init: 아르고cd, vault 기반 인프라 설계

2026-07-24 14:31:09 +09:00
parent 8879d0a3fe
commit d507ac6ee9
137 changed files with 11431 additions and 1 deletions
@@ -0,0 +1,53 @@
+variable "admin_policy_name" {
+  description = "Name of the operator policy kept for manual vault-transit maintenance."
+  type        = string
+  default     = "vault-transit-admin-dev"
+}
+
+variable "approle_auth_path" {
+  description = "Path where the AppRole auth backend is mounted."
+  type        = string
+  default     = "approle"
+}
+
+variable "vault_addr" {
+  description = "Address of the vault-transit API."
+  type        = string
+  default     = "http://127.0.0.1:18200"
+}
+
+variable "vault_token" {
+  description = "Workflow token used to reconcile vault-transit policies and workflow AppRole."
+  type        = string
+  sensitive   = true
+}
+
+variable "workflow_policy_name" {
+  description = "Policy granted to the vault-transit workflow AppRole."
+  type        = string
+  default     = "vault-transit-automation-dev"
+}
+
+variable "workflow_role_name" {
+  description = "Name of the workflow AppRole used by CI."
+  type        = string
+  default     = "vault-transit-dev-workflow"
+}
+
+variable "workflow_token_max_ttl_seconds" {
+  description = "Maximum TTL, in seconds, for the workflow AppRole login token."
+  type        = number
+  default     = 14400
+}
+
+variable "workflow_token_ttl_seconds" {
+  description = "Default TTL, in seconds, for the workflow AppRole login token."
+  type        = number
+  default     = 3600
+}
+
+variable "workload_policy_name" {
+  description = "Policy name granted to the workload Vault auto-unseal token."
+  type        = string
+  default     = "workload-vault-transit-dev"
+}