eks-gitlab/examples/main.tf at bca1b7bfa5dbd287b0a13f7394a8fde02a238a06 · Perun-Engineering/eks-gitlab · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
locals {
  saml_google_provider = <<EOF
name: saml
label: 'G Suite'
args:
  assertion_consumer_service_url: 'https://gitlab.example.com/users/auth/saml/callback'
  idp_cert_fingerprint: '00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00'
  idp_sso_target_url: 'https://accounts.google.com/o/saml2/idp?idpid=aabbccdde'
  issuer: 'https://gitlab.example.com'
  name_identifier_format: 'urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress'
  attribute_statements: {
    email: [
      'emailAddress'
    ]
  }
EOF
  bucket_prefix        = "gitlab-mycompany"
}

module "gitlab" {
  source = "../"

  cluster_name         = "my-eks-cluster"
  release_name         = "gitlab"
  gitlab_chart_version = "7.8.1"

  database_password          = "database_password"
  registry_database_password = "registry_datatabase_password"
  redis_password             = "redis_password"
  smtp_user                  = "postfix"
  smtp_password              = "smtp_password"
  omniauth_providers = {
    "gitlab-omniauth-saml" = local.saml_google_provider
  }

  bucket_prefix = local.bucket_prefix
  buckets_lifecycles = {
    artifacts = <<EOF
{
  "lifecycle_rule": [
    {
      "id": "log",
      "enabled": true,
      "expiration": {
        "days": 30
      }
    }
  ]
}
EOF
    uploads   = <<EOF
{
  "lifecycle_rule": [
    {
      "id": "log",
      "enabled": true,
      "noncurrent_version_transition": [
        {
          "days": 30,
          "storage_class": "STANDARD_IA"
        }
      ]
    }
  ]
}
EOF
  }
  # Default is `false`, determine for each of backup, lfs, artifacts, packages, uploads etc
  buckets_versioning = {
    backup = true
  }

  values = [
    templatefile("values.yaml", {
      database_host              = "gitlab.xxxxxxxxxxxx.eu-central-1.rds.amazonaws.com"
      database_port              = "5432"
      database_username          = "postgres"
      registry_database_username = "gitlab_registry"
      redis_host                 = "master.gitlab.xxxxxx.euc1.cache.amazonaws.com"
      redis_port                 = "6379"
      release_name               = "gitlab"
      bucket_prefix              = local.bucket_prefix
      domain                     = "example.com"
      smtp_address               = "smtp.gmail.com"
    })
  ]

  tags = {}
}