Release test for AWS IAM Redis passwordless

modules/runtime_container_engine_config/outputs.tf

@@ -10,3 +10,26 @@ output "podman_kube_yaml" {
   value       = base64encode(yamlencode(local.kube))
   description = "A base 64 encoded yaml object that will be used as the Podman kube.yaml file for TFE deployment"
 }
+
+output "debug_redis_env_vars" {
+  value = {
+    TFE_REDIS_USER                             = local.redis.TFE_REDIS_USER
+    TFE_REDIS_USE_AUTH                         = local.redis.TFE_REDIS_USE_AUTH
+    TFE_REDIS_USE_TLS                          = local.redis.TFE_REDIS_USE_TLS
+    TFE_REDIS_PASSWORDLESS_AWS_USE_IAM         = local.redis.TFE_REDIS_PASSWORDLESS_AWS_USE_IAM
+    TFE_REDIS_SIDEKIQ_PASSWORDLESS_AWS_USE_IAM = local.redis.TFE_REDIS_SIDEKIQ_PASSWORDLESS_AWS_USE_IAM
+    TFE_REDIS_CA_CERT_PATH                     = local.redis.TFE_REDIS_CA_CERT_PATH
+  }
+  description = "Debug output for Redis environment variables"
+}
+
+output "debug_redis_input_vars" {
+  value = {
+    redis_user                     = var.redis_user
+    redis_use_auth                 = var.redis_use_auth
+    redis_use_tls                  = var.redis_use_tls
+    redis_passwordless_aws_use_iam = var.redis_passwordless_aws_use_iam
+    redis_ca_cert_path             = var.redis_ca_cert_path
+  }
+  description = "Debug output for Redis input variables"
+}

modules/runtime_container_engine_config/redis_config.tf

@@ -20,6 +20,8 @@ locals {
     TFE_REDIS_PASSWORDLESS_AZURE_USE_MSI         = var.redis_passwordless_azure_use_msi
     TFE_REDIS_SIDEKIQ_PASSWORDLESS_AZURE_USE_MSI = var.redis_passwordless_azure_use_msi
     TFE_REDIS_PASSWORDLESS_AZURE_CLIENT_ID       = var.redis_passwordless_azure_client_id
+    TFE_REDIS_PASSWORDLESS_AWS_USE_IAM           = var.redis_passwordless_aws_use_iam
+    TFE_REDIS_SIDEKIQ_PASSWORDLESS_AWS_USE_IAM   = var.redis_passwordless_aws_use_iam
   }
   redis_configuration = local.active_active ? local.redis : {}
 }

modules/runtime_container_engine_config/variables.tf

@@ -369,6 +369,12 @@ variable "redis_passwordless_azure_client_id" {
   description = "Azure Managed Service Identity (MSI) Client ID to be used for redis authentication. If not set, System Assigned Managed Identity will be used."
 }
 
+variable "redis_passwordless_aws_use_iam" {
+  default     = false
+  type        = bool
+  description = "Whether or not to use AWS IAM authentication to connect to the Redis server. Defaults to false if no value is given."
+}
+
 variable "run_pipeline_image" {
   type        = string
   description = "Container image used to execute Terraform runs. Leave blank to use the default image that comes with Terraform Enterprise. Defaults to \"\" if no value is given."