Description: Name of the Argo CD AppProject where the Application should be created. If not set, the Application will be created in a new AppProject only for this Application.

Type: string

Default: null

argocd_labels

Description: Labels to attach to the Argo CD Application resource.

Type: map(string)

Default: {}

destination_cluster

Description: Destination cluster where the application should be deployed.

Type: string

Default: "in-cluster"

target_revision

Description: Override of target revision of the application chart.

Type: string

Default: "v9.0.2"

enable_service_monitor

Description: Enable Prometheus ServiceMonitor in the Helm chart.

Type: bool

Default: true

helm_values

Description: Helm values, passed as a list of HCL structures.

Type: any

Default: []

deep_merge_append_list

Description: A boolean flag to enable/disable appending lists instead of overwriting them.

Type: bool

Default: false

app_autosync

Description: Automated sync options for the Argo CD Application resource.

Type:

object({
    allow_empty = optional(bool)
    prune       = optional(bool)
    self_heal   = optional(bool)
  })

Default:

{
  "allow_empty": false,
  "prune": true,
  "self_heal": true
}

dependency_ids

Description: IDs of the other modules on which this module depends on.

Type: map(string)

Default: {}

resources

Description: Resource limits and requests for cert-manager’s components. Follow the style on official documentation to understand the format of the values.

These are not production values. You should always adjust them to your needs.

Type:

object({

    controller = optional(object({
      requests = optional(object({
        cpu    = optional(string, "50m")
        memory = optional(string, "128Mi")
      }), {})
      limits = optional(object({
        cpu    = optional(string)
        memory = optional(string, "128Mi")
      }), {})
    }), {})

    webhook = optional(object({
      requests = optional(object({
        cpu    = optional(string, "50m")
        memory = optional(string, "128Mi")
      }), {})
      limits = optional(object({
        cpu    = optional(string)
        memory = optional(string, "128Mi")
      }), {})
    }), {})

    cainjector = optional(object({
      requests = optional(object({
        cpu    = optional(string, "50m")
        memory = optional(string, "128Mi")
      }), {})
      limits = optional(object({
        cpu    = optional(string)
        memory = optional(string, "128Mi")
      }), {})
    }), {})

    startupapicheck = optional(object({
      requests = optional(object({
        cpu    = optional(string, "50m")
        memory = optional(string, "128Mi")
      }), {})
      limits = optional(object({
        cpu    = optional(string)
        memory = optional(string, "128Mi")
      }), {})
    }), {})

  })

Default: {}

replicas

Description: Number of replicas for cert-manager’s components.

Type:

object({
    controller = optional(number, 1)
    webhook    = optional(number, 1)
    cainjector = optional(number, 1)
  })

Default: {}

letsencrypt_issuer_email_main

Description: E-mail address used to register with Let’s Encrypt.

Type: string

Default: null

use_default_dns01_solver

Description: Whether to use the default dns01 solver configuration.

Type: bool

Default: true

use_default_http01_solver

Description: Whether to use the default http01 solver configuration.

Type: bool

Default: true

custom_solver_configurations

Description: List of additional solver configurations, appended to the default dns01 and http01 solvers (if enabled).

Type: list(any)

Default: []

Outputs

The following outputs are exported:

id

Description: ID to pass other modules in order to refer to this module as a dependency.

cluster_issuers

Description: List of cluster issuers created by cert-manager. = Requirements

Name	Version
argocd	>= 6
null	>= 3
utils	>= 1

Name

Version

argocd

>= 6

null

>= 3

utils

>= 1

Providers

Name	Version
null	>= 3
azurerm	n/a

Name

Version

null

>= 3

azurerm

n/a

Modules

Name	Source	Version
cert-manager

Name

Source

Version

cert-manager

Resources

Name	Type
azurerm_federated_identity_credential.cert_manager	resource
azurerm_role_assignment.dns_zone_contributor	resource
azurerm_user_assigned_identity.cert_manager	resource
null_resource.dependencies	resource
azurerm_dns_zone.this	data source
azurerm_resource_group.node_resource_group	data source
azurerm_subscription.primary	data source

