tibordp
commented
3 years ago Hey @udatny. Were there any errors in the original provision regarding this resource? The outputs are fetched from the kubeadm_host using matti/resource/shell module, as Terraform makes it really difficult to get data out from provisioners. My guess would be that somethng went wrong with connecting to the host and that's why the output was empty.
I see that the module recently introduced an option to fail on error, so I think it would be worthwhile to use that option so that the error is more visible. Also, I'd like to minimize the use of this module, e.g. just fetch the kubeconfig once and parse the certificate_authority_data, client_certificate_data and client_key_data out manually.
I'll try to get to this in this week (if you'd like to take a stab at it, you are of course most welcome :))
udatny
sporadically i run into some problems when provisioning a cluster. most probably something timing based.
problem shows up in subsequent terraform resource creation using the kubernetes provider. i found out that i somehow got an empty certificate_authority_data output from the module. which is causing the error in subsequent calls.
was able to fix it with:
terraform apply -replace="module.k8s.module.certificate_authority_data.null_resource.shell" which recreates the needed resources.