fix: remove kubeconfig references, use try() for pod runtime files
- main.tf: remove kubeconfig_path local (no longer used with direct auth) - providers.tf: wrap file() with try() to handle plan-time on non-pod systems try() allows terraform plan to work locally; at runtime in pod, files exist and are used.
This commit is contained in:
@@ -1,5 +1,4 @@
|
||||
locals {
|
||||
kubeconfig_path = var.kubeconfig_path
|
||||
cluster_domain = var.cluster_domain
|
||||
}
|
||||
|
||||
|
||||
@@ -30,16 +30,16 @@ terraform {
|
||||
|
||||
provider "kubernetes" {
|
||||
host = "https://kubernetes.default"
|
||||
token = file("/var/run/secrets/kubernetes.io/serviceaccount/token")
|
||||
cluster_ca_certificate = file("/var/run/secrets/kubernetes.io/serviceaccount/ca.crt")
|
||||
token = try(file("/var/run/secrets/kubernetes.io/serviceaccount/token"), "")
|
||||
cluster_ca_certificate = try(file("/var/run/secrets/kubernetes.io/serviceaccount/ca.crt"), "")
|
||||
insecure = false
|
||||
}
|
||||
|
||||
provider "helm" {
|
||||
kubernetes {
|
||||
host = "https://kubernetes.default"
|
||||
token = file("/var/run/secrets/kubernetes.io/serviceaccount/token")
|
||||
cluster_ca_certificate = file("/var/run/secrets/kubernetes.io/serviceaccount/ca.crt")
|
||||
token = try(file("/var/run/secrets/kubernetes.io/serviceaccount/token"), "")
|
||||
cluster_ca_certificate = try(file("/var/run/secrets/kubernetes.io/serviceaccount/ca.crt"), "")
|
||||
insecure = false
|
||||
}
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user