Require one of kubeconfig_path or kubeconfig_raw fix #90

pst · pst · commit 689b72ff46e8 · 2021-04-11T14:36:25.000+02:00
This commit changes the provider to require exactly one of
`kubeconfig_path` or `kubeconfig_raw` set. The environment variable
`KUBECONFIG_PATH` is available to set `kubeconfig_path`.

Previously, the provider tried to find a valid configuration
in either `kubeconfig_raw` or `kubeconfig_path` and would fall
back to `kubectl` default environment variables and paths if
no configuration was given.
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
@@ -35,15 +35,16 @@ jobs:
 
     - name: 'Run TF acceptance tests (${{ matrix.runner }})'
       if: startsWith(matrix.runner, 'ubuntu-')
-      run: |
-        export KUBECONFIG="$(kind get kubeconfig-path --name="kind")"
-        make test
       env:
-        TF_ACC: '1'
+        KUBECONFIG_PATH: ~/.kube/config
+      run: make test
     
     - name: 'Run TF unit tests (${{ matrix.runner }})'
       if: startsWith(matrix.runner, 'ubuntu-') == false
-      run: go test -v ./kustomize
+      env:
+        KUBECONFIG_PATH: ${{ github.workspace }}/tests/fakekubeconfig
+      run: |
+        go test -v ./kustomize
 
   compile_provider:
     runs-on: ubuntu-latest
@@ -86,6 +87,9 @@ jobs:
     runs-on: ubuntu-latest
     needs: [compile_provider]
 
+    env:
+      KUBECONFIG_PATH: ~/.kube/config
+
     steps:
     - name: 'Checkout'
       uses: actions/checkout@v1
@@ -110,10 +114,6 @@ jobs:
       with:
         version: "v0.9.0"
 
-    - name: 'Set KUBECONFIG env var'
-      run: |
-        export KUBECONFIG="$(kind get kubeconfig-path --name="kind")"
-
     - name: 'Terraform Init'
       run: terraform init
 
@@ -150,10 +150,9 @@ jobs:
 
     - name: 'Create provider.tf with kubeconfig_raw'
       run: |
-        unset KUBECONFIG
         echo "provider "kustomization" {" > provider.tf
         echo "  kubeconfig_raw = <<EOT" >> provider.tf
-        cat $(kind get kubeconfig-path --name="kind") >> provider.tf
+        kind get kubeconfig --name kind >> provider.tf
         echo "EOT" >> provider.tf
         echo "}" >> provider.tf
 
@@ -167,6 +166,9 @@ jobs:
     runs-on: ubuntu-latest
     needs: [compile_provider]
 
+    env:
+      KUBECONFIG_PATH: ~/.kube/config
+
     steps:
     - name: 'Checkout'
       uses: actions/checkout@v1
@@ -191,10 +193,6 @@ jobs:
     - name: 'Ensure provider is executable'
       run: chmod +x terraform.d/plugins/registry.terraform.io/kbst/kustomization/1.0.0/linux_amd64/terraform-provider-kustomization_v1.0.0
 
-    - name: 'Set KUBECONFIG env var'
-      run: |
-        export KUBECONFIG="$(kind get kubeconfig-path --name="kind")"
-
     - name: 'Download kustomize'
       run: |
         wget https://github.com/kubernetes-sigs/kustomize/releases/download/kustomize%2Fv3.5.4/kustomize_v3.5.4_linux_amd64.tar.gz
diff --git a/README.md b/README.md
@@ -2,17 +2,7 @@
 
 ![Run Tests](https://github.com/kbst/terraform-provider-kustomize/workflows/Run%20Tests/badge.svg?branch=master&event=push)
 
-This provider aims to solve 3 common issues of applying a kustomization using kubectl by integrating Kustomize and Terraform.
-
-1. Lack of feedback what changes will be applied.
-1. Resources from a previous apply not in the current apply are not purged.
-1. Immutable changes like e.g. changing a deployment's selector cause the apply to fail mid way.
-
-To solve this the provider uses the Terraform state to show changes to each resource individually during plan as well as track resources in need of purging.
-
-It also uses [server side dry runs](https://kubernetes.io/docs/reference/using-api/api-concepts/#dry-run) to validate changes to the desired state and translate this into a Terraform plan that will show if a resource will be updated in-place or requires a delete and recreate to apply the changes.
-
-As such it can be useful both to replace kustomize/kubectl integrated into a Terraform configuration as a provisioner as well as standalone `kubectl diff/apply` steps in CI/CD.
+This provider is maintained as part of the [Terraform GitOps framework Kubestack](https://www.kubestack.com/).
 
 ## Using the Provider
 
@@ -25,16 +15,16 @@ The Terraform provider for Kustomize is available from the [Terraform registry](
 
 ## Building and Developing the Provider
 
-To work on the provider, you need go installed on your machine (version 1.13.x tested). The provider uses go mod to manage its dependencies, so GOPATH is not required.
+To work on the provider, you need go installed on your machine. The provider uses go mod to manage its dependencies, so GOPATH is not required.
 
