27 lines
1020 B
HCL
27 lines
1020 B
HCL
|
|
resource "kubernetes_config_map" "this" {
|
|
metadata {
|
|
name = "${var.daemonset_name}-config"
|
|
namespace = var.namespace
|
|
}
|
|
|
|
data = {
|
|
"kube-proxy-config.yaml" = yamlencode(merge({
|
|
kind = "KubeProxyConfiguration"
|
|
apiVersion = "kubeproxy.config.k8s.io/v1alpha1"
|
|
clientConnection = {
|
|
kubeconfig = "/kubeconfig/kubeconfig"
|
|
}
|
|
mode = var.mode
|
|
clusterCIDR = var.cluster_cidr
|
|
}, var.additional_config))
|
|
"kubeconfig.sh" : <<EOM
|
|
#!/bin/sh
|
|
kubectl --kubeconfig=/kubeconfig/kubeconfig config set-cluster default --certificate-authority=/run/secrets/kubernetes.io/serviceaccount/ca.crt --server=${var.kubernetes_server}
|
|
kubectl --kubeconfig=/kubeconfig/kubeconfig config set-credentials kube-proxy --token=$(cat /run/secrets/kubernetes.io/serviceaccount/token)
|
|
kubectl --kubeconfig=/kubeconfig/kubeconfig config set-context default --cluster=default --user=kube-proxy
|
|
kubectl --kubeconfig=/kubeconfig/kubeconfig config use-context default
|
|
EOM
|
|
}
|
|
}
|