adot_collector_haproxy_helm_config |
ADOT Collector HAProxy Helm Chart config |
any |
{} |
no |
adot_collector_java_helm_config |
ADOT Collector Java Helm Chart config |
any |
{} |
no |
adot_collector_memcached_helm_config |
ADOT Collector Memcached Helm Chart config |
any |
{} |
no |
adot_collector_nginx_helm_config |
ADOT Collector Nginx Helm Chart config |
any |
{} |
no |
agones_helm_config |
Agones GameServer Helm Chart config |
any |
{} |
no |
airflow_helm_config |
Apache Airflow v2 Helm Chart config |
any |
{} |
no |
amazon_eks_adot_config |
Configuration for Amazon EKS ADOT add-on |
any |
{} |
no |
amazon_eks_aws_ebs_csi_driver_config |
configMap for AWS EBS CSI Driver add-on |
any |
{} |
no |
amazon_eks_coredns_config |
Configuration for Amazon CoreDNS EKS add-on |
any |
{} |
no |
amazon_eks_kube_proxy_config |
ConfigMap for Amazon EKS Kube-Proxy add-on |
any |
{} |
no |
amazon_eks_vpc_cni_config |
ConfigMap of Amazon EKS VPC CNI add-on |
any |
{} |
no |
amazon_prometheus_workspace_endpoint |
AWS Managed Prometheus WorkSpace Endpoint |
string |
null |
no |
amazon_prometheus_workspace_region |
AWS Managed Prometheus WorkSpace Region |
string |
null |
no |
appmesh_helm_config |
AppMesh Helm Chart config |
any |
{} |
no |
appmesh_irsa_policies |
Additional IAM policies for a IAM role for service accounts |
list(string) |
[] |
no |
argo_rollouts_helm_config |
Argo Rollouts Helm Chart config |
any |
null |
no |
argo_workflows_helm_config |
Argo workflows Helm Chart config |
any |
null |
no |
argocd_applications |
Argo CD Applications config to bootstrap the cluster |
any |
{} |
no |
argocd_helm_config |
Argo CD Kubernetes add-on config |
any |
{} |
no |
argocd_manage_add_ons |
Enable managing add-on configuration via ArgoCD App of Apps |
bool |
false |
no |
auto_scaling_group_names |
List of self-managed node groups autoscaling group names |
list(string) |
[] |
no |
aws_cloudwatch_metrics_helm_config |
AWS CloudWatch Metrics Helm Chart config |
any |
{} |
no |
aws_cloudwatch_metrics_irsa_policies |
Additional IAM policies for a IAM role for service accounts |
list(string) |
[] |
no |
aws_efs_csi_driver_helm_config |
AWS EFS CSI driver Helm Chart config |
any |
{} |
no |
aws_efs_csi_driver_irsa_policies |
Additional IAM policies for a IAM role for service accounts |
list(string) |
[] |
no |
aws_for_fluentbit_create_cw_log_group |
Set to false to use existing CloudWatch log group supplied via the cw_log_group_name variable. |
bool |
true |
no |
aws_for_fluentbit_cw_log_group_kms_key_arn |
FluentBit CloudWatch Log group KMS Key |
string |
null |
no |
aws_for_fluentbit_cw_log_group_name |
FluentBit CloudWatch Log group name |
string |
null |
no |
aws_for_fluentbit_cw_log_group_retention |
FluentBit CloudWatch Log group retention period |
number |
90 |
no |
aws_for_fluentbit_helm_config |
AWS for FluentBit Helm Chart config |
any |
{} |
no |
aws_for_fluentbit_irsa_policies |
Additional IAM policies for a IAM role for service accounts |
list(string) |
[] |
no |
aws_fsx_csi_driver_helm_config |
AWS FSx CSI driver Helm Chart config |
any |
{} |
no |
aws_fsx_csi_driver_irsa_policies |
Additional IAM policies for a IAM role for service accounts |
list(string) |
[] |
no |
aws_load_balancer_controller_helm_config |
AWS Load Balancer Controller Helm Chart config |
any |
{} |
no |
aws_node_termination_handler_helm_config |
AWS Node Termination Handler Helm Chart config |
any |
{} |
no |
