variables.tf

variable "service_account_name" {
  type        = string
  description = <<-EOT
    Kubernetes ServiceAccount name.
    Leave empty or set to "*" to indicate all Service Accounts, or if using `service_account_namespace_name_list`.
    EOT
  default     = null
}

variable "service_account_namespace" {
  type        = string
  description = <<-EOT
    Kubernetes Namespace where service account is deployed. Leave empty or set to "*" to indicate all Namespaces,
    or if using `service_account_namespace_name_list`.
    EOT
  default     = null
}

variable "service_account_namespace_name_list" {
  type        = list(string)
  description = <<-EOT
    List of `namespace:name` for service account assume role IAM policy if you need more than one. May include wildcards.
    EOT
  default     = []
}

variable "aws_account_number" {
  type        = string
  default     = null
  description = "AWS account number of EKS cluster owner. If an AWS account number is not provided, the current aws provider account number will be used."
}

variable "aws_partition" {
  type        = string
  default     = "aws"
  description = "AWS partition: 'aws', 'aws-cn', or 'aws-us-gov'"
}

variable "aws_iam_policy_document" {
  type        = any
  default     = []
  description = <<-EOT
    JSON string representation of the IAM policy for this service account as list of string (0 or 1 items).
    If empty, no custom IAM policy document will be used. If the list contains a single document, a custom
    IAM policy will be created and attached to the IAM role.
    Can also be a plain string, but that use is DEPRECATED because of Terraform issues.
    EOT
}

variable "eks_cluster_oidc_issuer_url" {
  type        = string
  description = "OIDC issuer URL for the EKS cluster (initial \"https://\" may be omitted)"
}

variable "permissions_boundary" {
  type        = string
  description = "ARN of the policy that is used to set the permissions boundary for the role."
  default     = null
}

variable "managed_policy_arns" {
  type        = set(string)
  description = "List of managed policies to attach to created role"
  default     = []
}