- Upgrading to Terraform from 1.1.8 to 1.3.5 - Upgrading to Kubernetes from 1.23.5 to 1.25.4 - Using Q35 machine for workers - Using UEFI for boot - Refactored XSLT
This commit is contained in:
@@ -2,12 +2,18 @@ resource "random_password" "bootstrap_token_id" {
|
||||
special = false
|
||||
upper = false
|
||||
length = 6
|
||||
lifecycle {
|
||||
replace_triggered_by = [time_rotating.bootstrap_expiry_base]
|
||||
}
|
||||
}
|
||||
|
||||
resource "random_password" "bootstrap_token_secret" {
|
||||
special = false
|
||||
upper = false
|
||||
length = 16
|
||||
lifecycle {
|
||||
replace_triggered_by = [time_rotating.bootstrap_expiry_base]
|
||||
}
|
||||
}
|
||||
|
||||
resource "time_rotating" "bootstrap_expiry_base" {
|
||||
@@ -34,6 +40,10 @@ resource "kubernetes_secret" "bootstrap_token" {
|
||||
"expiration" = timeadd(time_rotating.bootstrap_expiry_base.id, "${90 * 24}h")
|
||||
}
|
||||
|
||||
lifecycle {
|
||||
replace_triggered_by = [time_rotating.bootstrap_expiry_base]
|
||||
}
|
||||
|
||||
}
|
||||
|
||||
resource "kubernetes_cluster_role_binding" "auto_approve_node_csrs" {
|
||||
@@ -83,4 +93,4 @@ resource "kubernetes_cluster_role_binding" "nodes_create_csrs" {
|
||||
name = "system:node-bootstrapper"
|
||||
api_group = "rbac.authorization.k8s.io"
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user