| administrative_groups |
List of administrative groups |
list(string) |
n/a |
yes |
| aks_system_subnet_id |
AKS System subnet ID |
any |
n/a |
yes |
| argo_workflows_client_id |
The Client ID for Argo Workflows |
any |
n/a |
yes |
| argo_workflows_client_secret |
The Client Secret for Argo Workflows |
any |
n/a |
yes |
| azure_region |
Region to deploy Azure resources in |
any |
n/a |
yes |
| azure_tags |
Tags to apply to Azure resources |
map(string) |
n/a |
yes |
| cluster_node_resource_group_name |
Name of resource group containing the AKS cluster nodes |
any |
n/a |
yes |
| cluster_resource_group_name |
Name of resource group containing the AKS cluster |
any |
n/a |
yes |
| dns_zone_id |
Azure DNS Zone ID |
any |
n/a |
yes |
| dns_zone_name |
Name of the dns zone |
any |
n/a |
yes |
| dns_zone_resource_group_name |
Azure DNS Zone ID |
any |
n/a |
yes |
| dns_zone_subscription_id |
Azure DNS Zone ID |
any |
n/a |
yes |
| gk_audit_limits_cpu |
n/a |
any |
n/a |
yes |
| gk_audit_limits_memory |
n/a |
any |
n/a |
yes |
| gk_audit_requests_cpu |
n/a |
any |
n/a |
yes |
| gk_audit_requests_memory |
n/a |
any |
n/a |
yes |
| gk_limits_cpu |
n/a |
any |
n/a |
yes |
| gk_limits_memory |
n/a |
any |
n/a |
yes |
| gk_replicas |
n/a |
any |
n/a |
yes |
| gk_requests_cpu |
n/a |
any |
n/a |
yes |
| gk_requests_memory |
n/a |
any |
n/a |
yes |
| grafana_client_id |
n/a |
any |
n/a |
yes |
| grafana_client_secret |
n/a |
any |
n/a |
yes |
| kubecost_client_id |
n/a |
any |
n/a |
yes |
| kubecost_client_secret |
n/a |
any |
n/a |
yes |
| kubecost_cluster_profile |
n/a |
any |
n/a |
yes |
| kubecost_product_key |
n/a |
any |
n/a |
yes |
| kubecost_shared_namespaces |
n/a |
any |
n/a |
yes |
| kubecost_slack_token |
n/a |
any |
n/a |
yes |
| kubecost_storage_access_key |
n/a |
any |
n/a |
yes |
| kubecost_storage_account |
n/a |
any |
n/a |
yes |
| kubecost_storage_container |
n/a |
any |
n/a |
yes |
| kubecost_token |
n/a |
any |
n/a |
yes |
| kubernetes_identity_object_id |
Kubernetes identity object ID |
any |
n/a |
yes |
| logging_elasticsearch_url |
URL to elasticsearch for logging |
any |
n/a |
yes |
| prefix |
Prefix for Azure resources |
any |
n/a |
yes |
| subscription_id |
Azure Subscription ID |
any |
n/a |
yes |
| tenant_id |
Azure Tenant ID |
any |
n/a |
yes |
| vault_address |
n/a |
any |
n/a |
yes |
| additional_alertmanagers |
List of additional Alertmanager targets for the Platform Prometheus |
list(string) |
[] |
no |
| global_fluentd_config |
Global Fluentd config, usually used to define the default plugin |
string |
"<plugin default>\n @type null\n</plugin>\n" |
no |
| infrastructure_pipeline_subnet_ids |
Subnet ID of infrastructure pipeline |
list(string) |
[] |
no |
| kiali_grafana_token |
The token used to authentiate Kiali to Grafana. |
string |
"" |
no |
| kiali_resources |
The limits and requests to set on the Kiali pod. |
object({
limits = optional(object({
cpu = optional(string, "50m"),
memory = optional(string, "256Mi"),
}), {
cpu = "50m",
memory = "256Mi",
}),
requests = optional(object({
cpu = optional(string, "10m"),
memory = optional(string, "128Mi"),
}), {
cpu = "10m",
memory = "128Mi",
}),
}) |
{} |
no |
| kubecost_additional_alert_config |
Additional alerts for kubecost to pick up. Default should never trigger |
string |
"- type: budget\n threshold: 100000000000000\n window: 1d\n aggregation: namespace\n filter: default\n" |
no |
| kubecost_alert_slack_webhook_url |
Kubecost global url for reporting alerts |
string |
"https://hooks.slack.com/services/T00000000/B00000000/XXXXXXXXXXXXXXXXXXXXXXXX" |
no |
| kubecost_prometheus_node_selector |
The nodeSelector to apply to the Prometheus instance backing Kubecost. |
map(string) |
{} |
no |
| load_balancer_subnet |
Load balancer subnet |
any |
null |
no |
| logging_elasticsearch_password |
Elasticsearch password for logging |
string |
"" |
no |
| logging_elasticsearch_username |
Elasticsearch username for logging |
string |
"" |
no |
| meshconfig_enable_tracing |
Flag to control generation of trace spans and request IDs. |
bool |
false |
no |
| meshconfig_zipkin_address |
The URL to send zipkin compatible traces to |
string |
"zipkin.istio-system:9411" |
no |
| prometheus_additional_scrape_config |
Default additional scrape configuration for prometheus |
string |
`"- job_name: kubecost\n honor_labels: true\n scrape_interval: 1m\n scrape_timeout: 10s\n metrics_path: /metrics\n scheme: http\n dns_sd_configs:\n - names:\n - kubecost-cost-analyzer.kubecost-system\n type: 'A'\n port: 9003\n metric_relabel_configs:\n - source_labels: [persistentvolumeclaim]\n separator: ;\n regex: (aaw-unclassified |
aaw-protected-b |
| prometheus_disk_size |
n/a |
string |
"80Gi" |
no |
| prometheus_resources |
The limits and requests to set on the Prometheus pod. |
object({
limits = optional(map(string), {}),
requests = optional(map(string), {}),
}) |
{
"limits": {},
"requests": {}
} |
no |