variables.tf

variable "kubernetes_version" {
  description = "Desired Kubernetes version."
  type        = string
  default     = "v1.31.1"
}

variable "binaries" {
  description = "Desired binaries(cni_plugin) url and checksum."
  type = map(object({
    source   = string
    checksum = string
  }))
  default = {}
}

variable "containers" {
  description = "Desired containers(kube-apiserver, kube-controller-manager, cfssl, coredns, and so on) repo and tag."
  type = map(object({
    repo = string
    tag  = string
  }))
  default = {}
}

variable "components_resource" {
  description = "Desired resource requests and limits of kubernetes components(kube-apiserver, kube-controller-manager, kube-scheduler, etc.)"
  type = map(object({
    cpu_request    = string
    cpu_limit      = string
    memory_request = string
    memory_limit   = string
  }))
  default = {}
}

variable "internal_endpoint" {
  description = "The internal endpoint of kube-apiserver."
  type        = string
  default     = "https://127.0.0.1:6443"
}

variable "apiserver_secure_port" {
  type    = number
  default = 6443
}

variable "service_network_cidr" {
  description = "This is the virtual IP address that will be assigned to services created on Kubernetes."
  type        = string
  default     = "10.96.0.0/12"
}

variable "pod_network_cidr" {
  description = "The CIDR pool used to assign IP addresses to pods in the cluster."
  type        = string
  default     = "10.244.0.0/16"
}

variable "node_cidr_mask_size" {
  description = "(Optional)[cilium-vxlan] Mask size for node cidr in cluster."
  type        = number
  default     = 24
}

variable "network_plugin" {
  description = "Desired network plugin which is use for Kubernetes cluster. e.g. 'flannel', 'amazon-vpc', 'cilium-vxlan'"
  type        = string
  default     = "amazon-vpc"
}

variable "enable_eni_prefix" {
  description = "(Optional) assign prefix to AWS EC2 network interface"
  type        = bool
  default     = true
}

variable "annotate_pod_ip" {
  description = "(Optional) enable to fix pod startup connectivity issue on installing Calico with aws-vpc-cni plugin. (Issue: https://github.com/aws/amazon-vpc-cni-k8s/issues/493)"
  type        = bool
  default     = false
}

variable "external_snat" {
  description = "(Optional) [AWS VPC CNI] Specifies whether an external NAT gateway should be used to provide SNAT of secondary ENI IP addresses. If set to true, the SNAT iptables rule and off-VPC IP rule are not applied, and these rules are removed if they have already been applied."
  type        = bool
  default     = false
}

variable "enable_network_policy" {
  description = "(Optional) [AWS VPC CNI] Enable AWS Network Policy Agent."
  type        = bool
  default     = false
}

variable "max_pods" {
  description = "(Optional) the max pod number in the node when enable eni prefix"
  type        = string
  default     = "110"
}

variable "tls_bootstrap_token" {
  description = "The token uses to authenticate API server."
  type = object({
    id     = string
    secret = string
  })

  default = {
    id     = ""
    secret = ""
  }
}

variable "cloud_provider" {
  description = "The cloud provider configuration."
  type        = string
  default     = ""
}

variable "ccm_config" {
  description = "The cloud contorller manager configuration."
  type        = map(any)
  default     = {}
}

variable "kubelet_cert" {
  description = "The kubelet cert property."
  type = object({
    algo   = string
    size   = number
    expiry = string
  })
  default = {
    algo   = "rsa"
    size   = 2048
    expiry = "87600h"
  }
}

variable "kubelet_config" {
  description = "The configuration of kubelet. The variables need to follow https://github.com/kubernetes/kubernetes/blob/master/staging/src/k8s.io/kubelet/config/v1beta1/types.go. Do not use underline."
  type        = map(any)
  default     = {}
}

variable "kubelet_flags" {
  description = "The flags of kubelet. The variables need to follow https://kubernetes.io/docs/reference/command-line-tools-reference/kubelet/. Do not use underline."
  type        = map(any)
  default     = {}
}

