Requirements

The following requirements are needed by this module:

Providers

The following providers are used by this module:

Modules

The following Modules are called:

iam_assumable_role_cert_manager

Source: terraform-aws-modules/iam/aws//modules/iam-assumable-role-with-oidc

Version: 4.0.0

cert-manager

Source: ../

Version:

Resources

The following resources are used by this module:

Required Inputs

The following input variables are required:

cluster_name

Description: The name of the Kubernetes cluster to create.

Type: string

base_domain

Description: The base domain used for Ingresses.

Type: string

cluster_oidc_issuer_url

Description: n/a

Type: string

letsencrypt_issuer_email

Description: E-mail address used to register with Let’s Encrypt.

Type: string

Optional Inputs

The following input variables are optional (have default values):

other_domains

Description: Other domains used for Ingresses requiring a DNS-01 challenge for Let’s Encrypt validation with cert-manager (e.g. wildcard certificates).

Type: list(string)

Default: []

argocd_project

Description: Name of the Argo CD AppProject where the Application should be created. If not set, the Application will be created in a new AppProject only for this Application.

Type: string

Default: null

argocd_labels

Description: Labels to attach to the Argo CD Application resource.

Type: map(string)

Default: {}

destination_cluster

Description: Destination cluster where the application should be deployed.

Type: string

Default: "in-cluster"

target_revision

Description: Override of target revision of the application chart.

Type: string

Default: "v9.0.1"

enable_service_monitor

Description: Enable Prometheus ServiceMonitor in the Helm chart.

Type: bool

Default: true

helm_values

Description: Helm values, passed as a list of HCL structures.

Type: any

Default: []

deep_merge_append_list

Description: A boolean flag to enable/disable appending lists instead of overwriting them.

Type: bool

Default: false

app_autosync

Description: Automated sync options for the Argo CD Application resource.

Type:

object({
    allow_empty = optional(bool)
    prune       = optional(bool)
    self_heal   = optional(bool)
  })

Default:

{
  "allow_empty": false,
  "prune": true,
  "self_heal": true
}

dependency_ids

Description: IDs of the other modules on which this module depends on.

Type: map(string)

Default: {}

resources

Description: Resource limits and requests for cert-manager’s components. Follow the style on official documentation to understand the format of the values.

These are not production values. You should always adjust them to your needs.

Type:

object({

    controller = optional(object({
      requests = optional(object({
        cpu    = optional(string, "50m")
        memory = optional(string, "128Mi")
      }), {})
      limits = optional(object({
        cpu    = optional(string)
        memory = optional(string, "128Mi")
      }), {})
    }), {})

    webhook = optional(object({
      requests = optional(object({
        cpu    = optional(string, "50m")
        memory = optional(string, "128Mi")
      }), {})
      limits = optional(object({
        cpu    = optional(string)
        memory = optional(string, "128Mi")
      }), {})
    }), {})

    cainjector = optional(object({
      requests = optional(object({
        cpu    = optional(string, "50m")
        memory = optional(string, "128Mi")
      }), {})
      limits = optional(object({
        cpu    = optional(string)
        memory = optional(string, "128Mi")
      }), {})
    }), {})

    startupapicheck = optional(object({
      requests = optional(object({
        cpu    = optional(string, "50m")
        memory = optional(string, "128Mi")
      }), {})
      limits = optional(object({
        cpu    = optional(string)
        memory = optional(string, "128Mi")
      }), {})
    }), {})

  })

Default: {}

letsencrypt_issuer_email_main

Description: E-mail address used to register with Let’s Encrypt.

Type: string

Default: null

use_default_dns01_solver

Description: Whether to use the default dns01 solver configuration.

Type: bool

Default: true

use_default_http01_solver

Description: Whether to use the default http01 solver configuration.

Type: bool

Default: true

custom_solver_configurations

Description: List of additional solver configurations, appended to the default dns01 and http01 solvers (if enabled).

