terraform

Question

这之前工作得很好，但由于某种原因，它不再是，如果有人能帮助解决这个问题，我们将不胜感激：

我的terraform代码如下，替换了关键信息。带“<>”只是为了在这里公开分享：

外部 main.tf 有这个：

    module "<name>_service_account" {
  source = "../modules/kubernetes/service-account"
  name   = "<name>-deployer"
}

# Create <name> platform namespace
resource "kubernetes_namespace" "<name>-platform" {
  metadata {
    name = "<name>-platform"
  }
}

服务帐号main.tf模块：

resource "kubernetes_service_account" "serviceaccount" {
  metadata {
    name      = var.name
    namespace = "kube-system"
  }
}


resource "kubernetes_cluster_role_binding" "serviceaccount" {
  metadata {
    name = var.name
  }

  subject {
    kind = "User"
    name = "system:serviceaccount:kube-system:${var.name}"
  }

  role_ref {
    kind      = "ClusterRole"
    name      = "cluster-admin"
    api_group = "rbac.authorization.k8s.io"
  }
}

data "kubernetes_service_account" "serviceaccount" {
  metadata {
    name = var.name
    namespace = "kube-system"
  }
  depends_on = [
    resource.kubernetes_service_account.serviceaccount
  ]
}

data "kubernetes_secret" "serviceaccount" {
  metadata {
    name = data.kubernetes_service_account.serviceaccount.default_secret_name
    namespace = "kube-system"
  }
  binary_data = {
    "token": ""
  }
  depends_on = [
    resource.kubernetes_service_account.serviceaccount
  ]
}

我的 outputs.tf 以上模块：

output "secret_token" {
    sensitive = true
    value = lookup(data.kubernetes_secret.serviceaccount.binary_data, "token")
}

我在 terraform 管道中遇到的错误：

│ Error: Unable to fetch service account from Kubernetes: serviceaccounts "<name>-deployer" not found
│ 
│   with module.<name>_service_account.data.kubernetes_service_account.serviceaccount,
│   on ../modules/kubernetes/service-account/main.tf line 27, in data "kubernetes_service_account" "serviceaccount":
│   27: data "kubernetes_service_account" "serviceaccount" {

Answer 1

搞清楚了，这是一个新的 environment/project，我的 terraform 刷新阶段仍在管道中，因此它找不到服务帐户的原因，删除它并让计划和应用运行先解决了。

terraform - 无法从 Kubernetes 获取服务帐户：找不到服务帐户“<name of service account>”

terraform - Unable to fetch service account from Kubernetes: serviceaccounts "<name of service account>" not found

google-cloud-platform

kubernetes