nanochat/terraform/modules/acm/outputs.tf
Manmohan Sharma b381933c3b
feat(terraform): provision full AWS stack for samosaChaat (issue #4)
Add reusable Terraform modules and per-environment configs (dev/uat/prod)
in us-west-2 covering: VPC (3 AZ public/private), EKS 1.29 with IRSA and
ALB/EBS/EFS CSI add-ons, RDS PostgreSQL 15, four ECR repos, IAM roles
(EKS node, ALB controller IRSA, GitHub Actions OIDC), Route53 + ACM for
samosachaat.art, and EFS for model weights. State backend on S3
(samosachaat-terraform-state) with DynamoDB lock table.

terraform validate passes for dev, uat, and prod.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-04-16 11:11:02 -07:00

30 lines
1003 B
HCL

output "certificate_arn" {
description = "ARN of the issued certificate (use on the ALB Ingress annotation alb.ingress.kubernetes.io/certificate-arn)."
value = aws_acm_certificate.this.arn
}
output "domain_validation_options" {
description = "Raw validation options from AWS — used by the route53 module."
value = aws_acm_certificate.this.domain_validation_options
}
output "validation_records" {
description = "Map keyed by domain → { name, type, record } ready to plug into route53.acm_validation_records."
value = {
for dvo in aws_acm_certificate.this.domain_validation_options :
dvo.domain_name => {
name = dvo.resource_record_name
type = dvo.resource_record_type
record = dvo.resource_record_value
}
}
}
output "validation_record_fqdns" {
description = "List of FQDNs to feed into aws_acm_certificate_validation."
value = [
for dvo in aws_acm_certificate.this.domain_validation_options :
dvo.resource_record_name
]
}