forked from hashicorp/vault-guides
-
Notifications
You must be signed in to change notification settings - Fork 0
/
terraform.auto.tfvars
70 lines (61 loc) · 3.02 KB
/
terraform.auto.tfvars
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
# ---------------------------------------------------------------------------------------------------------------------
# General Variables
# ---------------------------------------------------------------------------------------------------------------------
# name = "vault-dev"
# ami_owner = "099720109477" # Base image owner, defaults to RHEL
# ami_name = "*ubuntu-xenial-16.04-amd64-server-*" # Base image name, defaults to RHEL
# ---------------------------------------------------------------------------------------------------------------------
# Network Variables
# ---------------------------------------------------------------------------------------------------------------------
# vpc_cidr = "172.19.0.0/16"
# vpc_cidrs_public = ["172.19.0.0/20", "172.19.16.0/20", "172.19.32.0/20",]
# vpc_cidrs_private = ["172.19.48.0/20", "172.19.64.0/20", "172.19.80.0/20",]
# nat_count = 1 # Defaults to 1
# bastion_servers = 0 # Defaults to 0
# bastion_image_id = "" # AMI ID override, defaults to base RHEL AMI
# network_tags = {"owner" = "hashicorp", "TTL" = "24"}
# ---------------------------------------------------------------------------------------------------------------------
# Consul Variables
# ---------------------------------------------------------------------------------------------------------------------
# consul_install = true # Install Consul
# consul_version = "1.2.3" # Consul Version for runtime install, defaults to 1.2.3
# consul_url = "" # Consul Enterprise download URL for runtime install, defaults to Consul OSS
# consul_config_override = <<EOF
# {
# "log_level": "DEBUG",
# "disable_remote_exec": false
# }
# EOF
# ---------------------------------------------------------------------------------------------------------------------
# Vault Variables
# ---------------------------------------------------------------------------------------------------------------------
# vault_servers = 3
# vault_instance = "t2.micro"
# vault_version = "0.11.3" # Vault Version for runtime install, defaults to 0.11.3
# vault_url = "" # Vault Enterprise download URL for runtime install, defaults to Vault OSS
# vault_image_id = "" # AMI ID override, defaults to base RHEL AMI
# If 'vault_public' is true, assign a public IP, open port 22 for public access, & provision into public subnets
# to provide easier accessibility without a Bastion host - DO NOT DO THIS IN PROD
# vault_public = false
# If Vault config is overridden, Vault will no longer run in -dev mode
# vault_config_override = <<EOF
# # These values will override the defaults
# cluster_name = "dc1"
# ui = true
#
# storage "file_transactional" {
# path = "/opt/vault/data"
# redirect_addr = "http://127.0.0.1:8200"
# }
#
# listener "tcp" {
# address = "0.0.0.0:8200"
# tls_disable = "true"
# }
# EOF
# vault_tags = {"owner" = "hashicorp", "TTL" = "24"}
#
# vault_tags_list = [
# {"key" = "owner", "value" = "hashicorp", "propagate_at_launch" = true},
# {"key" = "TTL", "value" = "24", "propagate_at_launch" = true}
# ]