.env.example

# Copy this file to .env and fill in the values
# DO NOT COMMIT your real secrets; .env is gitignored

# Cloudsmith parameters
CLOUDSMITH_NAMESPACE=
CLOUDSMITH_REPO=
CLOUDSMITH_USERNAME=
# API key is stored in AWS Secrets Manager, keep blank here or for local tests only.
CLOUDSMITH_API_KEY=
CLOUDSMITH_HF_MODEL_NAME=distilbert-base-uncased
CLOUDSMITH_HF_REVISION=main
CLOUDSMITH_HF_FINETUNED_REVISION=

# AWS core parameters
AWS_REGION=us-east-1
S3_BUCKET=
SAGEMAKER_EXECUTION_ROLE_ARN=
# Name of the Secrets Manager secret (created by bootstrap) that stores API key + metadata
SECRET_NAME=cloudsmith-sagemaker-demo-api-key

# Networking (populated by bootstrap output; required for private Docker image pull)
SUBNET_IDS=
SECURITY_GROUP_IDS=

# Registry auth Lambda (populated by bootstrap if CREATE_REGISTRY_LAMBDA=true)
REGISTRY_CREDENTIALS_LAMBDA_ARN=

# Docker image names (repository paths in Cloudsmith Docker registry)
DOCKER_PLATFORM=linux/amd64
TRAINING_IMAGE_NAME=cloudsmith-sagemaker-training:latest
INFERENCE_IMAGE_NAME=cloudsmith-sagemaker-inference:latest

# Optional: custom base DLC override (leave empty to auto-select in scripts)
PYTORCH_TRAINING_BASE=
PYTORCH_INFERENCE_BASE=

# Training script defaults (optional overrides)
TRAINING_INSTANCE_TYPE=ml.m5.large
TRAINING_VOLUME_SIZE_GB=20

# --- Bootstrap customization (set before running infrastructure/bootstrap.sh) ---
# Override resource names (normally auto-derived)
BUCKET_NAME=
ROLE_NAME=
CS_SECRET_NAME=
VPC_NAME=

# Control creation behavior
CREATE_VPC=true
FORCE_NEW_VPC=false
SKIP_NAT=false            # If true, private subnets will lack outbound internet (image/pip pulls may fail)
CREATE_REGISTRY_LAMBDA=true
REGISTRY_LAMBDA_NAME=cloudsmith-sagemaker-registry-auth
REGISTRY_LAMBDA_ROLE=cloudsmith-sagemaker-registry-auth-role

# Logging
LOG_LEVEL=INFO