Requirements

The following requirements are needed by this module:

argocd (>= 5)
null (>= 3)
utils (>= 1)

Providers

The following providers are used by this module:

Modules

The following Modules are called:

iam_assumable_role_cert_manager

Source: terraform-aws-modules/iam/aws//modules/iam-assumable-role-with-oidc

Version: 4.0.0

cert-manager

Source: ../

Version:

Resources

The following resources are used by this module:

aws_iam_policy.cert_manager (resource)
aws_iam_policy_document.cert_manager (data source)
aws_region.current (data source)
aws_route53_zone.this (data source)

Required Inputs

The following input variables are required:

cluster_name

Description: The name of the Kubernetes cluster to create.

Type: string

base_domain

Description: The base domain used for Ingresses.

Type: string

cluster_oidc_issuer_url

Description: n/a

Type: string

letsencrypt_issuer_email

Description: Email address used to register with Let’s Encrypt.

Type: string

Optional Inputs

The following input variables are optional (have default values):

other_domains

Description: Other domains used for Ingresses requiring a DNS-01 challenge for Let’s Encrypt validation with cert-manager (e.g. wildcard certificates).

Type: list(string)

Default: []

argocd_namespace

Description: Namespace used by Argo CD where the Application and AppProject resources should be created.

Type: string

Default: "argocd"

argocd_project

Description: Name of the Argo CD AppProject where the Application should be created. If not set, the Application will be created in a new AppProject only for this Application.

Type: string

Default: null

argocd_labels

Description: Labels to attach to the Argo CD Application resource.

Type: map(string)

Default: {}

destination_cluster

Description: Destination cluster where the application should be deployed.

Type: string

Default: "in-cluster"

target_revision

Description: Override of target revision of the application chart.

Type: string

Default: "v7.0.0"

namespace

Description: Namespace where the applications’s Kubernetes resources should be created. Namespace will be created in case it doesn’t exist.

Type: string

Default: "cert-manager"

enable_service_monitor

Description: Enable Prometheus ServiceMonitor in the Helm chart.

Type: bool

Default: true

helm_values

Description: Helm values, passed as a list of HCL structures.

Type: any

Default: []

deep_merge_append_list

Description: A boolean flag to enable/disable appending lists instead of overwriting them.

Type: bool

Default: false

app_autosync

Description: Automated sync options for the Argo CD Application resource.

Type:

object({
    allow_empty = optional(bool)
    prune       = optional(bool)
    self_heal   = optional(bool)
  })

Default:

{
  "allow_empty": false,
  "prune": true,
  "self_heal": true
}

dependency_ids

Description: IDs of the other modules on which this module depends on.

Type: map(string)

Default: {}

use_default_dns01_solver

Description: Whether to use the default dns01 solver configuration.

Type: bool

Default: true

use_default_http01_solver

Description: Whether to use the default http01 solver configuration.

Type: bool

Default: true

custom_solver_configurations

Description: List of additional solver configurations, appended to the default dns01 and http01 solvers (if enabled).

Type: list(any)

Default: []

Outputs

The following outputs are exported:

id

Description: ID to pass other modules in order to refer to this module as a dependency.

cluster_issuers

Description: List of cluster issuers created by cert-manager. = Requirements

Name	Version
argocd	>= 5
null	>= 3
utils	>= 1

Name

Version

argocd

>= 5

null

>= 3

utils

>= 1

Providers

Name	Version
aws	n/a

Name

Version

aws

n/a

Modules

Name	Source	Version
iam_assumable_role_cert_manager	terraform-aws-modules/iam/aws//modules/iam-assumable-role-with-oidc	4.0.0
cert-manager

Name

Source

Version

iam_assumable_role_cert_manager

terraform-aws-modules/iam/aws//modules/iam-assumable-role-with-oidc

4.0.0

cert-manager

Resources

Name	Type
aws_iam_policy.cert_manager	resource
aws_iam_policy_document.cert_manager	data source
aws_region.current	data source
aws_route53_zone.this	data source

