You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
| encrypt\_secrets | Encrypt secret variables for lambda's such as secrets and private keys. |`bool`|`true`| no |
245
245
| environment | A name that identifies the environment, used as prefix and for tagging. |`string`| n/a | yes |
246
-
| github\_app | GitHub app parameters, see your github aapp. Ensure the key is base64 encoded. | <pre>object({<br> key_base64 = string<br> id = string<br> client_id = string<br> client_secret = string<br> webhook_secret = string<br> })</pre> | n/a | yes |
246
+
| github\_app | GitHub app parameters, see your github app. Ensure the key is base64 encoded. | <pre>object({<br> key_base64 = string<br> id = string<br> client_id = string<br> client_secret = string<br> webhook_secret = string<br> })</pre> | n/a | yes |
247
247
| instance\_profile\_path | The path that will be added to the instance\_profile, if not set the environment name will be used. |`string`|`null`| no |
248
248
| instance\_type | Instance type for the action runner. |`string`|`"m5.large"`| no |
249
249
| kms\_key\_id | Custom KMS key to encrypted lambda secrets, if not provided and `encrypt_secrets` = `true` a KMS key will be created by the module. Secrets will be encrypted with a context `Environment = var.environment`. |`string`|`null`| no |
250
250
| manage\_kms\_key | Let the module manage the KMS key. |`bool`|`true`| no |
251
-
| minimum\_running\_time\_in\_minutes | The time an ec2 action runner should be running at minium before terminated if non busy. |`number`|`5`| no |
251
+
| minimum\_running\_time\_in\_minutes | The time an ec2 action runner should be running at minimum before terminated if non busy. |`number`|`5`| no |
252
252
| role\_path | The path that will be added to role path for created roles, if not set the environment name will be used. |`string`|`null`| no |
253
253
| role\_permissions\_boundary | Permissions boundary that will be added to the created roles. |`string`|`null`| no |
254
254
| runner\_as\_root | Run the action runner under the root user. |`bool`|`false`| no |
255
255
| runner\_binaries\_syncer\_lambda\_timeout | Time out of the binaries sync lambda in seconds. |`number`|`300`| no |
256
256
| runner\_binaries\_syncer\_lambda\_zip | File location of the binaries sync lambda zip file. |`string`|`null`| no |
257
257
| runner\_extra\_labels | Extra labels for the runners (GitHub). Separate each label by a comma |`string`|`""`| no |
258
258
| runners\_lambda\_zip | File location of the lambda zip file for scaling runners. |`string`|`null`| no |
259
-
| runners\_maximum\_count | The maximum number of runners tha will be created. |`number`|`3`| no |
260
-
| runners\_scale\_down\_lambda\_timeout | Time out for the scale down lambda in seconds. |`number`|`60`| no |
261
-
| runners\_scale\_up\_lambda\_timeout | Time out for the scale up lambda in seconds. |`number`|`60`| no |
259
+
| runners\_maximum\_count | The maximum number of runners that will be created. |`number`|`3`| no |
260
+
| runners\_scale\_down\_lambda\_timeout | Time out for the scale up lambda in seconds. |`number`|`60`| no |
261
+
| runners\_scale\_up\_lambda\_timeout | Time out for the scale down lambda in seconds. |`number`|`60`| no |
262
262
| scale\_down\_schedule\_expression | Scheduler expression to check every x for scale down. |`string`|`"cron(*/5 * * * ? *)"`| no |
263
263
| subnet\_ids | List of subnets in which the action runners will be launched, the subnets needs to be subnets in the `vpc_id`. |`list(string)`| n/a | yes |
264
264
| tags | Map of tags that will be added to created resources. By default resources will be tagged with name and environment. |`map(string)`|`{}`| no |
265
265
| userdata\_post\_install | Script to be ran after the GitHub Actions runner is installed on the EC2 instances |`string`|`""`| no |
266
266
| userdata\_pre\_install | Script to be ran before the GitHub Actions runner is installed on the EC2 instances |`string`|`""`| no |
267
267
| vpc\_id | The VPC for security groups of the action runners. |`string`| n/a | yes |
268
268
| webhook\_lambda\_timeout | Time out of the webhook lambda in seconds. |`number`|`10`| no |
269
-
| webhook\_lambda\_zip | File location of the wehbook lambda zip file. |`string`|`null`| no |
269
+
| webhook\_lambda\_zip | File location of the webhook lambda zip file. |`string`|`null`| no |
Copy file name to clipboardExpand all lines: examples/default/README.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -4,7 +4,7 @@ This modules shows how to create GitHub action runners. Lambda release will be d
4
4
5
5
## Usages
6
6
7
-
Steps for the full setup, such as creating a GitHub app can be found in the root module's [README](../../README.md). First download the Lambda releases from GitHub. Alternatively you can build the lamdas locally with Node or Docker, there is a simple build script in `<root>/.ci/build.sh`. In the `main.tf` you can simple remove the location of the lambda zip files, the default location will work in this case.
