-
Notifications
You must be signed in to change notification settings - Fork 0
/
ci.tfvars
242 lines (228 loc) · 7.69 KB
/
ci.tfvars
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
##### PROJECT VARIABLES ####
# The following variables are global to the FilmDrop infrastructure stack
domain_zone = ""
s3_access_log_bucket = ""
s3_logs_archive_bucket = ""
##### NETWORKING VARIABLES ####
# If left blank, the infrastructure will try to query the values from the control tower vpc
vpc_id = ""
vpc_cidr = ""
security_group_id = ""
public_subnets_az_to_id_map = {}
private_subnets_az_to_id_map = {}
##### ALARM VARIABLES ####
sns_warning_subscriptions_map = {}
sns_critical_subscriptions_map = {}
##### APPLICATION VARIABLES ####
stac_server_inputs = {
app_name = "stac_server"
version = "v3.8.0"
deploy_cloudfront = false
web_acl_id = ""
domain_alias = ""
enable_transactions_extension = false
collection_to_index_mappings = ""
opensearch_cluster_instance_type = "t3.small.search"
opensearch_cluster_instance_count = 3
opensearch_cluster_dedicated_master_enabled = true
opensearch_cluster_dedicated_master_type = "t3.small.search"
opensearch_cluster_dedicated_master_count = 3
ingest_sns_topic_arns = []
additional_ingest_sqs_senders_arns = []
opensearch_ebs_volume_size = 35
cors_origin = "*"
cors_credentials = false
cors_methods = ""
cors_headers = ""
authorized_s3_arns = []
auth_function = {
cf_function_name = ""
cf_function_runtime = "cloudfront-js-2.0"
cf_function_code_path = ""
attach_cf_function = false
cf_function_event_type = "viewer-request"
create_cf_function = false
create_cf_basicauth_function = false
cf_function_arn = ""
}
ingest = {
source_catalog_url = ""
destination_collections_list = ""
destination_collections_min_lat = -90
destination_collections_min_long = -180
destination_collections_max_lat = 90
destination_collections_max_long = 180
date_start = ""
date_end = ""
include_historical_ingest = false
source_sns_arn = ""
include_ongoing_ingest = false
}
}
titiler_inputs = {
app_name = "titiler"
domain_alias = ""
deploy_cloudfront = false
version = "v0.14.0-1.0.5"
authorized_s3_arns = []
mosaic_titiler_waf_allowed_url = "test.filmdrop.io"
mosaic_titiler_host_header = ""
mosaic_tile_timeout = 30
web_acl_id = ""
auth_function = {
cf_function_name = ""
cf_function_runtime = "cloudfront-js-2.0"
cf_function_code_path = ""
attach_cf_function = false
cf_function_event_type = "viewer-request"
create_cf_function = false
create_cf_basicauth_function = false
cf_function_arn = ""
}
}
analytics_inputs = {
app_name = "analytics"
domain_alias = ""
jupyterhub_elb_acm_cert_arn = ""
jupyterhub_elb_domain_alias = ""
create_credentials = true
web_acl_id = ""
auth_function = {
cf_function_name = ""
cf_function_runtime = "cloudfront-js-2.0"
cf_function_code_path = ""
attach_cf_function = false
cf_function_event_type = "viewer-request"
create_cf_function = false
create_cf_basicauth_function = false
cf_function_arn = ""
}
cleanup = {
enabled = false
asg_min_capacity = 1
analytics_node_limit = 4
notifications_schedule_expressions = []
cleanup_schedule_expressions = []
}
eks = {
cluster_version = "1.29"
autoscaler_version = "v1.29.0"
}
}
console_ui_inputs = {
app_name = "console"
domain_alias = ""
deploy_cloudfront = false
web_acl_id = ""
version = "v5.3.0"
filmdrop_ui_config_file = "./profiles/console-ui/default-config/config.dev.json"
filmdrop_ui_logo_file = "./profiles/console-ui/default-config/logo.png"
filmdrop_ui_logo = "bm9uZQo=" # Base64: 'none'
custom_error_response = [
{
error_caching_min_ttl = "10"
error_code = "404"
response_code = "200"
response_page_path = "/"
}
]
auth_function = {
cf_function_name = ""
cf_function_runtime = "cloudfront-js-2.0"
cf_function_code_path = ""
attach_cf_function = false
cf_function_event_type = "viewer-request"
create_cf_function = false
create_cf_basicauth_function = false
cf_function_arn = ""
}
}
cirrus_inputs = {
data_bucket = "" # If left blank the deployment will create the data bucket
payload_bucket = "" # If left blank the deployment will create the payload bucket
log_level = "DEBUG"
deploy_alarms = true
custom_alarms = {
warning = {}
critical = {}
}
process = {
sqs_timeout = 180
sqs_max_receive_count = 5
}
state = {
timestream_magnetic_store_retention_period_in_days = 93
timestream_memory_store_retention_period_in_hours = 24
}
api_lambda = {
timeout = 10
memory = 128
}
process_lambda = {
timeout = 10
memory = 128
reserved_concurrency = 16
}
update_state_lambda = {
timeout = 15
memory = 128
}
pre_batch_lambda = {
timeout = 15
memory = 128
}
post_batch_lambda = {
timeout = 15
memory = 128
}
# TODO - CVG - add proper tests
task_batch_compute = []
tasks = []
workflows = []
}
cirrus_dashboard_inputs = {
app_name = "dashboard"
domain_alias = ""
deploy_cloudfront = false
web_acl_id = ""
version = "v0.5.1"
custom_error_response = [
{
error_caching_min_ttl = "10"
error_code = "404"
response_code = "200"
response_page_path = "/"
}
]
cirrus_api_endpoint = ""
metrics_api_endpoint = ""
auth_function = {
cf_function_name = ""
cf_function_runtime = "cloudfront-js-2.0"
cf_function_code_path = ""
attach_cf_function = false
cf_function_event_type = "viewer-request"
create_cf_function = false
create_cf_basicauth_function = false
cf_function_arn = ""
}
}
##### INFRASTRUCTURE FLAGS ####
# To disable each flag: set to 'false'; to enable: set to 'true'
deploy_vpc = false
deploy_vpc_search = true
deploy_log_archive = true
deploy_stac_server_opensearch_serverless = true
deploy_stac_server = true
deploy_stac_server_outside_vpc = false
deploy_analytics = false
deploy_titiler = true
deploy_console_ui = true
deploy_cirrus = true
deploy_cirrus_dashboard = true
deploy_local_stac_server_artifacts = false
deploy_waf_rule = true
#### WAF Rule Settings
ext_web_acl_id = "" # Specify if bringing an externally managed WAF
ip_blocklist = []
whitelist_ips = []