mass update
All checks were successful
continuous-integration/drone/push Build is passing

- Upgrading to Terraform from 1.1.8 to 1.3.5
- Upgrading to Kubernetes from 1.23.5 to 1.25.4
- Using Q35 machine for workers
- Using UEFI for boot
- Refactored XSLT
This commit is contained in:
2022-11-28 01:25:23 +01:00
parent 2b02f2a46f
commit ad5f8a40fb
6 changed files with 116 additions and 70 deletions

View File

@@ -2,12 +2,18 @@ resource "random_password" "bootstrap_token_id" {
special = false
upper = false
length = 6
lifecycle {
replace_triggered_by = [time_rotating.bootstrap_expiry_base]
}
}
resource "random_password" "bootstrap_token_secret" {
special = false
upper = false
length = 16
lifecycle {
replace_triggered_by = [time_rotating.bootstrap_expiry_base]
}
}
resource "time_rotating" "bootstrap_expiry_base" {
@@ -34,6 +40,10 @@ resource "kubernetes_secret" "bootstrap_token" {
"expiration" = timeadd(time_rotating.bootstrap_expiry_base.id, "${90 * 24}h")
}
lifecycle {
replace_triggered_by = [time_rotating.bootstrap_expiry_base]
}
}
resource "kubernetes_cluster_role_binding" "auto_approve_node_csrs" {
@@ -83,4 +93,4 @@ resource "kubernetes_cluster_role_binding" "nodes_create_csrs" {
name = "system:node-bootstrapper"
api_group = "rbac.authorization.k8s.io"
}
}
}