mirror of
https://github.com/Sea-Haven-Industries/shoc-frontend-new.git
synced 2026-10-07 16:19:01 +00:00
Adam Moussa
2a106d4e9e
Give HCP the bucket and CloudFront with an empty origin path. GitHub owns bucket-root sync and invalidation so merge-to-main and a human staging tag can deploy without creating HCP runs. G13 fails PRs that mix terraform/ with deployable application files.
46 lines
1.1 KiB
HCL
46 lines
1.1 KiB
HCL
variable "aws_account_id" {
|
|
type = string
|
|
description = "Expected AWS account ID."
|
|
}
|
|
|
|
variable "aws_region" {
|
|
type = string
|
|
description = "Expected AWS provider region."
|
|
}
|
|
|
|
variable "hosted_zone_name" {
|
|
type = string
|
|
description = "Public hosted zone DNS name."
|
|
}
|
|
|
|
variable "expected_hosted_zone_id" {
|
|
type = string
|
|
description = "Pinned hosted zone ID."
|
|
}
|
|
|
|
variable "certificate_domain" {
|
|
type = string
|
|
description = "Domain used to resolve the expected certificate."
|
|
}
|
|
|
|
variable "expected_certificate_arn" {
|
|
type = string
|
|
description = "Pinned ACM certificate ARN."
|
|
}
|
|
|
|
variable "expected_github_oidc_provider_arn" {
|
|
type = string
|
|
description = "Pinned account-global GitHub OIDC provider ARN."
|
|
}
|
|
|
|
variable "cache_policy_name" {
|
|
type = string
|
|
description = "AWS managed CloudFront cache policy name."
|
|
default = "Managed-CachingOptimized"
|
|
}
|
|
|
|
variable "expected_cache_policy_id" {
|
|
type = string
|
|
description = "Pinned AWS managed CloudFront cache policy ID."
|
|
default = "658327ea-f89d-4fab-a63d-7e88639e58f6"
|
|
}
|