single source of truth for input variables

[sym3tri]

To enable better testing.

We will discuss in meeting and fill out details here

[kans]

tfvars are the source of truth, and we should remove all special logic from the backend so that there is no intermediate representation between the front end and terraform. The frontend will generate a versioned tfvars json blob and and the backend will pass it through to terraform unmodified. Reference blobs will be used for frontend tests and smoke tests alike. The blob will also be shoved into the cluster as a configmap so that operators can know what is going on.

Related issues:

• Service IP addresses should use cidrhost(tectonic_service_cidr, …) #642
• Terraform should bcrypt adminPassword #643
• AWS credentials should be in TF vars #644

[sym3tri]

I believe this is already complete and we plan to refactor this anyway