SkyForge

modules/network/variables.tf

variable "name" {
  type        = string
  description = "Short name prefixed onto VPC resources. Letters, numbers, and hyphens."
}

variable "project" {
  type        = string
  description = "Project tag. The example uses checkout-api."
}

variable "env" {
  type        = string
  description = "Environment tag, such as dev or prod."
}

variable "owner" {
  type        = string
  description = "Owner tag. The example uses the fictional Initech platform group."
}

variable "region" {
  type        = string
  description = "AWS region for VPC endpoints. Passed in so the module does not look up the caller region."
}

variable "vpc_cidr" {
  type        = string
  description = "IPv4 CIDR for the VPC."
}

variable "az_count" {
  type        = number
  description = "How many availability zones to use. The single-EC2 route uses 1. The Fargate route uses 2."

  validation {
    condition     = var.az_count == 1 || var.az_count == 2 || var.az_count == 3
    error_message = "az_count must be 1, 2, or 3."
  }
}

variable "availability_zones" {
  type        = list(string)
  description = "Optional AZ names. Empty selects the first az_count zones from the available-zones data source."
  default     = []

  validation {
    condition     = length(var.availability_zones) == 0 || length(var.availability_zones) >= var.az_count
    error_message = "availability_zones must be empty or at least az_count long."
  }
}

variable "public_subnet_cidrs" {
  type        = list(string)
  description = "Public subnet CIDRs, one per availability zone."

  validation {
    condition     = length(var.public_subnet_cidrs) == var.az_count
    error_message = "public_subnet_cidrs must have az_count entries."
  }
}

variable "private_subnet_cidrs" {
  type        = list(string)
  description = "Private subnet CIDRs, one per availability zone, when enable_private is true."
  default     = []

  validation {
    condition     = !var.enable_private || length(var.private_subnet_cidrs) == var.az_count
    error_message = "private_subnet_cidrs must have az_count entries when enable_private is true."
  }
}

variable "enable_private" {
  type        = bool
  description = "Create private subnets. Required for Fargate tasks. The single-EC2 route leaves this off."
  default     = true
}

variable "enable_nat" {
  type        = bool
  description = "Create one NAT gateway in the first public subnet. When false, and private subnets exist, interface endpoints are created instead."
  default     = true
}

variable "kms_key_arn" {
  type        = string
  description = "Customer managed key used to encrypt the VPC flow log group."
}