Configuration¶

This page documents all variables available in the terraform-aws-cloud-init module.

Required Variables¶

environment¶

Environment name passed as a Puppet fact.

• Type: string
• Required: Yes

environment = "production"

role¶

Puppet role passed as a fact.

• Type: string
• Required: Yes

role = "webserver"

Optional Variables¶

ubuntu_codename¶

Ubuntu version codename. Determines which InfraHouse repository to configure.

• Type: string
• Default: "noble"

ubuntu_codename = "noble"

packages¶

Additional packages to install during bootstrap.

• Type: list(string)
• Default: []

packages = ["nginx", "htop", "jq"]

custom_facts¶

Custom Puppet facts to inject into the instance.

• Type: any
• Default: {}

custom_facts = {
  app_version  = "1.2.3"
  cluster_name = "web-cluster"
}

Facts are written to /etc/puppetlabs/facter/facts.d/custom.json.

extra_files¶

Additional files to create on the instance.

• Type: list(object)
• Default: []

extra_files = [
  {
    content     = "my config content"
    path        = "/etc/myapp/config.txt"
    permissions = "0644"
  }
]

extra_repos¶

Additional APT repositories to configure.

• Type: map(object)
• Default: {}

extra_repos = {
  "myrepo" = {
    source = "deb [signed-by=$KEY_FILE] https://apt.example.com/ubuntu noble main"
    key    = file("path/to/gpg-key.asc")
  }
}

extra_repos = {
  "myrepo" = {
    source    = "deb [signed-by=$KEY_FILE] https://apt.example.com/ubuntu noble main"
    keyid     = "A627B7760019BA51B903453D37A181B689AD619"
    keyserver = "keyserver.ubuntu.com"  # optional
  }
}

extra_repos = {
  "private-repo" = {
    source   = "deb [signed-by=$KEY_FILE] https://apt.example.com/ubuntu noble main"
    keyid    = "A627B7760019BA51B903453D37A181B689AD619"
    machine  = "apt.example.com"
    authFrom = "arn:aws:secretsmanager:us-west-2:123456789012:secret:apt-creds"
  }
}

pre_runcmd¶

Commands to run before Puppet applies the manifest.

• Type: list(string)
• Default: []

pre_runcmd = [
  "mkdir -p /opt/myapp",
  "echo 'Starting bootstrap' >> /var/log/bootstrap.log"
]

post_runcmd¶

Commands to run after Puppet applies the manifest.

• Type: list(string)
• Default: []

post_runcmd = [
  "systemctl restart nginx",
  "echo 'Bootstrap complete' >> /var/log/bootstrap.log"
]

ssh_host_keys¶

Pre-configured SSH host keys for consistent host identification.

• Type: list(object)
• Default: []
• Sensitive: Yes

ssh_host_keys = [
  {
    type    = "rsa"
    private = file("keys/ssh_host_rsa_key")
    public  = file("keys/ssh_host_rsa_key.pub")
  }
]

mounts¶

Volumes to mount before Puppet runs.

• Type: list(list(string))
• Default: []

mounts = [
  ["/dev/xvdf", "/data", "ext4", "defaults,nofail", "0", "2"]
]

gzip_userdata¶

Whether to gzip compress the userdata.

• Type: bool
• Default: false

gzip_userdata = true

Puppet Configuration Variables¶

Outputs¶

userdata¶

Base64-encoded cloud-init configuration ready to use in launch templates.

output "userdata" {
  description = "Rendered user-data with cloudinit config"
  value       = module.cloud_init.userdata
}