terraform-provider-rancher2
terraform-provider-rancher2 copied to clipboard
[BUG] machine_global_config + kube-apiserver-arg always changed
Rancher Server Setup
- Rancher version: 2.7.6
Information about the Cluster
Rancher 2.7.6 + rke2 1.26.7/8
User Information
Owner
Provider Information
3.1.0 or 3.1.1 + rancher2_cluster_v2
Describe the bug
~ machine_global_config = <<-EOT
cloud-controller-manager-extra-env:
- TZ=Etc/UTC
cloud-provider-name: external
cluster-cidr: 10.42.0.0/16
cluster-dns: 10.43.0.10
cluster-domain: cluster.local
cni: cilium
control-plane-resource-requests: kube-apiserver-cpu=200m,kube-apiserver-memory=1024Mi,kube-scheduler-cpu=100m,kube-scheduler-memory=128Mi,kube-controller-manager-cpu=100m,kube-controller-manager-memory=256Mi,kube-proxy-cpu=25m,kube-proxy-memory=128Mi,etcd-cpu=200m,etcd-memory=512Mi,cloud-controller-manager-cpu=20m,cloud-controller-manager-memory=128Mi
disable:
- rke2-ingress-nginx
disable-kube-proxy: false
etcd-expose-metrics: true
etcd-extra-env:
- TZ=Etc/UTC
kube-apiserver-arg:
+ - feature-gates=AllAlpha=false
- tls-min-version=VersionTLS13
- enable-admission-plugins=AlwaysPullImages,NodeRestriction
- admission-control-config-file=/etc/rancher/rke2/config/rancher-psact.yaml
+ - audit-log-mode=blocking-strict
- audit-policy-file=/etc/rancher/rke2/audit-policy.yaml
+ - audit-log-format=json
+ - audit-log-maxage=30
- audit-log-maxbackup=10
- audit-log-maxsize=100
- - feature-gates=AllAlpha=false
- - audit-log-mode=blocking-strict
- - audit-log-maxage=30
- audit-log-path=/var/lib/rancher/rke2/server/logs/audit.log
- - audit-log-format=json
Expected Result
No changes, because list is always the same.