-
Notifications
You must be signed in to change notification settings - Fork 0
/
variables.tf
148 lines (125 loc) · 4.22 KB
/
variables.tf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
##
# Required parameters
##
variable "name" {
description = "Storage account name."
type = string
default = null
}
variable "location" {
description = "Specifies the supported Azure location to MySQL server resource"
type = string
}
variable "resource_group_name" {
description = "name of the resource group to create the resource"
type = string
}
variable "names" {
description = "names to be applied to resources"
type = map(string)
}
variable "tags" {
description = "tags to be applied to resources"
type = map(string)
}
variable "account_kind" {
description = "Defines the Kind of account. Valid options are BlobStorage, BlockBlobStorage, FileStorage, Storage and StorageV2"
type = string
default = "StorageV2"
}
variable "account_tier" {
description = "Defines the Tier to use for this storage account (Standard or Premium)."
type = string
default = null
}
variable "access_tier" {
description = "Defines the access tier for BlobStorage, FileStorage and StorageV2 accounts"
type = string
default = "Hot"
validation {
condition = (contains(["hot", "cool"], lower(var.access_tier)))
error_message = "The account_tier must be either \"Hot\" or \"Cool\"."
}
}
variable "replication_type" {
description = "Storage account replication type - i.e. LRS, GRS, RAGRS, ZRS, GZRS, RAGZRS."
type = string
}
variable "enable_large_file_share" {
description = "Enable Large File Share."
type = bool
default = false
}
variable "enable_hns" {
description = "Enable Hierarchical Namespace (can be used with Azure Data Lake Storage Gen 2)."
type = bool
default = false
}
variable "enable_https_traffic_only" {
description = "Forces HTTPS if enabled."
type = bool
default = true
}
variable "min_tls_version" {
description = "The minimum supported TLS version for the storage account."
type = string
default = "TLS1_2"
}
variable "allow_blob_public_access" {
description = "Allow or disallow public access to all blobs or containers in the storage account."
type = bool
default = false
}
# Note: make sure to include the IP address of the host from where "terraform" command is executed to allow for access to the storage
# Otherwise, creating container inside the storage or any access attempt will be denied.
variable "access_list" {
description = "Map of CIDRs Storage Account access."
type = map(string)
default = {}
}
variable "service_endpoints" {
description = "Creates a virtual network rule in the subnet_id (values are virtual network subnet ids)."
type = map(string)
default = {}
}
variable "traffic_bypass" {
description = "Specifies whether traffic is bypassed for Logging/Metrics/AzureServices. Valid options are any combination of Logging, Metrics, AzureServices, or None."
type = list(string)
default = ["None"]
}
variable "blob_delete_retention_days" {
description = "Retention days for deleted blob. Valid value is between 1 and 365."
type = number
default = 7
}
variable "blob_cors" {
description = "blob service cors rules: https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/storage_account#cors_rule"
type = map(object({
allowed_headers = list(string)
allowed_methods = list(string)
allowed_origins = list(string)
exposed_headers = list(string)
max_age_in_seconds = number
}))
default = null
}
variable "enable_static_website" {
description = "Controls if static website to be enabled on the storage account. Possible values are `true` or `false`"
default = false
type = bool
}
variable "index_path" {
description = "path from your repo root to index.html"
default = null
type = string
}
variable "custom_404_path" {
description = "path from your repo root to your custom 404 page"
default = null
type = string
}
variable "enable_infrastructure_encryption" {
description = "Controls if infrastructure encryption is enabled. more info https://docs.microsoft.com/en-us/azure/storage/common/infrastructure-encryption-enable?tabs=portal"
type = bool
default = true
}