mirror of
https://github.com/poseidon/typhoon
synced 2024-05-27 09:56:23 +02:00
8ba23f364c
* Add kube-apiserver flags for TokenReview and TokenRequestProjection (beta, defaults on) to allow using Service Account Token Volume Projection to create and mount service account tokens tied to a Pod's lifecycle Rel: * https://github.com/poseidon/terraform-render-bootstrap/pull/231 * https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/#service-account-token-volume-projection
25 lines
776 B
HCL
25 lines
776 B
HCL
# Kubernetes assets (kubeconfig, manifests)
|
|
module "bootstrap" {
|
|
source = "git::https://github.com/poseidon/terraform-render-bootstrap.git?ref=19c3ce61bd32801bef791e4848b2a3eac1b758c8"
|
|
|
|
cluster_name = var.cluster_name
|
|
api_servers = [format("%s.%s", var.cluster_name, var.dns_zone)]
|
|
etcd_servers = digitalocean_record.etcds.*.fqdn
|
|
|
|
networking = var.networking
|
|
|
|
# only effective with Calico networking
|
|
network_encapsulation = "vxlan"
|
|
network_mtu = "1450"
|
|
|
|
pod_cidr = var.pod_cidr
|
|
service_cidr = var.service_cidr
|
|
cluster_domain_suffix = var.cluster_domain_suffix
|
|
enable_reporting = var.enable_reporting
|
|
enable_aggregation = var.enable_aggregation
|
|
|
|
# Fedora CoreOS
|
|
trusted_certs_dir = "/etc/pki/tls/certs"
|
|
}
|
|
|