- main.tf: remove kubeconfig_path local (no longer used with direct auth) - providers.tf: wrap file() with try() to handle plan-time on non-pod systems try() allows terraform plan to work locally; at runtime in pod, files exist and are used.