https://github.com/nlamirault/terraform-aws-sops
Terraform module for Sops
https://github.com/nlamirault/terraform-aws-sops
aws galactus sops terraform terraform-module
Last synced: 12 months ago
JSON representation
Terraform module for Sops
- Host: GitHub
- URL: https://github.com/nlamirault/terraform-aws-sops
- Owner: nlamirault
- Archived: true
- Created: 2021-02-03T07:36:03.000Z (over 5 years ago)
- Default Branch: master
- Last Pushed: 2024-06-08T10:54:04.000Z (about 2 years ago)
- Last Synced: 2025-03-26T04:15:55.150Z (over 1 year ago)
- Topics: aws, galactus, sops, terraform, terraform-module
- Language: HCL
- Homepage:
- Size: 125 KB
- Stars: 1
- Watchers: 2
- Forks: 3
- Open Issues: 2
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# Sops into AWS
## Usage
```hcl
module "sops" {
source = "nlamirault/sops/aws"
version = "1.0.0"
project = var.project
namespace = var.namespace
service_account = var.service_accounttags = var.tags
tags = var.tags
user_name = var.user_name
}
```
and variables :
```hcl
project = "foo-prod"
region = "europe-west1"
##############################################################################
# External DNS
namespace = "dns"
service_account = "sops"
user_name = "foo-prod-admin"
```
## Documentation
## Requirements
| Name | Version |
|------|---------|
| terraform | >= 1.0.0 |
| aws | >= 3.26.0 |
## Providers
| Name | Version |
|------|---------|
| aws | >= 3.26.0 |
## Modules
No Modules.
## Resources
| Name |
|------|
| [aws_iam_policy](https://registry.terraform.io/providers/hashicorp/aws/3.26.0/docs/resources/iam_policy) |
| [aws_iam_policy_document](https://registry.terraform.io/providers/hashicorp/aws/3.26.0/docs/data-sources/iam_policy_document) |
| [aws_iam_role](https://registry.terraform.io/providers/hashicorp/aws/3.26.0/docs/resources/iam_role) |
| [aws_iam_role_policy_attachment](https://registry.terraform.io/providers/hashicorp/aws/3.26.0/docs/resources/iam_role_policy_attachment) |
| [aws_kms_alias](https://registry.terraform.io/providers/hashicorp/aws/3.26.0/docs/resources/kms_alias) |
| [aws_kms_key](https://registry.terraform.io/providers/hashicorp/aws/3.26.0/docs/resources/kms_key) |
| [aws_secretsmanager_secret](https://registry.terraform.io/providers/hashicorp/aws/3.26.0/docs/data-sources/secretsmanager_secret) |
| [aws_secretsmanager_secret_version](https://registry.terraform.io/providers/hashicorp/aws/3.26.0/docs/data-sources/secretsmanager_secret_version) |
## Inputs
| Name | Description | Type | Default | Required |
|------|-------------|------|---------|:--------:|
| cluster\_name | Name of the EKS cluster | `string` | n/a | yes |
| deletion\_window\_in\_days | Duration in days after which the key is deleted after destruction of the resource, must be between 7 and 30 days | `number` | `30` | no |
| namespace | The Kubernetes namespace | `string` | n/a | yes |
| service\_account | The Kubernetes service account | `string` | n/a | yes |
| tags | Tags for Sops | `map(string)` |
{
"made-by": "terraform"
} | no |
## Outputs
| Name | Description |
|------|-------------|
| kms\_arn | Role ARN for KMS key |
| role\_arn\_eks | Role ARN for EKS |
| role\_arn\_users | Role ARN for users |