variables.tf

# ---------------------------------------------------------------------------------------------------------------------
# required variables used for deployment of linkerd in K8s
# ---------------------------------------------------------------------------------------------------------------------
variable "AWS_PROFILE" {
   type=string
}

variable "chart_repository" {
  description = "Helm chart repository"
  type        = string
  default     = "https://helm.linkerd.io/stable"
}

variable "chart_version" {
  description = "Helm chart version"
  type        = string
  default     = "2.11.1"
}

variable "trust_anchor_validity_hours" {
  description = "Number of hours for which the trust anchor certification is valid"
  type        = number
  default     = 17520 # 2 years
}

variable "issuer_validity_hours" {
  description = "Number of hours for which the issuer certification is valid (must be shorter than the trust anchor)"
  type        = number
  default     = 8760 # 1 year
}

variable "ca_cert_expiration_hours" {
  description = "Number of hours added to installation time to calculate trust anchor certification expiration date"
  type        = number
  default     = 8760 # 1 year
}

variable "namespaces" {
  description = "Namespaces for linkerd and optional extensions"
  type        = set(string)
  default     = ["linkerd", "linkerd-viz"]

  validation {
    condition = alltrue(
      flatten([
        contains(var.namespaces, "linkerd"),
        [for n in var.namespaces : contains(["linkerd", "linkerd-viz", "linkerd-jaeger"], n)]
      ])
    )
    error_message = "'namespaces' must contain 'linkerd' and none, any, or all of the following: ['linkerd-viz', 'linkerd-jaeger']."
  }
}

# ---------------------------------------------------------------------------------------------------------------------
# optional variable used for additional customization of the helm chart values
# ---------------------------------------------------------------------------------------------------------------------
variable "additional_yaml_config" {
  description = "used for additional customization of the linkerd helm chart values"
  type        = string
  default     = ""
}

variable "viz_additional_yaml_config" {
  description = "used for additional customization of the linkerd-viz helm chart values"
  type        = string
  default     = ""
}

variable "jaeger_additional_yaml_config" {
  description = "used for additional customization of the linkerd-jaeger helm chart values"
  type        = string
  default     = ""
}

variable "certificate_controlplane_duration" {
  description = "Number of hours for controlplane certification expiration"
  type        = string
  default     = "1440h"
}

variable "certificate_controlplane_renewbefore" {
  description = "Number of hours before the control plane certification expiration to request for certificate renewal"
  type        = string
  default     = "48h"
}

variable "certificate_webhook_duration" {
  description = "Number of hours for webhook certification expiration"
  type        = string
  default     = "1440h"
}

variable "certificate_webhook_renewbefore" {
  description = "Number of hours before the webhook certification expiration to request for certificate renewal"
  type        = string
  default     = "48h"
}

variable "linkerd_helm_install_timeout_secs" {
  description = "The number of seconds to wait for the linkerd chart to be deployed. the default is 900 (15 minutes)"
  type = string
  default = "600"
}

variable "clientID" {
  description = "oAuth2 clientID ( set in terraform.tfvars )"
  type = string
  default = ""
}

variable "clientSecret" {
  description = "oAuth2 clientSecret ( set in terraform.tfvars )"
  type = string
  default = ""
}

variable "cookieSecret" {
  description = "oAuth2 cookieSecret (set in terraform.tfvars)"
  # Create a new cookieSecret with the following command
  # python3 -c 'import os,base64; a = base64.b64encode(os.urandom(16)); print(F"the: {a}")'
  type = string
  default = ""
}