mirror of
https://github.com/outbackdingo/terraform-render-bootstrap.git
synced 2026-01-27 10:20:45 +00:00
4d7484f72a
* `asset_dir` is an absolute path to a directory where generated assets from terraform-render-bootstrap are written (sensitive) * Change `asset_dir` to default to "" so no assets are written (favor Terraform output mechanisms). Previously, asset_dir was required so all users set some path. To take advantage of the new optionality, remove asset_dir or set it to ""
56 lines
1.9 KiB
HCL
56 lines
1.9 KiB
HCL
locals {
|
|
# auth kubeconfig assets map
|
|
auth_kubeconfigs = {
|
|
"auth/kubeconfig" = data.template_file.kubeconfig-admin.rendered,
|
|
}
|
|
}
|
|
|
|
# Generated kubeconfig for Kubelets
|
|
data "template_file" "kubeconfig-kubelet" {
|
|
template = file("${path.module}/resources/kubeconfig-kubelet")
|
|
|
|
vars = {
|
|
ca_cert = base64encode(tls_self_signed_cert.kube-ca.cert_pem)
|
|
kubelet_cert = base64encode(tls_locally_signed_cert.kubelet.cert_pem)
|
|
kubelet_key = base64encode(tls_private_key.kubelet.private_key_pem)
|
|
server = format("https://%s:%s", var.api_servers[0], var.external_apiserver_port)
|
|
}
|
|
}
|
|
|
|
# Generated admin kubeconfig to bootstrap control plane
|
|
data "template_file" "kubeconfig-admin" {
|
|
template = file("${path.module}/resources/kubeconfig-admin")
|
|
|
|
vars = {
|
|
name = var.cluster_name
|
|
ca_cert = base64encode(tls_self_signed_cert.kube-ca.cert_pem)
|
|
kubelet_cert = base64encode(tls_locally_signed_cert.admin.cert_pem)
|
|
kubelet_key = base64encode(tls_private_key.admin.private_key_pem)
|
|
server = format("https://%s:%s", var.api_servers[0], var.external_apiserver_port)
|
|
}
|
|
}
|
|
|
|
# Generated kubeconfig for Kubelets
|
|
resource "local_file" "kubeconfig-kubelet" {
|
|
count = var.asset_dir == "" ? 0 : 1
|
|
|
|
content = data.template_file.kubeconfig-kubelet.rendered
|
|
filename = "${var.asset_dir}/auth/kubeconfig-kubelet"
|
|
}
|
|
|
|
# Generated admin kubeconfig to bootstrap control plane
|
|
resource "local_file" "kubeconfig-admin" {
|
|
count = var.asset_dir == "" ? 0 : 1
|
|
|
|
content = data.template_file.kubeconfig-admin.rendered
|
|
filename = "${var.asset_dir}/auth/kubeconfig"
|
|
}
|
|
|
|
# Generated admin kubeconfig in a file named after the cluster
|
|
resource "local_file" "kubeconfig-admin-named" {
|
|
count = var.asset_dir == "" ? 0 : 1
|
|
|
|
content = data.template_file.kubeconfig-admin.rendered
|
|
filename = "${var.asset_dir}/auth/${var.cluster_name}-config"
|
|
}
|