kops-vault-backend

cloudposse/kops-vault-backend/aws

Terraform Module HCL AWS

Terraform module to provision an S3 bucket for HashiCorp Vault secrets storage, and an IAM role and policy with permissions for Kops nodes to access the bucket

Install

module "kops-vault-backend" {

source = "cloudposse/kops-vault-backend/aws"

version = "0.1.3"

}

plain text: /constructs/tfmod-cloudposse-kops-vault-backend-aws/install.txt

⭐ Source on GitHub 📦 Registry page

README

![Cloud Posse](https://cloudposse.com) terraform-aws-kops-vault-backend ![Build Status](https://travis-ci.org/cloudposse/terraform-aws-kops-vault-backend) ![Latest Release](https://github.com/cloudposse/terraform-aws-kops-vault-backend/releases/latest) ![Slack Community](https://slack.cloudposse.com) Terraform module to provision an S3 bucket for HashiCorp Vault secrets storage, and an IAM role and policy with permissions for Kops nodes to access the bucket. The module uses terraform-aws-kops-metadata to lookup resources within a Kops cluster for easier integration with Terraform. --- This project is part of our comprehensive "SweetOps" approach towards DevOps. It's 100% Open Source and licensed under the APACHE2. Usage ``hcl module "kops_vault_backend" { source = "git::https://github.com/

Inputs (8)

Name	Type	Description	Default
namespace	string	Namespace (e.g. `cp` or `cloudposse`)	required
stage	string	Stage (e.g. `prod`, `dev`, `staging`)	required
cluster_name	string	Kops cluster name (e.g. `us-east-1.cloudposse.com` or `cluster-1.cloudposse.com`	required
name	string	Name (e.g. `vault-backend`)	`"vault-backend"`
delimiter	string	Delimiter to be used between `namespace`, `stage`, `name` and `attributes`	`"-"`
attributes	list	Additional attributes (e.g. `1`)	`[]`
tags	map	Additional tags (e.g. map(`BusinessUnit`,`XYZ`)	`{}`
nodes_name	string	Kops nodes subdomain name in the cluster DNS zone	`"nodes"`