Name

Type

aws_iam_policy.cert_manager

resource

aws_iam_policy_document.cert_manager

data source

aws_region.current

data source

aws_route53_zone.this

data source

Inputs

Name Description Type Default Required

Name	Description	Type	Default	Required
cluster_name	The name of the Kubernetes cluster to create.	`string`	n/a	yes
base_domain	The base domain used for Ingresses.	`string`	n/a	yes
cluster_oidc_issuer_url	n/a	`string`	n/a	yes
other_domains	Other domains used for Ingresses requiring a DNS-01 challenge for Let’s Encrypt validation with cert-manager (e.g. wildcard certificates).	`list(string)`	`[]`	no
argocd_namespace	Namespace used by Argo CD where the Application and AppProject resources should be created.	`string`	`"argocd"`	no
argocd_project	Name of the Argo CD AppProject where the Application should be created. If not set, the Application will be created in a new AppProject only for this Application.	`string`	`null`	no
argocd_labels	Labels to attach to the Argo CD Application resource.	`map(string)`	`{}`	no
destination_cluster	Destination cluster where the application should be deployed.	`string`	`"in-cluster"`	no
target_revision	Override of target revision of the application chart.	`string`	`"v7.0.0"`	no
namespace	Namespace where the applications’s Kubernetes resources should be created. Namespace will be created in case it doesn’t exist.	`string`	`"cert-manager"`	no
enable_service_monitor	Enable Prometheus ServiceMonitor in the Helm chart.	`bool`	`true`	no
helm_values	Helm values, passed as a list of HCL structures.	`any`	`[]`	no
deep_merge_append_list	A boolean flag to enable/disable appending lists instead of overwriting them.	`bool`	`false`	no
app_autosync	Automated sync options for the Argo CD Application resource.	`object({ allow_empty = optional(bool) prune = optional(bool) self_heal = optional(bool) })`	`{ "allow_empty": false, "prune": true, "self_heal": true }`	no
dependency_ids	IDs of the other modules on which this module depends on.	`map(string)`	`{}`	no
letsencrypt_issuer_email	Email address used to register with Let’s Encrypt.	`string`	n/a	yes
use_default_dns01_solver	Whether to use the default dns01 solver configuration.	`bool`	`true`	no
use_default_http01_solver	Whether to use the default http01 solver configuration.	`bool`	`true`	no
custom_solver_configurations	List of additional solver configurations, appended to the default dns01 and http01 solvers (if enabled).	`list(any)`	`[]`	no

cluster_name

The name of the Kubernetes cluster to create.

string

n/a

yes

base_domain

The base domain used for Ingresses.

string

n/a

yes

cluster_oidc_issuer_url

n/a

string

n/a

yes

other_domains

Other domains used for Ingresses requiring a DNS-01 challenge for Let’s Encrypt validation with cert-manager (e.g. wildcard certificates).

list(string)

[]

argocd_namespace

Namespace used by Argo CD where the Application and AppProject resources should be created.

string

"argocd"

argocd_project

Name of the Argo CD AppProject where the Application should be created. If not set, the Application will be created in a new AppProject only for this Application.

string

null

argocd_labels

Labels to attach to the Argo CD Application resource.

map(string)

{}

destination_cluster

Destination cluster where the application should be deployed.

string

"in-cluster"

target_revision

Override of target revision of the application chart.

string

"v7.0.0"

namespace

Namespace where the applications’s Kubernetes resources should be created. Namespace will be created in case it doesn’t exist.

string

"cert-manager"

enable_service_monitor

Enable Prometheus ServiceMonitor in the Helm chart.

bool

true

helm_values

Helm values, passed as a list of HCL structures.

any

[]

deep_merge_append_list

A boolean flag to enable/disable appending lists instead of overwriting them.

bool

false

app_autosync

Automated sync options for the Argo CD Application resource.

object({
    allow_empty = optional(bool)
    prune       = optional(bool)
    self_heal   = optional(bool)
  })

{
  "allow_empty": false,
  "prune": true,
  "self_heal": true
}

dependency_ids

IDs of the other modules on which this module depends on.

map(string)

{}

letsencrypt_issuer_email

Email address used to register with Let’s Encrypt.

string

n/a

yes

use_default_dns01_solver

Whether to use the default dns01 solver configuration.

bool

true

use_default_http01_solver

Whether to use the default http01 solver configuration.

bool

true

custom_solver_configurations

List of additional solver configurations, appended to the default dns01 and http01 solvers (if enabled).

list(any)

[]

Outputs

Name	Description
id	ID to pass other modules in order to refer to this module as a dependency.
cluster_issuers	List of cluster issuers created by cert-manager.

Name

Description

ID to pass other modules in order to refer to this module as a dependency.

cluster_issuers

List of cluster issuers created by cert-manager.