Groups Options

kontfix.groups

System account groups organized by region (groups.region.groupName)

Type: attribute set of attribute set of (submodule)

Default: { }

Example:

{
  au = {
    staging = {
      aws = {
        enable = true;
        profile = "default";
        region = "ap-southeast-2";
        tags = {
          environment = "staging";
          team = "platform";
        };
      };
      generate_token = true;
      members = [
        "staging-web"
        "staging-api"
      ];
      storage_backend = [
        "aws"
      ];
    };
  };
  us = {
    dev = {
      generate_token = true;
      members = [
        "dev-app"
        "dev-db"
      ];
      storage_backend = [
        "hcv"
      ];
    };
  };
}

Declared by: - groups/options.nix

kontfix.groups.<region>.<controlPlane>.aws

AWS provider configuration for group system account token storage

Type: submodule

Default: { }

Declared by: - groups/options.nix

kontfix.groups.<region>.<controlPlane>.aws.enable

Whether to enable AWS provider

Type: boolean

Default: false

Declared by: - groups/options.nix

kontfix.groups.<region>.<controlPlane>.aws.profile

AWS profile name to use

Type: string

Default: ""

Declared by: - groups/options.nix

kontfix.groups.<region>.<controlPlane>.aws.region

AWS region for resources

Type: string

Default: ""

Declared by: - groups/options.nix

kontfix.groups.<region>.<controlPlane>.aws.tags

AWS tags to apply when using AWS storage backend

Type: attribute set of string

Default: { }

Declared by: - groups/options.nix

kontfix.groups.<region>.<controlPlane>.generate_token

Whether to generate and store a system account token in the backend for this group

Type: boolean

Default: false

Declared by: - groups/options.nix

kontfix.groups.<region>.<controlPlane>.members

List of control plane names to be included in this group

Type: list of string

Declared by: - groups/options.nix

kontfix.groups.<region>.<controlPlane>.storage_backend

Storage backend(s) for group system account token

Type: list of (one of “local”, “hcv”, “aws”)

Default:

[
  "local"
]

Declared by: - groups/options.nix