variable "apiserver_flags" {
  description = "The flags of kube-apiserver. The variables need to follow https://kubernetes.io/docs/reference/command-line-tools-reference/kube-apiserver/. Do not use underline."
  type        = map(any)
  default     = {}
}

variable "controller_manager_flags" {
  description = "The flags of kube-controller-manager. The variables need to follow https://kubernetes.io/docs/reference/command-line-tools-reference/kube-controller-manager/. Do not use underline."
  type        = map(any)
  default     = {}
}

variable "scheduler_flags" {
  description = "The flags of kube-scheduler. The variables need to follow https://kubernetes.io/docs/reference/command-line-tools-reference/kube-scheduler/. Do not use underline."
  type        = map(any)
  default     = {}
}

variable "certs" {
  description = "The kubernetes and etcd certificate."
  type        = map(string)
  default     = {}
}

variable "etcd_endpoints" {
  description = "The comma separated list of etcd endpoints (e.g., 'http://etcd1:2379,http://etcd2:2379')."
  type        = string
  default     = ""
}

variable "audit_log_flags" {
  description = "The flags of audit log in kube-apiserver. The variables need to follow https://kubernetes.io/docs/reference/command-line-tools-reference/kube-apiserver/. Do not use underline."
  type        = map(any)
  default     = {}
}

variable "audit_log_policy_content" {
  description = "The policy content for auditing log."
  type        = string
  default     = ""
}

variable "encryption_secret" {
  description = "The secret key for encrypting"
  type        = string
  default     = ""
}

variable "enable_iam_auth" {
  description = "Enable AWS IAM authenticator or not."
  type        = bool
  default     = false
}

variable "auth_webhook_config_path" {
  description = "The path of webhook config for kube-apiserver."
  type        = string
  default     = "/etc/kubernetes/config/aws-iam-authenticator/kubeconfig"
}

variable "enable_irsa" {
  description = "Enable AWS IAM role service account or not."
  type        = bool
  default     = false
}

variable "oidc_config" {
  description = "The service account config to enable pod identity feature."
  type = object({
    issuer        = string
    api_audiences = string
  })
  default = {
    issuer        = ""
    api_audiences = ""
  }
}

variable "kube_proxy_config" {
  description = "The configuration of kube-proxy. The variables need to follow https://github.com/kubernetes/kube-proxy/blob/master/config/v1alpha1/types.go. Do not use underline."
  type        = map(any)
  default     = {}
}

variable "coredns_config" {
  description = "The configuration of CoreDNS."
  type        = map(any)
  default     = {}
}

// TODO(kairen): add support for setting feature gates.
variable "feature_gates" {
  description = "A set of key=value pairs that describe feature gates for alpha/experimental features."
  type        = map(bool)
  default     = {}
}

variable "log_level" {
  description = "Log level and verbosity of each components"
  type = object({
    aws_cloud_controller_manager = optional(string, "2")     # 2: Info, 3: Extended Info, 4: Debug, 5: Trace
    aws_vpc_cni                  = optional(string, "DEBUG") # DEBUG, INFO, WARN, ERROR, FATAL
    containerd                   = optional(string, "info")  # trace, debug, info, warn, error, fatal, panic
    cilium_cni                   = optional(string, "DEBUG") # DEBUG: enable debug logging, INFO: disable debug logging
    docker                       = optional(string, "info")  # debug, info, warn, error, fatal
    kube_apiserver               = optional(string, "2")     # 2: Info, 3: Extended Info, 4: Debug, 5: Trace
    kube_controller_manager      = optional(string, "2")     # 2: Info, 3: Extended Info, 4: Debug, 5: Trace
    kube_scheduler               = optional(string, "2")     # 2: Info, 3: Extended Info, 4: Debug, 5: Trace
    kube_proxy                   = optional(string, "2")     # 2: Info, 3: Extended Info, 4: Debug, 5: Trace
    kubelet                      = optional(string, "2")     # 2: Info, 3: Extended Info, 4: Debug, 5: Trace
  })
}