Makes cluster login driven by 'login' flag (#22)

Signed-off-by: Sean Sundberg <[email protected]>

Author: Sean Sundberg

main.tf

@@ -51,6 +51,7 @@ locals {
     "kms",
     "hs-crypto"
   ]
+  cluster_config        = var.login ? data.ibm_container_cluster_config.cluster[0].config_file_path : ""
 }
 
 resource null_resource create_dirs {
@@ -196,3 +197,53 @@ data ibm_container_vpc_cluster config {
   alb_type          = var.disable_public_endpoint ? "private" : "public"
   resource_group_id = data.ibm_resource_group.resource_group.id
 }
+
+resource "null_resource" "list_tmp" {
+  depends_on = [null_resource.create_dirs]
+
+  triggers = {
+    always_run = timestamp()
+  }
+
+  provisioner "local-exec" {
+    command = "ls ${local.tmp_dir}"
+  }
+}
+
+
+data ibm_container_cluster_config cluster_admin {
+  count = var.login ? 1 : 0
+  depends_on        = [data.ibm_container_vpc_cluster.config, null_resource.list_tmp]
+
+  cluster_name_id   = local.cluster_name
+  admin             = true
+  resource_group_id = data.ibm_resource_group.resource_group.id
+  config_dir        = local.cluster_config_dir
+}
+
+data ibm_container_cluster_config cluster {
+  count = var.login ? 1 : 0
+  depends_on        = [
+    data.ibm_container_vpc_cluster.config,
+    null_resource.list_tmp,
+    data.ibm_container_cluster_config.cluster_admin
+  ]
+
+  cluster_name_id   = local.cluster_name
+  resource_group_id = data.ibm_resource_group.resource_group.id
+  config_dir        = local.cluster_config_dir
+}
+
+resource null_resource setup_kube_config {
+  count = var.login ? 1 : 0
+  depends_on = [null_resource.create_dirs, data.ibm_container_cluster_config.cluster]
+
+  provisioner "local-exec" {
+    command = "${path.module}/scripts/wait-for-kubeconfig.sh"
+
+    environment = {
+      KUBECONFIG = local.cluster_config
+    }
+  }
+}
+

module.yaml

@@ -77,5 +77,3 @@ versions:
       scope: module
     - name: ocp_entitlement
       scope: ignore
-    - name: gitops_dir
-      scope: global

variables.tf

@@ -118,3 +118,9 @@ variable "authorize_kms" {
   description = "Flag indicating that the authorization between the kms and the service should be created."
   default     = true
 }
+
+variable "login" {
+  type        = bool
+  description = "Flag indicating that after the cluster is provisioned, the module should log into the cluster"
+  default     = false
+}