kasm-terraform/oci/standard/module
2025-09-03 19:29:04 +00:00
..
userdata KASM-7433 "Feature/ update ancillary repos that handle install stigs etc for removal of share functionality" 2025-09-03 19:29:04 +00:00
agent.tf Added SSH key generation feature to AWS and OCI 2024-04-25 21:01:21 +00:00
bastion.tf Added SSH key generation feature to AWS and OCI 2024-04-25 21:01:21 +00:00
cpx.tf Added SSH key generation feature to AWS and OCI 2024-04-25 21:01:21 +00:00
db.tf KASM-7433 "Feature/ update ancillary repos that handle install stigs etc for removal of share functionality" 2025-09-03 19:29:04 +00:00
dependencies.tf Simplified TF, added CPX, updated download URL 2024-02-12 22:45:26 +00:00
dns.tf Simplified TF, added CPX, updated download URL 2024-02-12 22:45:26 +00:00
letsencrypt.tf Simplified TF, added CPX, updated download URL 2024-02-12 22:45:26 +00:00
load_balancer.tf Simplified TF, added CPX, updated download URL 2024-02-12 22:45:26 +00:00
provider.tf Simplified TF, added CPX, updated download URL 2024-02-12 22:45:26 +00:00
README.md KASM-7433 "Feature/ update ancillary repos that handle install stigs etc for removal of share functionality" 2025-09-03 19:29:04 +00:00
security_lists.tf KASM-7433 "Feature/ update ancillary repos that handle install stigs etc for removal of share functionality" 2025-09-03 19:29:04 +00:00
ssh_keys.tf Apply Formatting 2024-04-25 21:05:12 +00:00
subnets.tf KASM-7433 "Feature/ update ancillary repos that handle install stigs etc for removal of share functionality" 2025-09-03 19:29:04 +00:00
variables.tf KASM-7433 "Feature/ update ancillary repos that handle install stigs etc for removal of share functionality" 2025-09-03 19:29:04 +00:00
vcn.tf Simplified TF, added CPX, updated download URL 2024-02-12 22:45:26 +00:00
webapp.tf KASM-7433 "Feature/ update ancillary repos that handle install stigs etc for removal of share functionality" 2025-09-03 19:29:04 +00:00

module

Requirements

Name Version
terraform ~> 1.0
acme ~> 2.0
oci ~> 5.0
tls ~> 4.0

Providers

Name Version
acme 2.20.0
oci 5.28.0
tls 4.0.5

Modules

No modules.

Resources

Name Type
acme_certificate.this resource
acme_registration.this resource
oci_core_instance.agent resource
oci_core_instance.bastion resource
oci_core_instance.cpx resource
oci_core_instance.db resource
oci_core_instance.webapp resource
oci_core_internet_gateway.this resource
oci_core_nat_gateway.this resource
oci_core_route_table.internet_gateway resource
oci_core_route_table.nat_gateway resource
oci_core_security_list.allow_bastion_ssh resource
oci_core_security_list.allow_db resource
oci_core_security_list.allow_public_ssh resource
oci_core_security_list.allow_rdp_to_windows resource
oci_core_security_list.allow_web resource
oci_core_security_list.allow_web_from_lb resource
oci_core_security_list.allow_web_from_webapp resource
oci_core_subnet.agent resource
oci_core_subnet.cpx resource
oci_core_subnet.db resource
oci_core_subnet.lb resource
oci_core_subnet.webapp resource
oci_core_subnet.windows resource
oci_core_vcn.this resource
oci_dns_rrset.kasm_a_record resource
oci_load_balancer.public resource
oci_load_balancer_backend.public resource
oci_load_balancer_backend_set.public resource
oci_load_balancer_certificate.public resource
oci_load_balancer_listener.kasm_https_ssl_listener resource
tls_cert_request.this resource
tls_private_key.certificate resource
tls_private_key.registration resource
oci_dns_zones.this data source
oci_identity_availability_domains.kasm_ads data source
oci_load_balancer_ssl_cipher_suite.this data source

