fix(ci): use direct in-cluster Kubernetes auth for CI runner — drop kubeconfig file dependency

2026-08-18 15:08:01 -07:00
parent 3833c0d119
commit adbad3d97e
4 changed files with 9 additions and 37 deletions
@@ -29,12 +29,18 @@ terraform {
 }

 provider "kubernetes" {
-  config_path = var.kubeconfig_path
+  host                   = "https://kubernetes.default"
+  token                  = try(file("/var/run/secrets/kubernetes.io/serviceaccount/token"), "")
+  cluster_ca_certificate = try(file("/var/run/secrets/kubernetes.io/serviceaccount/ca.crt"), "")
+  insecure               = false
 }

 provider "helm" {
  kubernetes {
-    config_path = var.kubeconfig_path
+    host                   = "https://kubernetes.default"
+    token                  = try(file("/var/run/secrets/kubernetes.io/serviceaccount/token"), "")
+    cluster_ca_certificate = try(file("/var/run/secrets/kubernetes.io/serviceaccount/ca.crt"), "")
+    insecure               = false
  }
 }