terraform-contour-mirror/modules/vault-platform-secrets/variables.tf

variable "vault_kv_mount" {
  description = "Vault KV v2 mount"
  type        = string
  default     = "secrets"
}

variable "path_prefix" {
  description = "Path prefix inside Vault mount"
  type        = string
  default     = "platform"
}

variable "common" {
  description = "Common platform secret configuration"
  type        = any
  default     = {}
}

variable "infra" {
  description = "Infrastructure services secret/policy/role configuration"
  type        = any
  default     = {}
}

variable "applications" {
  description = "Application Vault access roles/policies configuration"
  type        = any
  default     = {}
}

variable "create_regcred" {
  description = "Create common dockerhub regcred secret"
  type        = bool
  default     = true
}

variable "create_smtp_auth" {
  description = "Create common SMTP auth secret"
  type        = bool
  default     = true
}

variable "create_django_auth" {
  description = "Create common django-auth secret"
  type        = bool
  default     = true
}

variable "create_rsa_keys" {
  description = "Create common RSA key pair secret"
  type        = bool
  default     = true
}

variable "create_infra_secrets" {
  description = "Create infrastructure service secrets"
  type        = bool
  default     = true
}

variable "create_infra_policies" {
  description = "Create infrastructure Vault policies"
  type        = bool
  default     = true
}

variable "create_infra_roles" {
  description = "Create infrastructure Vault kubernetes auth roles"
  type        = bool
  default     = true
}

variable "create_app_policies" {
  description = "Create application Vault policies"
  type        = bool
  default     = true
}

variable "create_app_roles" {
  description = "Create application Vault kubernetes auth roles"
  type        = bool
  default     = true
}

variable "kubernetes_auth_backend" {
  description = "Vault kubernetes auth backend path"
  type        = string
  default     = "kubernetes"
}

variable "default_rsa_bits" {
  description = "Default RSA key size"
  type        = number
  default     = 4096
}