eks-secrets-store-csi-driver

andreswebs/eks-secrets-store-csi-driver/aws

Terraform Module HCL AWS

Deploys the Kubernetes Secrets Store CSI Driver via Helm on AWS EKS

Install

module "eks-secrets-store-csi-driver" {

source = "andreswebs/eks-secrets-store-csi-driver/aws"

version = "1.0.0"

}

plain text: /constructs/tfmod-andreswebs-eks-secrets-store-csi-driver-aws/install.txt

⭐ Source on GitHub 📦 Registry page

README

terraform-aws-eks-secrets-store-csi-driver [//]: # (BEGIN_TF_DOCS) Deploys the Kubernets CSI Secrets Store Driver on AWS EKS. Note: This module depends on an imperative deployment of the AWS driver provider after the driver is installed: ``sh kubectl apply -f "https://raw.githubusercontent.com/aws/secrets-store-csi-driver-provider-aws/main/deployment/aws-provider-installer.yaml" ` Usage Example: `hcl module "secrets_store_csi_driver_resources" { source = "github.com/andreswebs/terraform-aws-eks-secrets-store-csi-driver" chart_version_secrets_store_csi_driver = var.chart_version_secrets_store_csi_driver } ` Inputs | Name | Description | Type | Default | Required | |------|-------------|------|---------|:--------:| | chart\_version\_secrets\_store\_csi\_driver | Chart version | string | null

Inputs (22)

Name	Type	Description	Default
chart_version_secrets_store_csi_driver	string	Chart version	required
enable_secret_sync	string	Set Helm value `syncSecret.enabled`	`"true"`
helm_max_history	number	Maximum number of release versions stored per release; `0` means no limit	`3`
helm_recreate_pods	bool	Perform pods restart during upgrade/rollback ?	`true`
helm_cleanup_on_fail	bool	Deletion new resources created in this upgrade if the upgrade fails ?	`true`
helm_force_update	bool	Force resource update through delete/recreate if needed ?	`false`
helm_reuse_values	bool	When upgrading, reuse the last release's values and merge any overrides ? If 're	`false`
helm_reset_values	bool	When upgrading, reset the values to the ones built into the chart ?	`false`
helm_dependency_update	bool	Run helm dependency update before installing the chart ?	`false`
enable_secret_rotation	string	Set Helm value `enableSecretRotation`	`"true"`
rotation_poll_interval	string	Set Helm value `rotationPollInterval`	`"3600s"`
helm_verify	bool	Verify the package before installing it. Helm uses a provenance file to verify t	`false`
helm_keyring	string	Location of public keys used for verification; used only if verify is true	`".gnupg/pubring.gpg"`
helm_skip_crds	bool	Skip installing CRDs ?	`false`
helm_atomic_creation	bool	Purge resources on installation failure ? The wait flag will be set automaticall	`true`
helm_replace	bool	Re-use the given name, even if that name is already used; this is unsafe in prod	`false`
helm_create_namespace	bool	Create the namespace if it does not yet exist ?	`true`
k8s_namespace	string	Kubernetes namespace	`"kube-system"`
helm_release_name	string	Release name	`"secrets-store-csi-driver"`
helm_timeout_seconds	number	Time in seconds to wait for any individual kubernetes operation	`300`
helm_wait_for_completion	bool	Wait until all resources are in a ready state before marking the release as succ	`true`