rock/homelab
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: remove kubeconfig references, use try() for pod runtime files

Browse Source 
- main.tf: remove kubeconfig_path local (no longer used with direct auth)
- providers.tf: wrap file() with try() to handle plan-time on non-pod systems

try() allows terraform plan to work locally; at runtime in pod, files exist and are used.
This commit is contained in:
Story Crater Bot
2026-07-15 21:36:05 -07:00
parent be2e5c321f
commit 94a2bd648c
2 changed files with 5 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
terraform/main.tf
+1 -2
View File
@@ -1,6 +1,5 @@
locals { locals {
kubeconfig_path = var.kubeconfig_path cluster_domain = var.cluster_domain
cluster_domain = var.cluster_domain
} }
# Helm repositories will be created in helm-repositories.tf # Helm repositories will be created in helm-repositories.tf
terraform/providers.tf
+4 -4
View File
@@ -30,16 +30,16 @@ terraform {
provider "kubernetes" { provider "kubernetes" {
host = "https://kubernetes.default" host = "https://kubernetes.default"
token = file("/var/run/secrets/kubernetes.io/serviceaccount/token") token = try(file("/var/run/secrets/kubernetes.io/serviceaccount/token"), "")
cluster_ca_certificate = file("/var/run/secrets/kubernetes.io/serviceaccount/ca.crt") cluster_ca_certificate = try(file("/var/run/secrets/kubernetes.io/serviceaccount/ca.crt"), "")
insecure = false insecure = false
} }
provider "helm" { provider "helm" {
kubernetes { kubernetes {
host = "https://kubernetes.default" host = "https://kubernetes.default"
token = file("/var/run/secrets/kubernetes.io/serviceaccount/token") token = try(file("/var/run/secrets/kubernetes.io/serviceaccount/token"), "")
cluster_ca_certificate = file("/var/run/secrets/kubernetes.io/serviceaccount/ca.crt") cluster_ca_certificate = try(file("/var/run/secrets/kubernetes.io/serviceaccount/ca.crt"), "")
insecure = false insecure = false
} }
} }