rancher / terraform-provider-rancher2

Terraform Rancher2 provider
https://www.terraform.io/docs/providers/rancher2/
Mozilla Public License 2.0
253 stars 218 forks source link

[BUG] machine_global_config + kube-apiserver-arg always changed #1241

Open nickvth opened 9 months ago

nickvth commented 9 months ago

Rancher Server Setup

Information about the Cluster

Rancher 2.7.6 + rke2 1.26.7/8

User Information

Owner

Provider Information

3.1.0 or 3.1.1 + rancher2_cluster_v2

Describe the bug

      ~ machine_global_config = <<-EOT
            cloud-controller-manager-extra-env:
            - TZ=Etc/UTC
            cloud-provider-name: external
            cluster-cidr: 10.42.0.0/16
            cluster-dns: 10.43.0.10
            cluster-domain: cluster.local
            cni: cilium
            control-plane-resource-requests: kube-apiserver-cpu=200m,kube-apiserver-memory=1024Mi,kube-scheduler-cpu=100m,kube-scheduler-memory=128Mi,kube-controller-manager-cpu=100m,kube-controller-manager-memory=256Mi,kube-proxy-cpu=25m,kube-proxy-memory=128Mi,etcd-cpu=200m,etcd-memory=512Mi,cloud-controller-manager-cpu=20m,cloud-controller-manager-memory=128Mi
            disable:
            - rke2-ingress-nginx
            disable-kube-proxy: false
            etcd-expose-metrics: true
            etcd-extra-env:
            - TZ=Etc/UTC
            kube-apiserver-arg:
          + - feature-gates=AllAlpha=false
            - tls-min-version=VersionTLS13
            - enable-admission-plugins=AlwaysPullImages,NodeRestriction
            - admission-control-config-file=/etc/rancher/rke2/config/rancher-psact.yaml
          + - audit-log-mode=blocking-strict
            - audit-policy-file=/etc/rancher/rke2/audit-policy.yaml
          + - audit-log-format=json
          + - audit-log-maxage=30
            - audit-log-maxbackup=10
            - audit-log-maxsize=100
          - - feature-gates=AllAlpha=false
          - - audit-log-mode=blocking-strict
          - - audit-log-maxage=30
            - audit-log-path=/var/lib/rancher/rke2/server/logs/audit.log
          - - audit-log-format=json

Expected Result

No changes, because list is always the same.