mirror of
https://github.com/ysoftdevs/terraform-aws-eks.git
synced 2026-01-15 08:14:12 +01:00
8580b67813
* Support map users and roles to multiple groups * Simplify code by rename `user_arn` to `userarn`, `role_arn` to `rolearn` * Next version should be 6.x because PR this is a breaking change. * Update example variables.tf * Change indent to 2 * Fix map-aws-auth.yaml maybe invalid yaml.
53 lines
1.0 KiB
HCL
53 lines
1.0 KiB
HCL
variable "region" {
|
|
default = "us-west-2"
|
|
}
|
|
|
|
variable "map_accounts" {
|
|
description = "Additional AWS account numbers to add to the aws-auth configmap."
|
|
type = list(string)
|
|
|
|
default = [
|
|
"777777777777",
|
|
"888888888888",
|
|
]
|
|
}
|
|
|
|
variable "map_roles" {
|
|
description = "Additional IAM roles to add to the aws-auth configmap."
|
|
type = list(object({
|
|
rolearn = string
|
|
username = string
|
|
groups = list(string)
|
|
}))
|
|
|
|
default = [
|
|
{
|
|
rolearn = "arn:aws:iam::66666666666:role/role1"
|
|
username = "role1"
|
|
groups = ["system:masters"]
|
|
},
|
|
]
|
|
}
|
|
|
|
variable "map_users" {
|
|
description = "Additional IAM users to add to the aws-auth configmap."
|
|
type = list(object({
|
|
userarn = string
|
|
username = string
|
|
groups = list(string)
|
|
}))
|
|
|
|
default = [
|
|
{
|
|
userarn = "arn:aws:iam::66666666666:user/user1"
|
|
username = "user1"
|
|
groups = ["system:masters"]
|
|
},
|
|
{
|
|
userarn = "arn:aws:iam::66666666666:user/user2"
|
|
username = "user2"
|
|
groups = ["system:masters"]
|
|
},
|
|
]
|
|
}
|