Inputs

Name Description Type Default Required
admin_password The administrative user password. No special characters string n/a yes
allow_ssh_cidrs The CIDR notation to allow SSH access to the systems. list(string) n/a yes
allow_web_cidrs The CIDR notation to allow HTTPS access to the systems. list(string) n/a yes
anywhere Anywhere route subnet list(string)
[
"0.0.0.0/0"
]
no
bastion_vm_settings The number of CPUs, amount of memory in GB, and HDD size in GB to configure for the Kasm SSH Bastion instance
object({
cpus = number
memory = number
hdd_size_gb = number
})
n/a yes
bastion_vm_utilization The VM compute utilization. Defaults to 12.5% to reduce costs on long-running instances. string "BASELINE_1_8" no
compartment_ocid The Compartment OCID string n/a yes
database_password The password for the database. No special characters string n/a yes
fingerprint API Key Fingerprint string n/a yes
instance_image_ocid The OCID for the instance image , such as ubuntu 20.04, to use. string n/a yes
instance_shape The instance shape to use. Should be a Flex type. string n/a yes
kasm_agent_vm_settings The number of CPUs, amount of memory in GB, and HDD size in GB to configure for the Kasm Agent instances
object({
cpus = number
memory = number
hdd_size_gb = number
})
n/a yes
kasm_build_url The URL for the Kasm Workspaces build string n/a yes
kasm_cpx_vm_settings The number of CPUs, amount of memory in GB, and HDD size in GB to configure for the Kasm cpx RDP instances
object({
cpus = number
memory = number
hdd_size_gb = number
})
n/a yes
kasm_database_vm_settings The number of CPUs, amount of memory in GB, and HDD size in GB to configure for the Kasm Database instance
object({
cpus = number
memory = number
hdd_size_gb = number
})
n/a yes
kasm_ssl_crt_path The file path to the PEM encoded SSL Certificate string n/a yes
kasm_ssl_key_path The file path to the PEM encoded SSL Certificate Key string n/a yes
kasm_webapp_vm_settings The number of CPUs, amount of memory in GB, and HDD size in GB to configure for the Kasm WebApp instances
object({
cpus = number
memory = number
hdd_size_gb = number
})
n/a yes
letsencrypt_cert_support_email Email address to use for Let's Encrypt SSL certificates for OCI Deployment string n/a yes
letsencrypt_server_type SSL Server type to generate. Valid options are staging and prod, and prod certificates are limited to 5 certificates per week. string n/a yes
manager_token The manager token value for Agents to authenticate to webapps. No special characters string n/a yes
num_agents The number of Agent Role Servers to create in the deployment number n/a yes
num_cpx_nodes The number of WebApp role servers to create in the deployment number n/a yes
num_webapps The number of WebApp role servers to create in the deployment number n/a yes
oci_domain_name The public Zone used for the dns entries. This must already exist in the OCI account. (e.g kasm.contoso.com). The deployment will be accessed via this zone name via https string n/a yes
private_key_path The path to the API Key PEM encoded Private Key string n/a yes
project_name The name of the deployment (e.g dev, staging). A short single word string n/a yes
region The OCI Region eg: (us-ashburn-1) string n/a yes
service_registration_token The service registration token value for cpx RDP servers to authenticate to webapps. No special characters string n/a yes
ssh_authorized_keys The SSH Public Keys to be installed on the OCI compute instance string n/a yes
swap_size The amount of swap (in MB) to configure inside the compute instances number n/a yes
tenancy_ocid The Tenancy OCID. string n/a yes
user_ocid The User OCID. string n/a yes
user_password The standard (non administrator) user password. No special characters string n/a yes
vcn_subnet_cidr VCN Subnet CIDR where you wish to deploy Kasm string n/a yes

Outputs

No outputs.