Name

Type

azurerm_federated_identity_credential.cert_manager

resource

azurerm_role_assignment.dns_zone_contributor

resource

azurerm_user_assigned_identity.cert_manager

resource

null_resource.dependencies

resource

azurerm_dns_zone.this

data source

azurerm_resource_group.node_resource_group

data source

azurerm_subscription.primary

data source

Inputs

Name Description Type Default Required

cluster_name

The name of the Kubernetes cluster to create.

string

n/a

yes

base_domain

The base domain used for Ingresses.

string

n/a

yes

node_resource_group_name

The managed AKS resource group name.

string

n/a

yes

dns_zone_resource_group_name

The Azure DNS zone’s resource group name.

string

n/a

yes

cluster_oidc_issuer_url

The OIDC issuer URL that is associated with the cluster.

string

n/a

yes

letsencrypt_issuer_email

E-mail address used to register with Let’s Encrypt.

string

n/a

yes

argocd_project

Name of the Argo CD AppProject where the Application should be created. If not set, the Application will be created in a new AppProject only for this Application.

string

null

argocd_labels

Labels to attach to the Argo CD Application resource.

map(string)

{}

destination_cluster

Destination cluster where the application should be deployed.

string

"in-cluster"

target_revision

Override of target revision of the application chart.

string

"v9.0.2"

enable_service_monitor

Enable Prometheus ServiceMonitor in the Helm chart.

bool

true

helm_values

Helm values, passed as a list of HCL structures.

any

[]

deep_merge_append_list

A boolean flag to enable/disable appending lists instead of overwriting them.

bool

false

app_autosync

Automated sync options for the Argo CD Application resource.

object({
    allow_empty = optional(bool)
    prune       = optional(bool)
    self_heal   = optional(bool)
  })

{
  "allow_empty": false,
  "prune": true,
  "self_heal": true
}

dependency_ids

IDs of the other modules on which this module depends on.

map(string)

{}

resources

Resource limits and requests for cert-manager’s components. Follow the style on official documentation to understand the format of the values.

These are not production values. You should always adjust them to your needs.

object({

    controller = optional(object({
      requests = optional(object({
        cpu    = optional(string, "50m")
        memory = optional(string, "128Mi")
      }), {})
      limits = optional(object({
        cpu    = optional(string)
        memory = optional(string, "128Mi")
      }), {})
    }), {})

    webhook = optional(object({
      requests = optional(object({
        cpu    = optional(string, "50m")
        memory = optional(string, "128Mi")
      }), {})
      limits = optional(object({
        cpu    = optional(string)
        memory = optional(string, "128Mi")
      }), {})
    }), {})

    cainjector = optional(object({
      requests = optional(object({
        cpu    = optional(string, "50m")
        memory = optional(string, "128Mi")
      }), {})
      limits = optional(object({
        cpu    = optional(string)
        memory = optional(string, "128Mi")
      }), {})
    }), {})

    startupapicheck = optional(object({
      requests = optional(object({
        cpu    = optional(string, "50m")
        memory = optional(string, "128Mi")
      }), {})
      limits = optional(object({
        cpu    = optional(string)
        memory = optional(string, "128Mi")
      }), {})
    }), {})

  })

{}

replicas

Number of replicas for cert-manager’s components.

object({
    controller = optional(number, 1)
    webhook    = optional(number, 1)
    cainjector = optional(number, 1)
  })

{}

letsencrypt_issuer_email_main

E-mail address used to register with Let’s Encrypt.

string

null

use_default_dns01_solver

Whether to use the default dns01 solver configuration.

bool

true

use_default_http01_solver

Whether to use the default http01 solver configuration.

bool

true

custom_solver_configurations

List of additional solver configurations, appended to the default dns01 and http01 solvers (if enabled).

list(any)

[]

Outputs

Name	Description
id	ID to pass other modules in order to refer to this module as a dependency.
cluster_issuers	List of cluster issuers created by cert-manager.

Name

Description

ID to pass other modules in order to refer to this module as a dependency.

cluster_issuers

List of cluster issuers created by cert-manager.