7
+
Steps for the full setup, such as creating a GitHub app can be found in the root module's [README](../../README.md). First download the Lambda releases from GitHub. Alternatively you can build the lambdas locally with Node or Docker, there is a simple build script in `<root>/.ci/build.sh`. In the `main.tf` you can simple remove the location of the lambda zip files, the default location will work in this case.
| block\_device\_mappings | The EC2 instance block device configuration. Takes the following keys: `delete_on_termination`, `volume_type`, `volume_size`, `encrypted`, `iops`|`map(string)`|`{}`| no |
| encryption | KMS key to encrypted lambda environment secrets. Either provide a key and `ecnrypt` set to `true`. Or set the key to `null` and encrypt to `false`. | <pre>object({<br> kms_key_id = string<br> encrypt = bool<br> })</pre> | n/a | yes |
70
+
| encryption | KMS key to encrypted lambda environment secrets. Either provide a key and `encrypt` set to `true`. Or set the key to `null` and encrypt to `false`. | <pre>object({<br> kms_key_id = string<br> encrypt = bool<br> })</pre> | n/a | yes |
71
71
| environment | A name that identifies the environment, used as prefix and for tagging. |`string`| n/a | yes |
72
-
| github\_app | GitHub app parameters, see your github aapp. Ensure the key is base64 encoded. | <pre>object({<br> key_base64 = string<br> id = string<br> client_id = string<br> client_secret = string<br> })</pre> | n/a | yes |
72
+
| github\_app | GitHub app parameters, see your github app. Ensure the key is base64 encoded. | <pre>object({<br> key_base64 = string<br> id = string<br> client_id = string<br> client_secret = string<br> })</pre> | n/a | yes |
73
73
| instance\_profile\_path | The path that will be added to the instance\_profile, if not set the environment name will be used. |`string`|`null`| no |
74
74
| instance\_type | Default instance type for the action runner. |`string`|`"m5.large"`| no |
75
75
| lambda\_timeout\_scale\_down | Time out for the scale down lambda in seconds. |`number`|`60`| no |
76
76
| lambda\_timeout\_scale\_up | Time out for the scale up lambda in seconds. |`number`|`60`| no |
77
77
| lambda\_zip | File location of the lambda zip file. |`string`|`null`| no |
78
78
| market\_options | Market options for the action runner instances. |`string`|`"spot"`| no |
79
-
| minimum\_running\_time\_in\_minutes | The time an ec2 action runner should be running at minium before terminated if non busy. |`number`|`5`| no |
80
-
| overrides | This maps provides the possibility to override some defaults. The following attributes are supported: `name_sg` overwrite the `Name` tag for all security groups created by this module. `name_runner_agent_instance` override the `Name` tag for the ec2 instance defined in the auto launch configuration. `name_docker_machine_runners`ovverrid the `Name` tag spot instances created by the runner agent. |`map(string)`| <pre>{<br> "name_runner": "",<br> "name_sg": ""<br>}</pre> | no |
79
+
| minimum\_running\_time\_in\_minutes | The time an ec2 action runner should be running at minimum before terminated if non busy. |`number`|`5`| no |
80
+
| overrides | This maps provides the possibility to override some defaults. The following attributes are supported: `name_sg` overwrite the `Name` tag for all security groups created by this module. `name_runner_agent_instance` override the `Name` tag for the ec2 instance defined in the auto launch configuration. `name_docker_machine_runners`override the `Name` tag spot instances created by the runner agent. |`map(string)`| <pre>{<br> "name_runner": "",<br> "name_sg": ""<br>}</pre> | no |
81
81
| role\_path | The path that will be added to the role, if not set the environment name will be used. |`string`|`null`| no |
82
82
| role\_permissions\_boundary | Permissions boundary that will be added to the created role for the lambda. |`string`|`null`| no |
83
83
| runner\_as\_root | Run the action runner under the root user. |`bool`|`false`| no |
84
84
| runner\_extra\_labels | Extra labels for the runners (GitHub). Separate each label by a comma |`string`|`""`| no |
85
-
| runners\_maximum\_count | The maximum number of runners tha will be created. |`number`|`3`| no |
85
+
| runners\_maximum\_count | The maximum number of runners that will be created. |`number`|`3`| no |
Copy file name to clipboardExpand all lines: modules/runners/variables.tf
+5-5Lines changed: 5 additions & 5 deletions
Original file line number
Diff line number
Diff line change
@@ -4,7 +4,7 @@ variable "aws_region" {
4
4
}
5
5
6
6
variable"vpc_id" {
7
-
description="The VPC for the security groupss."
