/
variables.tf
146 lines (117 loc) · 3.18 KB
/
variables.tf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
locals {
name = "fleetdm"
}
variable "prefix" {
default = "fleet"
}
variable "domain_fleetdm" {
default = "dogfood.fleetdm.com"
}
variable "osquery_results_s3_bucket" {
default = "fleet-osquery-results-archive"
}
variable "osquery_status_s3_bucket" {
default = "fleet-osquery-status-archive"
}
variable "vulnerabilities_path" {
default = "/home/fleet"
}
variable "fleet_backend_cpu" {
default = 256
type = number
}
variable "fleet_backend_mem" {
default = 512
type = number
}
variable "async_host_processing" {
default = "false"
}
variable "logging_debug" {
default = "false"
}
variable "logging_json" {
default = "true"
}
variable "database_user" {
description = "database user fleet will authenticate and query with"
default = "fleet"
}
variable "database_name" {
description = "the name of the database fleet will create/use"
default = "fleet"
}
variable "fleet_image" {
description = "the name of the container image to run"
default = "fleetdm/fleet:v4.48.1"
}
variable "software_inventory" {
description = "enable/disable software inventory (default is enabled)"
default = "1"
}
variable "vuln_db_path" {
description = "the path to save the vuln database"
default = "/home/fleet"
}
variable "cpu_migrate" {
description = "cpu units for migration task"
default = 1024
type = number
}
variable "mem_migrate" {
description = "memory limit for migration task in MB"
default = 2048
type = number
}
variable "fleet_max_capacity" {
description = "maximum number of fleet containers to run"
default = 5
}
variable "fleet_min_capacity" {
description = "minimum number of fleet containers to run"
default = 1
}
variable "memory_tracking_target_value" {
description = "target memory utilization for target tracking policy (default 80%)"
default = 80
}
variable "cpu_tracking_target_value" {
description = "target cpu utilization for target tracking policy (default 60%)"
default = 60
}
variable "fleet_license" {
description = "Fleet Premium license key"
default = ""
}
variable "cloudwatch_log_retention" {
description = "number of days to keep logs around for fleet services"
default = 1
}
variable "rds_backup_retention_period" {
description = "number of days to keep snapshot backups"
default = 30
}
variable "extra_security_group_cidrs" {
description = "extra list of CIDRs to allow extra networks (such as a VPN) access to Redis/MySQL"
default = []
type = list(string)
validation {
condition = alltrue([for cidr in var.extra_security_group_cidrs : can(cidrhost(cidr, 32))])
error_message = "The extra security groups must be a list of valid CIDRs."
}
}
variable "rds_initial_snapshot" {
default = null
}
variable "redis_azs" {
default = ["us-east-2a", "us-east-2b", "us-east-2c"]
description = "the availability zones to utilize for redis"
}
variable "vpc_azs" {
default = ["us-east-2a", "us-east-2b", "us-east-2c"]
description = "the availability zones to utilize for vpc creation"
}
variable "region" {
default = "us-east-2"
description = "the default availability zone to utilize for infrastructure"
}