diff --git a/README.md b/README.md index 3df5bf3..62eed49 100644 --- a/README.md +++ b/README.md @@ -98,8 +98,8 @@ MIT Licensed. See [LICENSE](https://github.com/terraform-aws-modules/terraform-a | cluster_security_group_id | If provided, the EKS cluster will be attached to this security group. If not given, a security group will be created with necessary ingres/egress to work with the workers and provide API access to your current IP/32. | string | `` | no | | cluster_version | Kubernetes version to use for the EKS cluster. | string | `1.10` | no | | config_output_path | Determines where config files are placed if using configure_kubectl_session and you want config files to land outside the current working directory. | string | `./` | no | -| manage_aws_auth | Whether to write and apply the aws-auth configmap file. | boolean | `true` | no | -| write_kubeconfig | Whether to write a kubeconfig file containing the cluster configuration. | boolean | `true` | no | +| manage_aws_auth | Whether to write and apply the aws-auth configmap file. | string | `true` | no | +| write_kubeconfig | Whether to write a kubeconfig file containing the cluster configuration. | string | `true` | no | | kubeconfig_aws_authenticator_additional_args | Any additional arguments to pass to the authenticator such as the role to assume ["-r", "MyEksRole"] | string | `` | no | | kubeconfig_aws_authenticator_command | Command to use to to fetch AWS EKS credentials | string | `heptio-authenticator-aws` | no | | kubeconfig_aws_authenticator_env_variables | Environment variables that should be used when executing the authenticator i.e. { AWS_PROFILE = "eks"} | string | `` | no | diff --git a/aws_auth.tf b/aws_auth.tf index 79e35cc..6038dc5 100644 --- a/aws_auth.tf +++ b/aws_auth.tf @@ -4,14 +4,13 @@ resource "local_file" "config_map_aws_auth" { count = "${var.manage_aws_auth ? 1 : 0}" } -resource "null_resource" "configure_kubectl" { +resource "null_resource" "update_config_map_aws_auth" { provisioner "local-exec" { command = "kubectl apply -f ${var.config_output_path}/config-map-aws-auth.yaml --kubeconfig ${var.config_output_path}/kubeconfig" } triggers { config_map_rendered = "${data.template_file.config_map_aws_auth.rendered}" - kubeconfig_rendered = "${data.template_file.kubeconfig.rendered}" } count = "${var.manage_aws_auth ? 1 : 0}"