aws_node_termination_handler_irsa_policies |
Additional IAM policies for a IAM role for service accounts |
list(string) |
[] |
no |
aws_privateca_acmca_arn |
ARN of AWS ACM PCA |
string |
"" |
no |
aws_privateca_issuer_helm_config |
PCA Issuer Helm Chart config |
any |
{} |
no |
aws_privateca_issuer_irsa_policies |
IAM policy ARNs for AWS ACM PCA IRSA |
list(string) |
[] |
no |
calico_helm_config |
Calico add-on config |
any |
{} |
no |
cert_manager_csi_driver_helm_config |
Cert Manager CSI Driver Helm Chart config |
any |
{} |
no |
cert_manager_domain_names |
Domain names of the Route53 hosted zone to use with cert-manager |
list(string) |
[] |
no |
cert_manager_helm_config |
Cert Manager Helm Chart config |
any |
{} |
no |
cert_manager_install_letsencrypt_issuers |
Install Let's Encrypt Cluster Issuers |
bool |
true |
no |
cert_manager_irsa_policies |
Additional IAM policies for a IAM role for service accounts |
list(string) |
[] |
no |
cert_manager_istio_csr_helm_config |
Cert Manager Istio CSR Helm Chart config |
any |
{} |
no |
cert_manager_kubernetes_svc_image_pull_secrets |
list(string) of kubernetes imagePullSecrets |
list(string) |
[] |
no |
cert_manager_letsencrypt_email |
Email address for expiration emails from Let's Encrypt |
string |
"" |
no |
chaos_mesh_helm_config |
Chaos Mesh Helm Chart config |
any |
{} |
no |
cilium_enable_wireguard |
Enable wireguard encryption |
bool |
false |
no |
cilium_helm_config |
Cilium Helm Chart config |
any |
{} |
no |
cluster_autoscaler_helm_config |
Cluster Autoscaler Helm Chart config |
any |
{} |
no |
consul_helm_config |
Consul Helm Chart config |
any |
{} |
no |
coredns_autoscaler_helm_config |
CoreDNS Autoscaler Helm Chart config |
any |
{} |
no |
coredns_cluster_proportional_autoscaler_helm_config |
Helm provider config for the CoreDNS cluster-proportional-autoscaler |
any |
{} |
no |
crossplane_aws_provider |
AWS Provider config for Crossplane |
any |
{ "enable": false } |
no |
crossplane_helm_config |
Crossplane Helm Chart config |
any |
null |
no |
crossplane_helm_provider |
Helm Provider config for Crossplane |
any |
{ "enable": false } |
no |
crossplane_jet_aws_provider |
AWS Provider Jet AWS config for Crossplane |
object({ enable = bool provider_aws_version = string additional_irsa_policies = list(string) }) |
{ "additional_irsa_policies": [], "enable": false, "provider_aws_version": "v0.24.1" } |
no |
crossplane_kubernetes_provider |
Kubernetes Provider config for Crossplane |
any |
{ "enable": false } |
no |
crossplane_upbound_aws_provider |
AWS Upbound Provider config for Crossplane |
any |
{ "enable": false } |
no |
csi_secrets_store_provider_aws_helm_config |
CSI Secrets Store Provider AWS Helm Configurations |
any |
null |
no |
custom_image_registry_uri |
Custom image registry URI map of {region = dkr.endpoint } |
map(string) |
{} |
no |
data_plane_wait_arn |
Addon deployment will not proceed until this value is known. Set to node group/Fargate profile ARN to wait for data plane to be ready before provisioning addons |
string |
"" |
no |
datadog_operator_helm_config |
Datadog Operator Helm Chart config |
any |
{} |
no |
eks_cluster_domain |
The domain for the EKS cluster |
string |
"" |
no |
eks_cluster_endpoint |
Endpoint for your Kubernetes API server |
string |
null |
no |
eks_cluster_id |
EKS Cluster Id |
string |
n/a |
yes |
eks_cluster_version |
The Kubernetes version for the cluster |
string |
null |
no |
