do: restore token auth (#42)

This commit is contained in:
David Dollar 2019-12-04 22:59:20 -05:00 committed by Cameron Gray
parent 9657116950
commit 3bd48fc505
4 changed files with 10 additions and 18 deletions

View File

@ -15,5 +15,4 @@ preferences: {}
users:
- name: do
user:
client-certificate-data: ${client_certificate}
client-key-data: ${client_key}
token: ${token}

View File

@ -50,9 +50,8 @@ resource "local_file" "kubeconfig" {
filename = pathexpand("~/.kube/config.do.${var.name}")
content = templatefile("${path.module}/kubeconfig.tpl", {
ca = digitalocean_kubernetes_cluster.rack.kube_config[0].cluster_ca_certificate
client_certificate = base64encode(digitalocean_kubernetes_cluster.rack.kube_config[0].client_certificate)
client_key = base64encode(digitalocean_kubernetes_cluster.rack.kube_config[0].client_key)
endpoint = digitalocean_kubernetes_cluster.rack.endpoint
ca = digitalocean_kubernetes_cluster.rack.kube_config[0].cluster_ca_certificate
endpoint = digitalocean_kubernetes_cluster.rack.endpoint
token = digitalocean_kubernetes_cluster.rack.kube_config[0].token
})
}

View File

@ -3,16 +3,6 @@ output "ca" {
value = base64decode(digitalocean_kubernetes_cluster.rack.kube_config[0].cluster_ca_certificate)
}
output "client_certificate" {
depends_on = [digitalocean_kubernetes_cluster.rack]
value = digitalocean_kubernetes_cluster.rack.kube_config[0].client_certificate
}
output "client_key" {
depends_on = [digitalocean_kubernetes_cluster.rack]
value = digitalocean_kubernetes_cluster.rack.kube_config[0].client_key
}
output "endpoint" {
depends_on = [digitalocean_kubernetes_cluster.rack]
value = digitalocean_kubernetes_cluster.rack.endpoint
@ -22,3 +12,8 @@ output "name" {
depends_on = [digitalocean_kubernetes_cluster.rack]
value = digitalocean_kubernetes_cluster.rack.name
}
output "token" {
depends_on = [digitalocean_kubernetes_cluster.rack]
value = digitalocean_kubernetes_cluster.rack.kube_config[0].token
}

View File

@ -13,10 +13,9 @@ provider "http" {
provider "kubernetes" {
version = "~> 1.10"
client_certificate = module.cluster.client_certificate
client_key = module.cluster.client_key
cluster_ca_certificate = module.cluster.ca
host = module.cluster.endpoint
token = module.cluster.token
load_config_file = false
}