This repository has been archived by the owner on Aug 31, 2022. It is now read-only.
-
Notifications
You must be signed in to change notification settings - Fork 2
/
Copy pathbluedata_infra_variables.tf
199 lines (176 loc) · 7.52 KB
/
bluedata_infra_variables.tf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
# AzureRM variables
variable "region" { }
variable "subscription_id" { }
variable "client_id" { }
variable "client_secret" { }
variable "tenant_id" { }
variable "cloud_init_file" { default = "./etc/cloud-init.yaml" }
variable "rdp_cloud_init_file" { default = "./etc/rdp-cloud-init.yaml" }
variable "ad_cloud_init_file" { default = "./etc/ad-cloud-init.yaml" }
variable "nfs_cloud_init_file" { default = "./etc/nfs-cloud-init.yaml" }
### TODO: replace this with Azure-provided domain
variable "hcpdomain" { default = "internal.cloudapp.net" } # using default Azure AD domain for VNet
variable "downstream_repo_dir" { default = "hcp-demo-env-aws-terraform" }
variable "profile" { default = "default" } # kept for AWS script compatibility
variable "az" { default = "none" } # kept for AWS script compatibility
variable "project_id" { }
variable "user" { default = "centos" }
variable "client_cidr_block" { default = "none" } # kept for AWS script compatibility
variable "check_client_ip" { default = "false" } # kept for AWS script compatibility
variable "additional_client_ip_list" { default = [] } # kept for AWS script compatibility
variable "vpc_cidr_block" { default = "10.1.0.0/16" }
variable "subnet_cidr_block" { default = "10.1.1.0/24" }
variable "create_eip_controller" {
default = true
}
variable "create_eip_gateway" {
default = true
}
variable "create_eip_rdp_linux_server" {
default = true
}
### TODO: Not implemented for Azure. Kept for AWS script compatibility
variable "create_eks_cluster" {
default = false
}
variable "eks_subnet2_cidr_block" {
default = "10.1.2.0/24"
}
variable "eks_subnet3_cidr_block" {
default = "10.1.3.0/24"
}
variable "eks_subnet2_az_suffix" {
default = "b"
}
variable "eks_subnet3_az_suffix" {
default = "c"
}
variable "eks_scaling_config_desired_size" {
default = 1
}
variable "eks_scaling_config_max_size" {
default = 1
}
variable "eks_scaling_config_min_size" {
default = 1
}
variable "eks_instance_type" {
default = "Standard_B1ms"
}
variable "install_with_ssl" {
default = true
}
variable "ssh_prv_key_path" { default = "./generated/controller.prv_key" }
variable "ssh_pub_key_path" { default = "./generated/controller.pub_key" }
variable "worker_count" { default = 3 }
variable "mapr_cluster_1_count" { default = 0 }
variable "mapr_cluster_1_name" { default = "demo1.mapr.com" }
variable "mapr_cluster_2_count" { default = 0 }
variable "mapr_cluster_2_name" { default = "demo2.mapr.com" }
variable "gpu_worker_count" { default = 0 }
variable "gpu_worker_instance_type" {
default = ""
}
variable "gpu_worker_has_disk_for_df" {
default = false
}
# variable "gtw_instance_type" { default = "Standard_B16ms" } ## 16c 64GB
variable "gtw_instance_type" { default = "Standard_B4ms" } ## 4c 16GB
variable "ctr_instance_type" { default = "Standard_B20ms" } ## 20c 80GB
# variable "ctr_instance_type" { default = "Standard_A8m_v2" } ## 8c 64GB
variable "wkr_instance_type" { default = "Standard_B20ms" } ## 20c 80GB
# variable "wkr_instance_type" { default = "Standard_A8m_v2" } ## 8c 64GB
variable "nfs_instance_type" { default = "Standard_B1ms" } ## 1c 2GB
variable "ad_instance_type" { default = "Standard_B1ms" } ## 1c 2GB
variable "rdp_instance_type" { default = "Standard_B4ms" } ## 4c 16GB
variable "mapr_instance_type" { default = "Standard_B20ms" } ## 20c 80GB
# variable "mapr_instance_type" { default = "Standard_A4m_v2" } ## 4c 32GB
variable "epic_dl_url" { }
variable "epid_dl_url_needs_presign" { default = false }
variable "epic_dl_url_presign_options" { default = "" }
variable "epic_options" { default = "--skipeula --default-password admin123" }
variable "selinux_disabled" { default = true }
variable "nfs_server_enabled" { default = true }
variable "ad_server_enabled" { default = true }
variable "ad_member_group" { default = "DemoTenantUsers" }
variable "ad_admin_group" { default = "DemoTenantAdmins" }
variable "dns_zone_name" {
default = "samdom.example.com"
}
variable "enable_route53_private_dns" { default = false }
variable "rdp_server_enabled" { default = true }
variable "rdp_server_operating_system" {
type = string
default = "LINUX"
validation {
condition = var.rdp_server_operating_system == "WINDOWS" || var.rdp_server_operating_system == "LINUX"
error_message = "Valid values: WINDOWS | LINUX."
}
}
variable "allow_ssh_from_world" {
default = true ### TODO: Need to change this and implement IP-based filtering for NSG
}
variable "allow_rdp_from_world" {
default = true ### TODO: Need to change this and implement IP-based filtering for NSG
}
variable "softether_cidr_block" {
default = "192.168.30.0/24"
}
variable "softether_rdp_ip" {
default = "192.168.30.1"
}
variable "ca_cert" {
default =<<EOF
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
EOF
}
variable "ca_key" {
default =<<EOF
-----BEGIN RSA PRIVATE KEY-----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-----END RSA PRIVATE KEY-----
EOF
}