7
+
description="The VPC for the security groups."
8
8
type=string
9
9
}
10
10
@@ -14,7 +14,7 @@ variable "subnet_ids" {
14
14
}
15
15
16
16
variable"overrides" {
17
-
description="This maps provides the possibility to override some defaults. The following attributes are supported: `name_sg` overwrite the `Name` tag for all security groups created by this module. `name_runner_agent_instance` override the `Name` tag for the ec2 instance defined in the auto launch configuration. `name_docker_machine_runners` ovverrid the `Name` tag spot instances created by the runner agent."
17
+
description="This maps provides the possibility to override some defaults. The following attributes are supported: `name_sg` overwrite the `Name` tag for all security groups created by this module. `name_runner_agent_instance` override the `Name` tag for the ec2 instance defined in the auto launch configuration. `name_docker_machine_runners` override the `Name` tag spot instances created by the runner agent."
description="KMS key to encrypted lambda environment secrets. Either provide a key and `ecnrypt` set to `true`. Or set the key to `null` and encrypt to `false`."
181
+
description="KMS key to encrypted lambda environment secrets. Either provide a key and `encrypt` set to `true`. Or set the key to `null` and encrypt to `false`."
| account\_id | The module allows to switch to te crateed role from the provided account id. |`string`| n/a | yes |
54
+
| account\_id | The module allows to switch to the created role from the provided account id. |`string`| n/a | yes |
55
55
| environment | A name that identifies the environment, used as prefix and for tagging. |`string`| n/a | yes |
56
-
| namespaces | The role will be only allowed to crated rolo, policies and instance profiles in the gevin namespace / path. All policies in the boundaries namespace cannot be modified by this role. | <pre>object({<br> boundary_namespace = string<br> role_namespace = string<br> policy_namespace = string<br> instance_profile_namespace = string<br> })</pre> | n/a | yes |
56
+
| namespaces | The role will be only allowed to create roles, policies and instance profiles in the given namespace / path. All policies in the boundaries namespace cannot be modified by this role. | <pre>object({<br> boundary_namespace = string<br> role_namespace = string<br> policy_namespace = string<br> instance_profile_namespace = string<br> })</pre> | n/a | yes |
Copy file name to clipboardExpand all lines: modules/setup-iam-permissions/variables.tf
+2-2Lines changed: 2 additions & 2 deletions
Original file line number
Diff line number
Diff line change
@@ -4,7 +4,7 @@ variable "environment" {
4
4
}
5
5
6
6
variable"namespaces" {
7
-
description="The role will be only allowed to crated rolo, policies and instance profiles in the gevin namespace / path. All policies in the boundaries namespace cannot be modified by this role."
7
+
description="The role will be only allowed to create roles, policies and instance profiles in the given namespace / path. All policies in the boundaries namespace cannot be modified by this role."
8
8
type=object({
9
9
boundary_namespace =string
10
10
role_namespace =string
@@ -14,7 +14,7 @@ variable "namespaces" {
14
14
}
15
15
16
16
variable"account_id" {
17
-
description="The module allows to switch to te crateed role from the provided account id."
17
+
description="The module allows to switch to the created role from the provided account id."
0 commit comments