gitops_test/tfmodules
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

sync-modules: mirrored modules of release 3.2.0-F-feature-simpl-31671.660.aaad53cc

Browse Source 
+++ kubernetes/ovh/credentials.tf
+++ kubernetes/ovh/versions.tf
This commit is contained in:
gitops_test 2026-09-20 22:54:05 +00:00
parent a45e39273a
commit 293e78f363
2 changed files with 12 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
kubernetes/ovh/credentials.tf
View File

@ -20,8 +20,12 @@ resource "kubernetes_namespace_v1" "access" {
// Rotation anchor: replacing this resource (any change to credentials_version)
// cascades to the consumer ServiceAccount and its token Secret through
// replace_triggered_by, performing the credential rotation inside Terraform.
resource "terraform_data" "credentials_version" {
input = var.credentials_version
// null_resource instead of terraform_data: the Terraform of the tofu
// controller runner (1.3.x) predates the terraform_data resource type.
resource "null_resource" "credentials_version" {
triggers = {
version = var.credentials_version
}
}
// Consumer access: ServiceAccount + non expiring legacy token Secret. The
@ -35,7 +39,7 @@ resource "kubernetes_service_account_v1" "consumer" {
}
lifecycle {
replace_triggered_by = [terraform_data.credentials_version]
replace_triggered_by = [null_resource.credentials_version]
}
}
@ -70,7 +74,7 @@ resource "kubernetes_secret_v1" "consumer_token" {
wait_for_service_account_token = true
lifecycle {
replace_triggered_by = [terraform_data.credentials_version]
replace_triggered_by = [null_resource.credentials_version]
}
}

4
kubernetes/ovh/versions.tf
View File

@ -12,5 +12,9 @@ terraform {
source = "hashicorp/vault"
version = "4.8.0"
}
null = {
source = "hashicorp/null"
version = "3.2.4"
}
}
}