tetratelabs / tetrate-service-bridge-sandbox

Deploy Tetrate Service Bridge Demo on Azure Kubernetes Service (AKS), Google Kubernetes Engine (GKE) and/or Elastic Kubernetes Service (EKS) using Terraform
Apache License 2.0
12 stars 10 forks source link

When using development versions jumpbox user-data is not idempotent #241

Closed nacx closed 1 year ago

nacx commented 1 year ago

When using development versions, the following is used to get the credentials to the development image repository: https://github.com/tetrateio/tetrate-service-bridge-sandbox/blob/d0fb41a6ebb6f7c5f425fb19bd838fd1f861395e/modules/internal_registry/internal-cr-token.sh#L9

This is then injected to the jumpbox user_data, but since the tokens are short-lived and different every time, this causes an unnecessary reconcile of the jumpbox. These reconciliations can cause the jumpbox to get a different public IP address, breaking the existing ssh scripts.