eks_oidc_provider |
The OpenID Connect identity provider (issuer URL without leading https:// ) |
string |
null |
no |
eks_oidc_provider_arn |
The OpenID Connect identity provider ARN |
string |
null |
no |
eks_worker_security_group_id |
EKS Worker Security group Id created by EKS module |
string |
"" |
no |
emr_on_eks_config |
EMR on EKS Helm configuration values |
any |
{} |
no |
enable_adot_collector_haproxy |
Enable metrics for HAProxy workloads |
bool |
false |
no |
enable_adot_collector_java |
Enable metrics for JMX workloads |
bool |
false |
no |
enable_adot_collector_memcached |
Enable metrics for Memcached workloads |
bool |
false |
no |
enable_adot_collector_nginx |
Enable metrics for Nginx workloads |
bool |
false |
no |
enable_agones |
Enable Agones GamServer add-on |
bool |
false |
no |
enable_airflow |
Enable Airflow add-on |
bool |
false |
no |
enable_amazon_eks_adot |
Enable Amazon EKS ADOT addon |
bool |
false |
no |
enable_amazon_eks_aws_ebs_csi_driver |
Enable EKS Managed AWS EBS CSI Driver add-on; enable_amazon_eks_aws_ebs_csi_driver and enable_self_managed_aws_ebs_csi_driver are mutually exclusive |
bool |
false |
no |
enable_amazon_eks_coredns |
Enable Amazon EKS CoreDNS add-on |
bool |
false |
no |
enable_amazon_eks_kube_proxy |
Enable Kube Proxy add-on |
bool |
false |
no |
enable_amazon_eks_vpc_cni |
Enable VPC CNI add-on |
bool |
false |
no |
enable_amazon_prometheus |
Enable AWS Managed Prometheus service |
bool |
false |
no |
enable_app_2048 |
Enable sample app 2048 |
bool |
false |
no |
enable_appmesh_controller |
Enable AppMesh add-on |
bool |
false |
no |
enable_argo_rollouts |
Enable Argo Rollouts add-on |
bool |
false |
no |
enable_argo_workflows |
Enable Argo workflows add-on |
bool |
false |
no |
enable_argocd |
Enable Argo CD Kubernetes add-on |
bool |
false |
no |
enable_aws_cloudwatch_metrics |
Enable AWS CloudWatch Metrics add-on for Container Insights |
bool |
false |
no |
enable_aws_efs_csi_driver |
Enable AWS EFS CSI driver add-on |
bool |
false |
no |
enable_aws_for_fluentbit |
Enable AWS for FluentBit add-on |
bool |
false |
no |
enable_aws_fsx_csi_driver |
Enable AWS FSx CSI driver add-on |
bool |
false |
no |
enable_aws_load_balancer_controller |
Enable AWS Load Balancer Controller add-on |
bool |
false |
no |
enable_aws_node_termination_handler |
Enable AWS Node Termination Handler add-on |
bool |
false |
no |
enable_aws_privateca_issuer |
Enable PCA Issuer |
bool |
false |
no |
enable_calico |
Enable Calico add-on |
bool |
false |
no |
enable_cert_manager |
Enable Cert Manager add-on |
bool |
false |
no |
enable_cert_manager_csi_driver |
Enable Cert Manager CSI Driver add-on |
bool |
false |
no |
enable_cert_manager_istio_csr |
Enable Cert Manager istio-csr add-on |
bool |
false |
no |
enable_chaos_mesh |
Enable Chaos Mesh add-on |
bool |
false |
no |
enable_cilium |
Enable Cilium add-on |
bool |
false |
no |
enable_cluster_autoscaler |
Enable Cluster autoscaler add-on |
bool |
false |
no |
enable_consul |
Enable consul add-on |
bool |
false |
no |
enable_coredns_autoscaler |
Enable CoreDNS autoscaler add-on |
bool |
false |
no |
enable_coredns_cluster_proportional_autoscaler |
Enable cluster-proportional-autoscaler for CoreDNS |
bool |
true |
no |
enable_crossplane |
Enable Crossplane add-on |
bool |
false |
no |
enable_datadog_operator |
Enable Datadog Operator add-on |
bool |
false |
no |
enable_emr_on_eks |
Enable EMR on EKS add-on |
bool |
