| acme_contact |
Let's encrypt contact email address |
string |
n/a |
yes |
| application_credential_id |
Application credentials ID for accessing OpenStack project (mutually exclusive with aws parameter) |
string |
"" |
no |
| application_credential_secret |
Application credentials secret for accessing OpenStack project (mutually exclusive with aws parameter) |
string |
"" |
no |
| aws_config |
AWS configuration (mutually exclusive with application_credential_id, application_credential_secret and os_auth_url parameters) |
object({
accessKeyId = string
secretAccessKey = string
region = string
availabilityZone = string
baseVpc = string
baseSubnet = string
eksSgId = string
}
) |
{
"accessKeyId": "",
"availabilityZone": "eu-central-1a",
"baseSubnet": "BaseSubnetA",
"baseVpc": "BaseNet",
"eksSgId": "",
"region": "eu-central-1",
"secretAccessKey": ""
} |
no |
| certs_version |
Version of certs helm package |
string |
"1.0.0" |
no |
| cors_whitelist |
A list of origins that are authorized to make cross-site HTTP requests |
list(string) |
[] |
no |
| deploy_head_timeout |
Timeout for deploying head helm package in seconds |
number |
3600 |
no |
| deploy_longhorn |
Deploy Longhorn helm package |
bool |
false |
no |
| gen_user_count |
Number of local users to generate |
number |
n/a |
yes |
| gen_users_version |
Version of gen-users helm package |
string |
"1.0.0" |
no |
| git_config |
Git configuration |
object({
providers = map(string)
user = string
ansibleNetworkingUrl = string
ansibleNetworkingRev = string
topologyCacheMode = optional(string, "AGGRESSIVE")
}
) |
{
"ansibleNetworkingRev": "v1.0.18",
"ansibleNetworkingUrl": "https://github.com/cyberrangecz/ansible-stage-one.git",
"providers": {},
"user": "git"
} |
no |
| grafana_client_secret |
Grafana OIDC client secret |
string |
"" |
no |
| head_host |
FQDN/IP address of node/LB, where head services are running |
string |
n/a |
yes |
| head_version |
Version of head helm package |
string |
"1.0.0" |
no |
| helm_repository |
Repository with head helm packages |
string |
"oci://ghcr.io/cyberrangecz/stable" |
no |
| netbird_client_management_url |
Public URL of the NetBird management server baked into sandbox VMs. Empty disables the sandbox NetBird integration. |
string |
"" |
no |
| oidc_providers |
List of OIDC providers. Set issuerIdentifier and userInfoUrl to empty string if not used. |
list(object({
url = string
logoutUrl = string
clientId = string
label = string
issuerIdentifier = string
userInfoUrl = string
responseType = string
refreshToken = optional(bool)
}
)) |
n/a |
yes |
| os_auth_url |
OpenStack authentication URL (mutually exclusive with aws parameter) |
string |
"" |
no |
| postgres_value_file |
File containing Helm values for postgres helm chart |
string |
"values-postgres.yaml" |
no |
| postgres_version |
Version of postgres helm package |
string |
"1.0.0" |
no |
| proxy_host |
FQDN/IP address of proxy jump host |
string |
n/a |
yes |
| proxy_key |
Base64 encoded proxy jump ssh private key |
string |
n/a |
yes |
| proxy_port |
SSH Port of proxy jump host |
string |
"22" |
no |
| proxy_user |
Username to access proxy jump instance |
string |
"ubuntu" |
no |
| self_signed |
Use selfsigned certificates instead of Let's Encrypt for fqdn |
bool |
false |
no |
| smtp_config |
SMTP configuration for Sandbox Service notificatins |
object({
smtp_server = string
smtp_port = number
smtp_encryption = string
sender_email = string
sender_email_password = string
}
) |
{
"sender_email": "",
"sender_email_password": "",
"smtp_encryption": "",
"smtp_port": 25,
"smtp_server": ""
} |
no |
| tls_private_key |
Base64 encoded tls private key. If not specified, it will be generated. |
string |
"" |
no |
| tls_public_key |
Base64 encoded tls public key. If not specified, it will be generated |
string |
"" |
no |
| users |
Dictionary with users, that should be created in CyberRangeCZ Platform. For users from external OIDC providers, set password to empty string. |
map(
object({
iss = string
email = string
fullName = string
givenName = string
familyName = string
admin = bool
keycloakUsername = string
keycloakPassword = string
}
)) |
n/a |
yes |
| value_files |
List of files containing Helm values |
list(string) |
[
"values.yaml"
] |
no |