13c663e906
This change revealed more about how the system needs to work, so there
are some supporting changes:
* helm.upgrade and helm.help are now vars rather than raw functions.
This allows unit tests to target the "which step should we run"
logic directly by comparing function pointers, rather than having to
configure/prepare a fully-valid Plan and then infer the logic’s
correctness based on the Plan’s state.
* configuration that's specific to kubeconfig initialization is now part
of the InitKube struct rather than run.Config, since other steps
shouldn’t need access to those settings (particularly the secrets).
* Step.Execute now receives a run.Config so it can log debug output.
40 lines
808 B
Plaintext
40 lines
808 B
Plaintext
apiVersion: v1
|
|
clusters:
|
|
- cluster:
|
|
{{- if eq .SkipTLSVerify true }}
|
|
insecure-skip-tls-verify: true
|
|
{{- else }}
|
|
certificate-authority-data: {{ .Certificate }}
|
|
{{- end}}
|
|
server: {{ .APIServer }}
|
|
name: helm
|
|
contexts:
|
|
- context:
|
|
cluster: helm
|
|
{{- if .Namespace }}
|
|
namespace: {{ .Namespace }}
|
|
{{- end }}
|
|
user: {{ .ServiceAccount }}
|
|
name: helm
|
|
current-context: "helm"
|
|
kind: Config
|
|
preferences: {}
|
|
users:
|
|
- name: {{ .ServiceAccount }}
|
|
user:
|
|
{{- if .Token }}
|
|
token: {{ .Token }}
|
|
{{- else if .EKSCluster }}
|
|
exec:
|
|
apiVersion: client.authentication.k8s.io/v1alpha1
|
|
command: aws-iam-authenticator
|
|
args:
|
|
- "token"
|
|
- "-i"
|
|
- "{{ .EKSCluster }}"
|
|
{{- if .EKSRoleARN }}
|
|
- "-r"
|
|
- "{{ .EKSRoleARN }}"
|
|
{{- end }}
|
|
{{- end }}
|