Make acme environment boolean (staging or prod)

Author: bmonkman

kubernetes/terraform/modules/kubernetes/cert_manager.tf

@@ -1,8 +1,8 @@
 locals {
-  cert_manager_namespace  = "kube-system"
-  cert_manager_version    = "0.14.2"
+  cert_manager_namespace   = "kube-system"
+  cert_manager_version     = "0.14.2"
   cluster_issuer_name      = "clusterissuer-letsencrypt-${var.cert_manager_acme_environment}"
-  cert_manager_acme_server = var.cert_manager_acme_environment == "production" ? "https://acme-v02.api.letsencrypt.org/directory" : "https://acme-${var.cert_manager_acme_environment}-v02.api.letsencrypt.org/directory"
+  cert_manager_acme_server = var.cert_manager_use_production_acme_environment ? "https://acme-v02.api.letsencrypt.org/directory" : "https://acme-staging-v02.api.letsencrypt.org/directory"
 }
 
 # Reference an existing route53 zone

kubernetes/terraform/modules/kubernetes/variables.tf

@@ -18,9 +18,10 @@ variable "external_dns_owner_id" {
   description = "Unique id of the TXT record that external-dns will use to store state (can just be a uuid)"
 }
 
-variable "cert_manager_acme_environment" {
-  default     = "production"
-  description = "ACME (LetsEncrypt) Environment - only production creates valid certificates but it has lower rate limits"
+variable "cert_manager_use_production_acme_environment" {
+  description = "ACME (LetsEncrypt) Environment - only production creates valid certificates but it has lower rate limits than staging"
+  type        = bool
+  default     = true
 }
 
 variable "cert_manager_acme_registration_email" {