-
Notifications
You must be signed in to change notification settings - Fork 16
/
Copy pathvars.tf
201 lines (167 loc) · 4.79 KB
/
vars.tf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
variable "project" {
type = string
description = "The Google Cloud Platform project to deploy the Nomad cluster to."
}
variable "credentials" {
type = string
default = "./account.json"
description = "The path to the valid Google Cloud Platform credentials file (in JSON format) to use."
}
variable "region" {
type = string
default = "us-east1"
description = "The region to deploy to."
}
variable "zone" {
type = string
default = "c"
description = "The zone to deploy to."
}
variable "cidr_range" {
type = string
default = "192.168.2.0/24"
description = "The CIDR to deploy with."
}
variable "server_instances" {
type = number
default = 3
description = "The total number of Nomad servers to deploy (use odd numbers)."
}
variable "server_machine_type" {
type = string
default = "n1-standard-1"
description = "The VM machine type for Nomad servers."
}
variable "client_instances" {
type = number
default = 5
description = "The total number of Nomad clients to deploy."
}
variable "client_machine_type" {
type = string
default = "n1-standard-2"
description = "The VM machine type for Nomad clients."
}
variable "bastion_enabled" {
type = bool
default = true
description = "Enables the SSH bastion."
}
variable "bastion_machine_type" {
type = string
default = "g1-small"
description = "The VM machine type for the SSH bastion."
}
variable "ssh_user" {
type = string
default = "ubuntu"
description = "The user to use for SSH."
}
variable "tls_organization" {
type = string
default = "nomad-dev"
description = "The organization name to use the TLS certificates."
}
variable "save_ssh_keypair_locally" {
type = bool
default = false
description = "If the SSH keypair (bastion.pub, bastion) should be saved locally."
}
variable "nomad_acls_enabled" {
type = bool
default = true
description = "If ACLs should be enabled for the Nomad cluster."
}
variable "docker_default_runtime" {
type = string
default = "runc"
description = "The default Docker runtime to use."
}
variable "docker_no_new_privileges" {
type = bool
default = true
description = "Set no-new-privileges by default for new containers."
}
variable "docker_icc_enabled" {
type = bool
default = false
description = "Enables inter-container communication."
}
variable "loadbalancer_enabled" {
type = bool
default = true
description = "Enables the GCP load balancer for the Nomad Server API to make the cluster available over the internet."
}
variable "enable_preemptible_bastion_vm" {
type = bool
default = false
description = "Enables a preemptible SSH bastion host to save costs."
}
variable "enable_preemptible_server_vms" {
type = bool
default = false
description = "Enables preemptible Nomad server hosts to save costs."
}
variable "enable_preemptible_client_vms" {
type = bool
default = false
description = "Enables preemptible Nomad client hosts to save costs."
}
variable "enable_shielded_vms" {
type = bool
default = true
description = "Enables shielded VMs for all hosts."
}
variable "consul_acls_enabled" {
type = bool
default = true
description = "If ACLs should be enabled for the Consul cluster."
}
variable "consul_acls_default_policy" {
type = string
default = "deny"
description = "The default policy to use for Consul ACLs (allow/deny)."
}
variable "bucket_location" {
type = string
default = "US"
}
variable "nomad_load_balancer_enabled" {
type = bool
default = true
description = "Start a public load balancer to be used to handle ingress Nomad traffic to server nodes within the cluster."
}
variable "dns_enabled" {
type = bool
default = false
}
variable "dns_managed_zone_dns_name" {
// example: nomad.example.com
type = string
default = ""
}
variable "dns_record_set_name_prefix" {
// example: public.$dns_managed_zone_dns_name
type = string
default = "public"
}
variable "grafana_load_balancer_enabled" {
type = bool
default = false
description = "Start a public load balancer to be used to handle ingress Grafana traffic to client nodes within the cluster."
}
variable "grafana_dns_managed_zone_dns_name" {
// example: grafana.example.com
type = string
default = ""
}
variable "grafana_dns_record_set_name_prefix" {
// example: public.$dns_managed_zone_dns_name
type = string
default = "public"
}
variable "tls_validity_period_hours" {
type = number
default = 17520
description = "The total number of hours the generated mTLS certificates are valid for with a default of 2 years"
}