burrow/infra/releases/variables.tf
Conrad Kramer 002bd382e9
Some checks failed
Cache: Publish Nix / Publish Nix Cache (push) Waiting to run
Build Rust / Cargo Test (push) Successful in 4m14s
Build Site / Next.js Build (push) Failing after 6s
Infra: OpenTofu / OpenTofu (grafana) (push) Successful in 5s
Lint Governance / BEP Metadata (push) Successful in 0s
Build: Android / Android Rust Core Stub (push) Failing after 23s
Wire Forge-native release infrastructure
2026-06-07 05:51:12 -07:00

81 lines
2.4 KiB
HCL

variable "manage_google" {
description = "Manage Google Cloud release storage resources."
type = bool
default = false
}
variable "google_project_id" {
description = "Google Cloud project id for Burrow release storage."
type = string
default = "project-88c23ce9-918a-470a-b33"
}
variable "google_storage_location" {
description = "Google Cloud Storage bucket location for release, package, and cache backup buckets."
type = string
default = "US"
}
variable "google_runner_service_account_email" {
description = "Forgejo runner service account email allowed to publish release, package, and cache backup objects."
type = string
default = "burrow-forgejo-runner@project-88c23ce9-918a-470a-b33.iam.gserviceaccount.com"
}
variable "google_release_bucket_name" {
description = "GCS bucket for release artifacts served by releases.burrow.net."
type = string
default = "burrow-net-releases"
}
variable "google_package_bucket_name" {
description = "GCS bucket for signed package repositories served by packages.burrow.net."
type = string
default = "burrow-net-packages"
}
variable "google_nix_cache_bucket_name" {
description = "GCS backup bucket for the Garage-backed Burrow Nix cache."
type = string
default = "burrow-net-nix-cache"
}
variable "google_release_public_read" {
description = "Grant allUsers objectViewer on the release artifact bucket."
type = bool
default = true
}
variable "google_package_public_read" {
description = "Grant allUsers objectViewer on the package repository bucket."
type = bool
default = true
}
variable "google_nix_cache_public_read" {
description = "Grant allUsers objectViewer on the Nix cache backup bucket."
type = bool
default = false
}
variable "google_release_extra_writer_members" {
description = "Additional IAM members allowed to write release, repository, and cache backup objects."
type = set(string)
default = []
}
variable "google_storage_cors_origins" {
description = "Allowed origins for public release/package downloads."
type = list(string)
default = [
"https://burrow.net",
"https://releases.burrow.net",
"https://packages.burrow.net",
]
}
variable "tags" {
description = "Additional labels applied to supported Google resources."
type = map(string)
default = {}
}