terraform.tfvars.example

# Copyright 2017, 2019, Oracle Corporation and/or affiliates.  All rights reserved.
# Licensed under the Universal Permissive License v 1.0 as shown at http://oss.oracle.com/licenses/upl

# Identity and access parameters

api_fingerprint = ""

api_private_key_path = ""

compartment_name = ""

compartment_id = ""

tenancy_id = ""

user_id = ""

# ssh keys

ssh_private_key_path = ""

ssh_public_key_path = ""

# general oci parameters
label_prefix = "oke"

region = "us-phoenix-1"

# networking

newbits = {
  "bastion" = 13
  "lb"      = 11
  "workers" = 2
}

subnets = {
  "bastion" = 32
  "int_lb"  = 16
  "pub_lb"  = 17
  "workers" = 1
}

vcn_cidr = "10.0.0.0/16"

vcn_dns_label = "oke"

vcn_name = "oke vcn"

create_nat_gateway = true

nat_gateway_name = "nat"

create_service_gateway = true

service_gateway_name = "sg"

# bastion

bastion_shape = "VM.Standard.E2.1"

create_bastion = true

bastion_access = "ANYWHERE"

enable_instance_principal = false

image_operating_system = "Oracle Linux"

image_operating_system_version = "7.7"

# availability_domains

# which AD where to place non-OKE resources
availability_domains = {
  "bastion"     = 1
}

bastion_package_update = false

bastion_package_upgrade = true

# oke

cluster_name = "oke"

worker_mode = "private"

allow_node_port_access = false

allow_worker_ssh_access = false

dashboard_enabled = true

kubernetes_version = "LATEST"

node_pools = {
  "np1" = ["VM.Standard2.1", 1]
}

node_pool_name_prefix = "np"

node_pool_image_id = "NONE"

node_pool_os = "Oracle Linux"

node_pool_os_version = "7.6"

pods_cidr = "10.244.0.0/16"

services_cidr = "10.96.0.0/16"

tiller_enabled = true

# oke load balancers

lb_subnet_type = "public"

preferred_lb_subnets = "public"

# ocir
create_auth_token = false

email_address = ""

tenancy_name = ""

username = ""

# helm

add_incubator_repo = false

add_jetstack_repo = false

helm_version = "2.14.3"

install_helm = true

# calico

calico_version = "3.9"

install_calico = false

#metrics server
install_metricserver = false

# kms
use_encryption = false

existing_key_id = ""