false |
no |
enable_external_dns |
External DNS add-on |
bool |
false |
no |
enable_external_secrets |
Enable External Secrets operator add-on |
bool |
false |
no |
enable_fargate_fluentbit |
Enable Fargate FluentBit add-on |
bool |
false |
no |
enable_gatekeeper |
Enable Gatekeeper add-on |
bool |
false |
no |
enable_grafana |
Enable Grafana add-on |
bool |
false |
no |
enable_ingress_nginx |
Enable Ingress Nginx add-on |
bool |
false |
no |
enable_ipv6 |
Enable Ipv6 network. Attaches new VPC CNI policy to the IRSA role |
bool |
false |
no |
enable_karpenter |
Enable Karpenter autoscaler add-on |
bool |
false |
no |
enable_keda |
Enable KEDA Event-based autoscaler add-on |
bool |
false |
no |
enable_kube_prometheus_stack |
Enable Community kube-prometheus-stack add-on |
bool |
false |
no |
enable_kubecost |
Enable Kubecost add-on |
bool |
false |
no |
enable_kuberay_operator |
Enable KubeRay Operator add-on |
bool |
false |
no |
enable_kubernetes_dashboard |
Enable Kubernetes Dashboard add-on |
bool |
false |
no |
enable_kyverno |
Enable Kyverno add-on |
bool |
false |
no |
enable_kyverno_policies |
Enable Kyverno policies. Requires enable_kyverno to be true |
bool |
false |
no |
enable_kyverno_policy_reporter |
Enable Kyverno UI. Requires enable_kyverno to be true |
bool |
false |
no |
enable_local_volume_provisioner |
Enable Local volume provisioner add-on |
bool |
false |
no |
enable_metrics_server |
Enable metrics server add-on |
bool |
false |
no |
enable_nvidia_device_plugin |
Enable NVIDIA device plugin add-on |
bool |
false |
no |
enable_ondat |
Enable Ondat add-on |
bool |
false |
no |
enable_opentelemetry_operator |
Enable opentelemetry operator add-on |
bool |
false |
no |
enable_portworx |
Enable Kubernetes Dashboard add-on |
bool |
false |
no |
enable_prometheus |
Enable Community Prometheus add-on |
bool |
false |
no |
enable_promtail |
Enable Promtail add-on |
bool |
false |
no |
enable_reloader |
Enable Reloader add-on |
bool |
false |
no |
enable_secrets_store_csi_driver |
Enable CSI Secrets Store Provider |
bool |
false |
no |
enable_secrets_store_csi_driver_provider_aws |
Enable AWS CSI Secrets Store Provider |
bool |
false |
no |
enable_self_managed_aws_ebs_csi_driver |
Enable self-managed aws-ebs-csi-driver add-on; enable_self_managed_aws_ebs_csi_driver and enable_amazon_eks_aws_ebs_csi_driver are mutually exclusive |
bool |
false |
no |
enable_self_managed_coredns |
Enable self-managed CoreDNS add-on |
bool |
false |
no |
enable_smb_csi_driver |
Enable SMB CSI driver add-on |
bool |
false |
no |
enable_spark_history_server |
Enable Spark History Server add-on |
bool |
false |
no |
enable_spark_k8s_operator |
Enable Spark on K8s Operator add-on |
bool |
false |
no |
enable_strimzi_kafka_operator |
Enable Kafka add-on |
bool |
false |
no |
enable_sysdig_agent |
Enable Sysdig Agent add-on |
bool |
false |
no |
enable_tetrate_istio |
Enable Tetrate Istio add-on |
bool |
false |
no |
enable_thanos |
Enable Thanos add-on |
bool |
false |
no |
enable_traefik |
Enable Traefik add-on |
bool |
false |
no |
enable_vault |
Enable HashiCorp Vault add-on |
bool |
false |
no |
enable_velero |
Enable Kubernetes Dashboard add-on |
bool |
false |
no |
enable_vpa |
Enable Vertical Pod Autoscaler add-on |
bool |
false |
no |
enable_yunikorn |
Enable Apache YuniKorn K8s scheduler add-on |
bool |
false |
no |
external_dns_helm_config |
External DNS Helm Chart config |
any |
{} |