Type: list(any)

Default: []

Outputs

The following outputs are exported:

id

Description: ID to pass other modules in order to refer to this module as a dependency.

cluster_issuers

Description: List of cluster issuers created by cert-manager. = Requirements

Name Version

argocd

>= 6

null

>= 3

utils

>= 1

Providers

Name Version

aws

n/a

Modules

Name Source Version

iam_assumable_role_cert_manager

terraform-aws-modules/iam/aws//modules/iam-assumable-role-with-oidc

4.0.0

cert-manager

Resources

Name Type

aws_iam_policy.cert_manager

resource

aws_iam_policy_document.cert_manager

data source

aws_region.current

data source

aws_route53_zone.this

data source

Inputs

Name Description Type Default Required

cluster_name

The name of the Kubernetes cluster to create.

string

n/a

yes

base_domain

The base domain used for Ingresses.

string

n/a

yes

cluster_oidc_issuer_url

n/a

string

n/a

yes

other_domains

Other domains used for Ingresses requiring a DNS-01 challenge for Let’s Encrypt validation with cert-manager (e.g. wildcard certificates).

list(string)

[]

no

letsencrypt_issuer_email

E-mail address used to register with Let’s Encrypt.

string

n/a

yes

argocd_project

Name of the Argo CD AppProject where the Application should be created. If not set, the Application will be created in a new AppProject only for this Application.

string

null

no

argocd_labels

Labels to attach to the Argo CD Application resource.

map(string)

{}

no

destination_cluster

Destination cluster where the application should be deployed.

string

"in-cluster"

no

target_revision

Override of target revision of the application chart.

string

"v9.0.1"

no

enable_service_monitor

Enable Prometheus ServiceMonitor in the Helm chart.

bool

true

no

helm_values

Helm values, passed as a list of HCL structures.

any

[]

no

deep_merge_append_list

A boolean flag to enable/disable appending lists instead of overwriting them.

bool

false

no

app_autosync

Automated sync options for the Argo CD Application resource.

 
object({
    allow_empty = optional(bool)
    prune       = optional(bool)
    self_heal   = optional(bool)
  })
 
{
  "allow_empty": false,
  "prune": true,
  "self_heal": true
}

no

dependency_ids

IDs of the other modules on which this module depends on.

map(string)

{}

no

resources

Resource limits and requests for cert-manager’s components. Follow the style on official documentation to understand the format of the values.

These are not production values. You should always adjust them to your needs. 
object({

    controller = optional(object({
      requests = optional(object({
        cpu    = optional(string, "50m")
        memory = optional(string, "128Mi")
      }), {})
      limits = optional(object({
        cpu    = optional(string)
        memory = optional(string, "128Mi")
      }), {})
    }), {})

    webhook = optional(object({
      requests = optional(object({
        cpu    = optional(string, "50m")
        memory = optional(string, "128Mi")
      }), {})
      limits = optional(object({
        cpu    = optional(string)
        memory = optional(string, "128Mi")
      }), {})
    }), {})

    cainjector = optional(object({
      requests = optional(object({
        cpu    = optional(string, "50m")
        memory = optional(string, "128Mi")
      }), {})
      limits = optional(object({
        cpu    = optional(string)
        memory = optional(string, "128Mi")
      }), {})
    }), {})

    startupapicheck = optional(object({
      requests = optional(object({
        cpu    = optional(string, "50m")
        memory = optional(string, "128Mi")
      }), {})
      limits = optional(object({
        cpu    = optional(string)
        memory = optional(string, "128Mi")
      }), {})
    }), {})

  })

{}

no

letsencrypt_issuer_email_main

E-mail address used to register with Let’s Encrypt.

string

null

no

use_default_dns01_solver

Whether to use the default dns01 solver configuration.

bool

true

no

use_default_http01_solver

Whether to use the default http01 solver configuration.

bool

true

no

custom_solver_configurations

List of additional solver configurations, appended to the default dns01 and http01 solvers (if enabled).

list(any)

[]

no

Outputs

Name Description

id

ID to pass other modules in order to refer to this module as a dependency.

cluster_issuers

List of cluster issuers created by cert-manager.