Skip to content

Commit

Permalink
Added variables to autogen, using k8s latest
Browse files Browse the repository at this point in the history
  • Loading branch information
coryodaniel committed Jan 19, 2019
1 parent 2b599ff commit 0266d26
Show file tree
Hide file tree
Showing 4 changed files with 22 additions and 4 deletions.
20 changes: 20 additions & 0 deletions autogen/variables.tf
Original file line number Diff line number Diff line change
Expand Up @@ -211,3 +211,23 @@ variable "service_account" {
description = "The service account to default running nodes as if not overridden in `node_pools`. Defaults to the compute engine default service account"
default = ""
}

variable "enable_basic_auth" {
description = "Basic authentication allows a user to authenticate to the cluster with a username and password. To maximize the security of your cluster, disable this option. Basic authentication is not recommended because it provides no confidentiality protection for transmitted credentials"
default = "true"
}

variable "basic_auth_username" {
description = "Kubernetes HTTP Basic auth username. Only used if `enable_basic_auth` is true"
default = ""
}

variable "basic_auth_password" {
description = "Kubernetes HTTP Basic auth password. Only used if `enable_basic_auth` is true"
default = ""
}

variable "issue_client_certificate" {
description = "Issues a client certificate to authenticate to the cluster endpoint. To maximize the security of your cluster, leave this option disabled. Client certificates don't automatically rotate and aren't easily revocable. WARNING: changing this after cluster creation is destructive!"
default = "false"
}
2 changes: 0 additions & 2 deletions examples/disable_client_cert/main.tf
Original file line number Diff line number Diff line change
Expand Up @@ -33,8 +33,6 @@ module "gke" {
subnetwork = "${var.subnetwork}"
ip_range_pods = "${var.ip_range_pods}"
ip_range_services = "${var.ip_range_services}"
kubernetes_version = "1.11.5-gke.4"
node_version = "1.11.5-gke.4"
service_account = "${var.compute_engine_service_account}"

enable_basic_auth = false
Expand Down
2 changes: 1 addition & 1 deletion main.tf
Original file line number Diff line number Diff line change
Expand Up @@ -153,4 +153,4 @@ locals {
data "google_container_engine_versions" "region" {
zone = "${data.google_compute_zones.available.names[0]}"
project = "${var.project_id}"
}
}
2 changes: 1 addition & 1 deletion variables.tf
Original file line number Diff line number Diff line change
Expand Up @@ -230,4 +230,4 @@ variable "basic_auth_password" {
variable "issue_client_certificate" {
description = "Issues a client certificate to authenticate to the cluster endpoint. To maximize the security of your cluster, leave this option disabled. Client certificates don't automatically rotate and aren't easily revocable. WARNING: changing this after cluster creation is destructive!"
default = "false"
}
}

0 comments on commit 0266d26

Please sign in to comment.