no |
external_dns_irsa_policies |
Additional IAM policies for a IAM role for service accounts |
list(string) |
[] |
no |
external_dns_private_zone |
Determines if referenced Route53 zone is private. |
bool |
false |
no |
external_dns_route53_zone_arns |
List of Route53 zones ARNs which external-dns will have access to create/manage records |
list(string) |
[] |
no |
external_secrets_helm_config |
External Secrets operator Helm Chart config |
any |
{} |
no |
external_secrets_irsa_policies |
Additional IAM policies for a IAM role for service accounts |
list(string) |
[] |
no |
external_secrets_secrets_manager_arns |
List of Secrets Manager ARNs that contain secrets to mount using External Secrets |
list(string) |
[ "arn:aws:secretsmanager:::secret:*" ] |
no |
external_secrets_ssm_parameter_arns |
List of Systems Manager Parameter ARNs that contain secrets to mount using External Secrets |
list(string) |
[ "arn:aws:ssm:::parameter/*" ] |
no |
fargate_fluentbit_addon_config |
Fargate fluentbit add-on config |
any |
{} |
no |
gatekeeper_helm_config |
Gatekeeper Helm Chart config |
any |
{} |
no |
grafana_helm_config |
Kubernetes Grafana Helm Chart config |
any |
null |
no |
grafana_irsa_policies |
IAM policy ARNs for grafana IRSA |
list(string) |
[] |
no |
ingress_nginx_helm_config |
Ingress Nginx Helm Chart config |
any |
{} |
no |
irsa_iam_permissions_boundary |
IAM permissions boundary for IRSA roles |
string |
"" |
no |
irsa_iam_role_path |
IAM role path for IRSA roles |
string |
"/" |
no |
karpenter_enable_spot_termination_handling |
Determines whether to enable native spot termination handling |
bool |
false |
no |
karpenter_helm_config |
Karpenter autoscaler add-on config |
any |
{} |
no |
karpenter_irsa_policies |
Additional IAM policies for a IAM role for service accounts |
list(string) |
[] |
no |
karpenter_node_iam_instance_profile |
Karpenter Node IAM Instance profile id |
string |
"" |
no |
karpenter_sqs_queue_arn |
(Optional) ARN of SQS used by Karpenter when native node termination handling is enabled |
string |
"" |
no |
keda_helm_config |
KEDA Event-based autoscaler add-on config |
any |
{} |
no |
keda_irsa_policies |
Additional IAM policies for a IAM role for service accounts |
list(string) |
[] |
no |
kube_prometheus_stack_helm_config |
Community kube-prometheus-stack Helm Chart config |
any |
{} |
no |
kubecost_helm_config |
Kubecost Helm Chart config |
any |
{} |
no |
kuberay_operator_helm_config |
KubeRay Operator Helm Chart config |
any |
{} |
no |
kubernetes_dashboard_helm_config |
Kubernetes Dashboard Helm Chart config |
any |
null |
no |
kyverno_helm_config |
Kyverno Helm Chart config |
any |
{} |
no |
kyverno_policies_helm_config |
Kyverno policies Helm Chart config |
any |
{} |
no |
kyverno_policy_reporter_helm_config |
Kyverno UI Helm Chart config |
any |
{} |
no |
local_volume_provisioner_helm_config |
Local volume provisioner Helm Chart config |
any |
{} |
no |
metrics_server_helm_config |
Metrics Server Helm Chart config |
any |
{} |
no |
nvidia_device_plugin_helm_config |
NVIDIA device plugin Helm Chart config |
any |
{} |
no |
ondat_admin_password |
Password for Ondat admin user |
string |
"storageos" |
no |
ondat_admin_username |
Username for Ondat admin user |
string |
"storageos" |
no |
ondat_create_cluster |
Create cluster resources |
bool |
true |
no |
ondat_etcd_ca |
CA content for Ondat etcd |
string |
null |
no |
ondat_etcd_cert |
