Skip to content

opszero/terraform-helm-aws-vault

Repository files navigation

Providers

Name Version
aws n/a
helm n/a
null n/a

Inputs

Name Description Type Default Required
eks_cluster_name The name of EKS cluster to get OIDC ARN and Name any n/a yes
force_detach_policies Flag to force detachment of policies attached to the IAM role. string false no
iam_role_path Path under which to create IAM role. string "/" no
s3_kms_policy_arns List of IAM policies to attach IAM role list
[
"arn:aws:iam::aws:policy/AmazonS3FullAccess",
"arn:aws:iam::aws:policy/AWSKeyManagementServicePowerUser"
]
no
vault_backend_bucket_kms_key The ID of the KMS key string "alias/aws/s3" no
vault_backend_bucket_name The name of s3 bucket for backend any n/a yes
vault_backend_bucket_region The region of the s3 bucket string "us-east-1" no
vault_s3_kms_role_name Role used by the Vault as S3 backend string "vault_s3_kms_role" no
vault_yml_file n/a any null no

Resources

Name Type
aws_iam_role.vault_s3_kms_role resource
aws_iam_role_policy_attachment.s3_kms resource
helm_release.vault resource
null_resource.create_vault_yml resource
aws_eks_cluster.cluster data source
aws_iam_policy_document.assume_role data source

Outputs

No outputs.

🚀 Built by opsZero!

Since 2016 opsZero has been providing Kubernetes expertise to companies of all sizes on any Cloud. With a focus on AI and Compliance we can say we seen it all whether SOC2, HIPAA, PCI-DSS, ITAR, FedRAMP, CMMC we have you and your customers covered.

We provide support to organizations in the following ways:

We do this with a high-touch support model where you:

  • Get access to us on Slack, Microsoft Teams or Email
  • Get 24/7 coverage of your infrastructure
  • Get an accelerated migration to Kubernetes

Please schedule a call if you need support.