any) 
{
  "limits": {
    "cpu": "200m",
    "memory": "200Mi"
  },
  "requests": {
    "cpu": "200m",
    "memory": "200Mi"
  }
}
 no
resources_liveness LivenessProbe Resources map(any) 
{
  "limits": {
    "cpu": "100m",
    "memory": "100Mi"
  },
  "requests": {
    "cpu": "100m",
    "memory": "100Mi"
  }
}
 no
resources_registrar Registrar Resources map(any) 
{
  "limits": {
    "cpu": "100m",
    "memory": "100Mi"
  },
  "requests": {
    "cpu": "100m",
    "memory": "100Mi"
  }
}
 no
service_account_name Name of service account to create. Not generated string "csi-secrets-store-provider-aws" no

Outputs

Name Description
iam_role_arn ARN of IAM role
iam_role_name Name of IAM role
iam_role_path Path of IAM role
iam_role_unique_id Unique ID of IAM role