Certificate content for Ondat etcd |
string |
null |
no |
ondat_etcd_endpoints |
List of etcd endpoints for Ondat |
list(string) |
[] |
no |
ondat_etcd_key |
Private key content for Ondat etcd |
string |
null |
no |
ondat_helm_config |
Ondat Helm Chart config |
any |
{} |
no |
ondat_irsa_policies |
IAM policy ARNs for Ondat IRSA |
list(string) |
[] |
no |
opentelemetry_operator_helm_config |
Opentelemetry Operator Helm Chart config |
any |
{} |
no |
portworx_helm_config |
Kubernetes Portworx Helm Chart config |
any |
null |
no |
prometheus_helm_config |
Community Prometheus Helm Chart config |
any |
{} |
no |
promtail_helm_config |
Promtail Helm Chart config |
any |
{} |
no |
reloader_helm_config |
Reloader Helm Chart config |
any |
{} |
no |
remove_default_coredns_deployment |
Determines whether the default deployment of CoreDNS is removed and ownership of kube-dns passed to Helm |
bool |
false |
no |
secrets_store_csi_driver_helm_config |
CSI Secrets Store Provider Helm Configurations |
any |
null |
no |
self_managed_aws_ebs_csi_driver_helm_config |
Self-managed aws-ebs-csi-driver Helm chart config |
any |
{} |
no |
self_managed_coredns_helm_config |
Self-managed CoreDNS Helm chart config |
any |
{} |
no |
smb_csi_driver_helm_config |
SMB CSI driver Helm Chart config |
any |
{} |
no |
spark_history_server_helm_config |
Spark History Server Helm Chart config |
any |
{} |
no |
spark_history_server_irsa_policies |
Additional IAM policies for a IAM role for service accounts |
list(string) |
[] |
no |
spark_history_server_s3a_path |
s3a path with prefix for Spark history server e.g., s3a://<bucket_name>/<spark_event_logs> |
string |
"" |
no |
spark_k8s_operator_helm_config |
Spark on K8s Operator Helm Chart config |
any |
{} |
no |
strimzi_kafka_operator_helm_config |
Kafka Strimzi Helm Chart config |
any |
{} |
no |
sysdig_agent_helm_config |
Sysdig Helm Chart config |
any |
{} |
no |
tags |
Additional tags (e.g. map('BusinessUnit ,XYZ ) |
map(string) |
{} |
no |
tetrate_istio_base_helm_config |
Istio base Helm Chart config |
any |
{} |
no |
tetrate_istio_cni_helm_config |
Istio cni Helm Chart config |
any |
{} |
no |
tetrate_istio_distribution |
Istio distribution |
string |
"TID" |
no |
tetrate_istio_gateway_helm_config |
Istio gateway Helm Chart config |
any |
{} |
no |
tetrate_istio_install_base |
Install Istio base Helm Chart |
bool |
true |
no |
tetrate_istio_install_cni |
Install Istio cni Helm Chart |
bool |
true |
no |
tetrate_istio_install_gateway |
Install Istio gateway Helm Chart |
bool |
true |
no |
tetrate_istio_install_istiod |
Install Istio istiod Helm Chart |
bool |
true |
no |
tetrate_istio_istiod_helm_config |
Istio istiod Helm Chart config |
any |
{} |
no |
tetrate_istio_version |
Istio version |
string |
"" |
no |
thanos_helm_config |
Thanos Helm Chart config |
any |
{} |
no |
thanos_irsa_policies |
Additional IAM policies for a IAM role for service accounts |
list(string) |
[] |
no |
traefik_helm_config |
Traefik Helm Chart config |
any |
{} |
no |
vault_helm_config |
HashiCorp Vault Helm Chart config |
any |
null |
no |
velero_backup_s3_bucket |
Bucket name for velero bucket |
string |
"" |
no |
velero_helm_config |
Kubernetes Velero Helm Chart config |
any |
null |
no |
velero_irsa_policies |
IAM policy ARNs for velero IRSA |
list(string) |
[] |
no |
vpa_helm_config |
VPA Helm Chart config |
any |
null |
no |
yunikorn_helm_config |
YuniKorn Helm Chart config |
any |
null |
no |