terraform-oci-oke
terraform-oci-oke copied to clipboard
Moving to tag v5.1.0 from v4.5.9 downgrades the imageid on the worker nodes.
Community Note
- Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
- Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
- If you are interested in working on this issue or have submitted a pull request, please leave a comment
Steps to Reproduce
I am passing below setting in both the modules . Please note for I'am using the eks folder in v4.5.9 and using worker and cluster folder in v5.1.0 and not using entire repo. I have listed the variables that generate the image id dynamically through logic mentioned in the module.
v4.5.9 - https://github.com/oracle-terraform-modules/terraform-oci-oke/tree/v4.5.9/modules/oke cluster_kubernetes_version = "v1.24.1" cni_type = "npn" node_pool_image_id = "none" node_pool_image_type = "oke" node_pool_os = "Oracle Linux" node_pool_os_version = "7.9" #istio support is currently limited to Oracle Linux 7 node_pool_timezone = "Etc/UTC" enable_pv_encryption_in_transit = true use_node_pool_volume_encryption = true
v5.1.0 - https://github.com/oracle-terraform-modules/terraform-oci-oke/tree/v5.1.0/modules/workers
kubernetes_version = "v1.24.1" cni_type = "npn" image_type = "oke" # using oke type image only. image_os = "Oracle Linux" image_os_version = "7.9" capacity_reservation_id = null pv_transit_encryption = true
you can try to generate the image id using the above setting and you can see that a different image id is generated by both tags.
With the two tags below imageid is generated with module 4.5.9
- image_id = "ocid1.image.oc1.iad._xxxxx_r5jxvra"
- source_name = "Oracle-Linux-7.9-2023.08.31-0-OKE-1.24.1-642"
with module 5.1.0
- image_id = "ocid1.image.oc1.iad._xxxxx_sozbq7q"
- source_name = "Oracle-Linux-7.9-2023.06.30-1-OKE-1.24.1-632"
terraform apply
Important Factoids
References
hmm, ,maybe that's something we need to raise against the provider. what do you think @devoncrouse ?