Skip to content

index.md

Latest commit

 

History

History
50 lines (38 loc) · 3.04 KB

index.md

File metadata and controls

50 lines (38 loc) · 3.04 KB
Raw
page_title UDS Provider
description Manage UDS resources with OpenTofu.

UDS Provider

Manage UDS resources with OpenTofu.

~> This provider is an alpha release. Its interfaces and behavior may change between releases, including breaking changes.

Example Usage

terraform {
  required_providers {
    uds = {
      source = "defenseunicorns/uds"
    }
  }
}

provider "uds" {
  # Override the architecture detected from the local machine.
  # default_architecture = "amd64"

  # Use a custom directory for downloaded packages.
  # zarf_cache_path = "~/.zarf-cache"

  # Disable package loading and validation during planning.
  # validate_packages_on_plan = false

  # Force Helm to take ownership of conflicting Server-Side Apply fields.
  # force_helm_ssa_conflicts = true
}

Schema

Optional

  • default_architecture (String) Default system architecture of the target cluster. Valid values are amd64 or arm64. Defaults to the local system architecture. Can also be configured with the UDS_DEFAULT_ARCHITECTURE environment variable.
  • force_helm_ssa_conflicts (Boolean) Force Helm to take ownership of conflicting fields during Server-Side Apply operations during package deployment. Use when external tools (kubectl, HPAs, etc.) have modified resources. Defaults to false. Can also be configured with the UDS_FORCE_HELM_SSA_CONFLICTS environment variable.
  • insecure_force_http (Boolean) Allow plain HTTP for OCI package sources and force plain HTTP for external Zarf registry pushes. Package sources continue to use HTTPS when available, while Zarf-managed registries use the transport recorded in cluster state. Defaults to false. Can also be configured with the UDS_INSECURE_FORCE_HTTP environment variable.
  • insecure_skip_tls_verification (Boolean) Skip TLS certificate verification for HTTPS package sources and external Zarf registry pushes. Zarf-managed mTLS registries continue to use their managed trust configuration. Defaults to false. Can also be configured with the UDS_INSECURE_SKIP_TLS_VERIFICATION environment variable.
  • validate_packages_on_plan (Boolean) Whether to validate UDS packages and resolve source digests during planning. When enabled, the provider detects changes behind mutable source references and may load packages to catch package-dependent configuration errors early, such as invalid optional component names or signature verification failures. Disabling this avoids plan-time source access, but changes behind an unchanged source reference cannot independently trigger an update. Validation and digest recording still occur when another change causes apply. Defaults to true. Can also be configured with the UDS_VALIDATE_PACKAGES_ON_PLAN environment variable.
  • zarf_cache_path (String) Filesystem path to the local Zarf cache directory. Defaults to ~/.zarf-cache. Can also be configured with the UDS_ZARF_CACHE_PATH environment variable.