Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Handle GKE AUTH intermittent errors #25

Open
mirestrepo opened this issue Aug 30, 2022 · 0 comments
Open

Handle GKE AUTH intermittent errors #25

mirestrepo opened this issue Aug 30, 2022 · 0 comments
Labels
bug Something isn't working

Comments

@mirestrepo
Copy link
Member

mirestrepo commented Aug 30, 2022

The way this module is structured is causing intermittent errors on terraform refresh. As a work around we are sometimes turning the refresh=false

There are several issues around:

When using interpolation to pass credentials to the Kubernetes provider from other resources, these resources SHOULD NOT be created in the same Terraform module where Kubernetes provider resources are also used. This will lead to intermittent and unpredictable errors which are hard to debug and diagnose. The root issue lies with the order in which Terraform itself evaluates the provider blocks vs. actual resources. Please refer to this section of Terraform docs for further explanation.

The section mentioned on the terraform docs, likely is the most informative:

The body of the block (between { and }) contains configuration arguments for the provider. Most arguments in this section are defined by the provider itself; in this example both project and region are specific to the google provider.

You can use expressions in the values of these configuration arguments, but can only reference values that are known before the configuration is applied. This means you can safely reference input variables, but not attributes exported by resources (with an exception for resource arguments that are specified directly in the configuration).

Two ideas here. Either move the auth into the jujube_module where the provider lives or we separated jupyterhub into two modules. One for it's infrastructure and one for helm part so they live in two different applies

@mirestrepo mirestrepo added the bug Something isn't working label Aug 30, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

1 participant