mirror of
https://github.com/puppetmaster/typhoon.git
synced 2024-12-27 11:09:33 +01:00
0ce8dfbb95
* Allow passing a dummy RSA key to Azure to satisfy its obtuse requirements (recommend deleting the corresponding private key) * Then `ssh_authorized_key` can be used to provide Fedora CoreOS or Flatcar Linux with a modern ed25519 public key to set in the authorized_keys via Ignition
128 lines
3.2 KiB
HCL
128 lines
3.2 KiB
HCL
variable "name" {
|
|
type = string
|
|
description = "Unique name for the worker pool"
|
|
}
|
|
|
|
# Azure
|
|
|
|
variable "region" {
|
|
type = string
|
|
description = "Must be set to the Azure Region of cluster"
|
|
}
|
|
|
|
variable "resource_group_name" {
|
|
type = string
|
|
description = "Must be set to the resource group name of cluster"
|
|
}
|
|
|
|
variable "subnet_id" {
|
|
type = string
|
|
description = "Must be set to the `worker_subnet_id` output by cluster"
|
|
}
|
|
|
|
variable "security_group_id" {
|
|
type = string
|
|
description = "Must be set to the `worker_security_group_id` output by cluster"
|
|
}
|
|
|
|
variable "backend_address_pool_id" {
|
|
type = string
|
|
description = "Must be set to the `worker_backend_address_pool_id` output by cluster"
|
|
}
|
|
|
|
# instances
|
|
|
|
variable "worker_count" {
|
|
type = number
|
|
description = "Number of instances"
|
|
default = 1
|
|
}
|
|
|
|
variable "vm_type" {
|
|
type = string
|
|
description = "Machine type for instances (see `az vm list-skus --location centralus`)"
|
|
default = "Standard_D2as_v5"
|
|
}
|
|
|
|
variable "os_image" {
|
|
type = string
|
|
description = "Channel for a Container Linux derivative (flatcar-stable, flatcar-beta, flatcar-alpha)"
|
|
default = "flatcar-stable"
|
|
|
|
validation {
|
|
condition = contains(["flatcar-stable", "flatcar-beta", "flatcar-alpha"], var.os_image)
|
|
error_message = "The os_image must be flatcar-stable, flatcar-beta, or flatcar-alpha."
|
|
}
|
|
}
|
|
|
|
variable "priority" {
|
|
type = string
|
|
description = "Set priority to Spot to use reduced cost surplus capacity, with the tradeoff that instances can be evicted at any time."
|
|
default = "Regular"
|
|
}
|
|
|
|
variable "snippets" {
|
|
type = list(string)
|
|
description = "Container Linux Config snippets"
|
|
default = []
|
|
}
|
|
|
|
# configuration
|
|
|
|
variable "kubeconfig" {
|
|
type = string
|
|
description = "Must be set to `kubeconfig` output by cluster"
|
|
}
|
|
|
|
variable "ssh_authorized_key" {
|
|
type = string
|
|
description = "SSH public key for user 'core'"
|
|
}
|
|
|
|
variable "azure_authorized_key" {
|
|
type = string
|
|
description = "Optionally, pass a dummy RSA key to satisfy Azure validations (then use an ed25519 key set above)"
|
|
default = ""
|
|
}
|
|
|
|
variable "service_cidr" {
|
|
type = string
|
|
description = <<EOD
|
|
CIDR IPv4 range to assign Kubernetes services.
|
|
The 1st IP will be reserved for kube_apiserver, the 10th IP will be reserved for coredns.
|
|
EOD
|
|
default = "10.3.0.0/16"
|
|
}
|
|
|
|
variable "node_labels" {
|
|
type = list(string)
|
|
description = "List of initial node labels"
|
|
default = []
|
|
}
|
|
|
|
variable "node_taints" {
|
|
type = list(string)
|
|
description = "List of initial node taints"
|
|
default = []
|
|
}
|
|
|
|
variable "arch" {
|
|
type = string
|
|
description = "Container architecture (amd64 or arm64)"
|
|
default = "amd64"
|
|
|
|
validation {
|
|
condition = var.arch == "amd64" || var.arch == "arm64"
|
|
error_message = "The arch must be amd64 or arm64."
|
|
}
|
|
}
|
|
|
|
# unofficial, undocumented, unsupported
|
|
|
|
variable "cluster_domain_suffix" {
|
|
description = "Queries for domains with the suffix will be answered by coredns. Default is cluster.local (e.g. foo.default.svc.cluster.local) "
|
|
type = string
|
|
default = "cluster.local"
|
|
}
|
|
|