mirror of
https://github.com/karpathy/nanochat.git
synced 2026-05-16 04:37:34 +00:00
Add reusable Terraform modules and per-environment configs (dev/uat/prod) in us-west-2 covering: VPC (3 AZ public/private), EKS 1.29 with IRSA and ALB/EBS/EFS CSI add-ons, RDS PostgreSQL 15, four ECR repos, IAM roles (EKS node, ALB controller IRSA, GitHub Actions OIDC), Route53 + ACM for samosachaat.art, and EFS for model weights. State backend on S3 (samosachaat-terraform-state) with DynamoDB lock table. terraform validate passes for dev, uat, and prod. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
30 lines
1003 B
HCL
30 lines
1003 B
HCL
output "certificate_arn" {
|
|
description = "ARN of the issued certificate (use on the ALB Ingress annotation alb.ingress.kubernetes.io/certificate-arn)."
|
|
value = aws_acm_certificate.this.arn
|
|
}
|
|
|
|
output "domain_validation_options" {
|
|
description = "Raw validation options from AWS — used by the route53 module."
|
|
value = aws_acm_certificate.this.domain_validation_options
|
|
}
|
|
|
|
output "validation_records" {
|
|
description = "Map keyed by domain → { name, type, record } ready to plug into route53.acm_validation_records."
|
|
value = {
|
|
for dvo in aws_acm_certificate.this.domain_validation_options :
|
|
dvo.domain_name => {
|
|
name = dvo.resource_record_name
|
|
type = dvo.resource_record_type
|
|
record = dvo.resource_record_value
|
|
}
|
|
}
|
|
}
|
|
|
|
output "validation_record_fqdns" {
|
|
description = "List of FQDNs to feed into aws_acm_certificate_validation."
|
|
value = [
|
|
for dvo in aws_acm_certificate.this.domain_validation_options :
|
|
dvo.resource_record_name
|
|
]
|
|
}
|