5efde6fcf4
- terraform-vm/: ARM VM (A1.Flex Free Tier), Docker Compose, Block Volume, LB+WAF+SSL - terraform-oke/: OKE cluster (3 nodes Intel), NodePort, LB+WAF+SSL - k8s/: namespace, deployments, services, PVC, secrets, configmap - Dockerfile.frontend: self-contained nginx+dist image - push-images.sh: multi-arch build (amd64+arm64) + push to OCIR - dns.tf: conditional OCI DNS Zone + A record (when domain available) - Both stacks 100% independent, no shared modules - .gitignore: terraform state, .terraform/, *.tfvars
59 lines
1.8 KiB
Plaintext
59 lines
1.8 KiB
Plaintext
# =============================================================================
|
|
# OCI CIS Agent — OKE Deployment Stack
|
|
# Copy this file to terraform.tfvars and fill in your values.
|
|
# =============================================================================
|
|
|
|
# --- OCI Authentication ---
|
|
tenancy_ocid = "ocid1.tenancy.oc1..aaaaaaaaXXXXXXXX"
|
|
user_ocid = "ocid1.user.oc1..aaaaaaaaXXXXXXXX"
|
|
fingerprint = "aa:bb:cc:dd:ee:ff:00:11:22:33:44:55:66:77:88:99"
|
|
private_key_path = "~/.oci/oci_api_key.pem"
|
|
region = "us-ashburn-1"
|
|
|
|
# --- Compartment ---
|
|
compartment_ocid = "ocid1.compartment.oc1..aaaaaaaaXXXXXXXX"
|
|
|
|
# --- Networking (defaults are fine for most deployments) ---
|
|
# vcn_cidr = "10.0.0.0/16"
|
|
# public_subnet_cidr = "10.0.1.0/24"
|
|
# nodes_subnet_cidr = "10.0.2.0/24"
|
|
# api_subnet_cidr = "10.0.3.0/24"
|
|
|
|
# --- OKE Cluster ---
|
|
# kubernetes_version = "v1.30.1"
|
|
# cluster_name = "oci-cis-agent-oke"
|
|
|
|
# --- Node Pool ---
|
|
# node_shape = "VM.Standard3.Flex"
|
|
# node_ocpus = 2
|
|
# node_memory_gb = 16
|
|
# node_count = 3
|
|
# node_boot_volume_gb = 50
|
|
|
|
# --- SSH Key ---
|
|
ssh_public_key = "ssh-rsa AAAAB3NzaC1yc2EAAAA... your-key-here"
|
|
|
|
# --- Application ---
|
|
# Generate with: python3 -c "import secrets; print(secrets.token_hex(64))"
|
|
app_secret = "YOUR_128_CHAR_HEX_SECRET_HERE"
|
|
# jwt_expiry_hours = 12
|
|
# app_timezone = "UTC"
|
|
|
|
# --- OCIR ---
|
|
ocir_namespace = "your-tenancy-namespace"
|
|
# ocir_repo_prefix = "oci-cis-agent"
|
|
|
|
# --- Load Balancer ---
|
|
# lb_min_bandwidth_mbps = 10
|
|
# lb_max_bandwidth_mbps = 100
|
|
# node_port = 30080
|
|
|
|
# --- DNS (optional: leave empty to skip) ---
|
|
# domain_name = "cisagent.example.com"
|
|
|
|
# --- Tags ---
|
|
# freeform_tags = {
|
|
# "Project" = "oci-cis-agent"
|
|
# "ManagedBy" = "terraform"
|
|
# }
|