SkyForge

ecs-fargate/variables.tf

variable "project" {
  type        = string
  description = "Project tag. The example is checkout-api for the fictional Initech service."
  default     = "checkout-api"
}

variable "env" {
  type        = string
  description = "Environment tag. dev and prod use different Fargate sizes."
  default     = "dev"
}

variable "owner" {
  type        = string
  description = "Owner tag. Initech is fictional. This is not a client account."
  default     = "initech-platform"
}

variable "region" {
  type        = string
  description = "AWS region."
  default     = "us-east-1"
}

variable "instance_type" {
  type        = string
  description = "EC2 instance type from the shared tfvars file. This route does not launch an instance."
  default     = "t3.small"
}

variable "task_cpu" {
  type        = number
  description = "Fargate CPU units."
  default     = 256
}

variable "task_memory" {
  type        = number
  description = "Fargate memory in MiB."
  default     = 512
}

variable "desired_count" {
  type        = number
  description = "Starting number of tasks."
  default     = 1
}

variable "min_capacity" {
  type        = number
  description = "Minimum tasks for CPU target tracking."
  default     = 1
}

variable "max_capacity" {
  type        = number
  description = "Maximum tasks for CPU target tracking."
  default     = 2
}

variable "cpu_target" {
  type        = number
  description = "Target average CPU percent."
  default     = 60
}

variable "enable_nat" {
  type        = bool
  description = "Create one NAT gateway. When false, private tasks use interface endpoints."
  default     = true
}

variable "enable_rds" {
  type        = bool
  description = "Create an optional Postgres instance in the private subnets."
  default     = false
}

variable "certificate_arn" {
  type        = string
  description = "ACM certificate ARN for the HTTPS listener. The operator passes this in."
  default     = "arn:aws:acm:us-east-1:111111111111:certificate/11111111-1111-1111-1111-111111111111"

  validation {
    condition     = can(regex("^arn:aws[a-zA-Z-]*:acm:[a-z0-9-]+:[0-9]{12}:certificate/.+$", var.certificate_arn))
    error_message = "certificate_arn must be an ACM certificate ARN."
  }
}

variable "alb_log_bucket" {
  type        = string
  description = "Access-log bucket name. Replace the example before any real plan."
  default     = "initech-checkout-api-dev-alb-logs-example"
}

variable "container_image" {
  type        = string
  description = "Image URI including the tag. Replace the placeholder after scripts/push_ecr.sh."
  default     = "replace-account.dkr.ecr.us-east-1.amazonaws.com/checkout-api:example"
}

variable "app_secret" {
  type        = string
  description = "Placeholder application secret written to SSM. Replace it before any real plan. The demo never applies this."
  default     = "replace-before-apply"
  sensitive   = true
}

variable "availability_zones" {
  type        = list(string)
  description = "Optional AZ override. Empty uses the first two zones from the available-zones data source."
  default     = []
}