 To compile the provider, run `make build` as shown below. This will build the provider and put the provider binary in the `terraform.d/plugins/linux_amd64/` directory.
 
 ```sh
-$ make build
+make build
 ```
 
-In order to test the provider, you can simply run the acceptance tests using `make test`. You can set the `KUBECONFIG` environment variable to point the tests to a specific cluster or set the context of your current config accordingly. The tests create namespaces on the current context. [Kind](https://github.com/kubernetes-sigs/kind) or [Minikube](https://github.com/kubernetes/minikube) clusters work well for testing.
+In order to test the provider, run the acceptance tests using `make test`. You have to set the `KUBECONFIG_PATH` environment variable to point the tests to a valid config file. Each tests uses an individual namespaces. [Kind](https://github.com/kubernetes-sigs/kind) or [Minikube](https://github.com/kubernetes/minikube) clusters work well for testing.
 
 ```sh
-$ make test
+make test
 ```
diff --git a/docs/index.md b/docs/index.md
@@ -1,16 +1,18 @@
 # Kustomize Provider
 
-This provider aims to solve 3 common issues of applying a kustomization using kubectl by integrating Kustomize and Terraform.
+This provider allows building existing kustomizations using the `kustomization_build` data source or defining
+dynamic kustomizations in HCL using the `kustomization_overlay` data source and applying the resources from
+either kustomization against a Kubernetes cluster using the `kustomization_resource` resource.
 
-1. Lack of feedback what changes will be applied.
-1. Resources from a previous apply not in the current apply are not purged.
-1. Immutable changes like e.g. changing a deployment's selector cause the apply to fail mid way.
+The provider is maintained as part of the [Terraform GitOps framework Kubestack](https://www.kubestack.com/).
 
-To solve this the provider uses the Terraform state to show changes to each resource individually during plan as well as track resources in need of purging.
+Using this Kustomize provider and Terraform has three main benefits compared to applying a kustomization using `kubectl`:
 
-It also uses [server side dry runs](https://kubernetes.io/docs/reference/using-api/api-concepts/#dry-run) to validate changes to the desired state and translate this into a Terraform plan that will show if a resource will be updated in-place or requires a delete and recreate to apply the changes.
+1. Running `terraform plan` will show a diff of the changes to be applied.
+1. Deleted resources from a previous configuration will be purged.
+1. Changes to immutable fields will generate a destroy and re-create plan.
 
-As such it can be useful both to replace kustomize/kubectl integrated into a Terraform configuration as a provisioner as well as standalone `kubectl diff/apply` steps in CI/CD. The provider was primarily developed for Kubestack, the [Terraform GitOps framework](https://www.kubestack.com/), but is supported and tested to be used standalone.
+As such the provider can be useful to replace kustomize/kubectl integrated into a Terraform configuration as a provisioner or to replace standalone `kubectl diff/apply` steps in CI/CD.
 
 ## Example Usage
 
@@ -19,21 +21,28 @@ terraform {
   required_providers {
     kustomization = {
       source  = "kbst/kustomization"
-      version = ">= 0.2"
+      version = "0.5.0"
     }
   }
-  required_version = ">= 0.12"
 }
 
-provider "kustomization" {}
+provider "kustomization" {
+  # one of kubeconfig_path or kubeconfig_raw is required
+
+  # kubeconfig_path = "~/.kube/config"
+  # can also be set using KUBECONFIG_PATH environment variable
+
+  # kubeconfig_raw = data.template_file.kubeconfig.rendered
+  # kubeconfig_raw = yamlencode(local.kubeconfig)
+}
 
 ```
 
 ## Argument Reference
 
-- `kubeconfig_path` - (Optional) Path to a kubeconfig file. Defaults to `KUBECONFIG`, `KUBE_CONFIG` or `~/.kube/config`.
-- `kubeconfig_raw` - (Optional) Raw kubeconfig file. If kubeconfig_raw is set, kubeconfig_path is ignored.
-- `context` - (Optional) Context to use in kubeconfig with multiple contexts, if not specified the default context is to be used.
+- `kubeconfig_path` - (One of `kubeconfig_path` or `kubeconfig_raw` required) Path to a kubeconfig file. Can be set using `KUBECONFIG_PATH` environment variable.
+- `kubeconfig_raw` - (One of `kubeconfig_path` or `kubeconfig_raw` required) Raw kubeconfig file. If `kubeconfig_raw` is set, `kubeconfig_path` is ignored.
+- `context` - (Optional) Context to use in kubeconfig with multiple contexts, if not specified the default context is used.
 
 ## Imports
 
diff --git a/kustomize/provider.go b/kustomize/provider.go
@@ -27,8 +27,6 @@ type Config struct {
 	Mutex                  *sync.Mutex
 }
 
-const kubeconfigDefault = "~/.kube/config"
-
 // Provider ...
 func Provider() *schema.Provider {
 	p := &schema.Provider{
@@ -48,21 +46,17 @@ func Provider() *schema.Provider {
 
 		Schema: map[string]*schema.Schema{
 			"kubeconfig_path": {
-				Type:     schema.TypeString,
-				Optional: true,
-				DefaultFunc: schema.MultiEnvDefaultFunc(
-					[]string{
-						"KUBE_CONFIG",
-						"KUBECONFIG",
-					},
-					kubeconfigDefault),
-				Description: fmt.Sprintf("Path to a kubeconfig file. Defaults to '%s'.", kubeconfigDefault),
+				Type:         schema.TypeString,
+				Optional:     true,
+				DefaultFunc:  schema.EnvDefaultFunc("KUBECONFIG_PATH", nil),
+				ExactlyOneOf: []string{"kubeconfig_path", "kubeconfig_raw"},
+				Description:  fmt.Sprintf("Path to a kubeconfig file. Can be set using KUBECONFIG_PATH env var. Either kubeconfig_path or kubeconfig_raw is required."),
 			},
 			"kubeconfig_raw": {
-				Type:        schema.TypeString,
-				Optional:    true,
-				Default:     "",
-				Description: "Raw kubeconfig file. If kubeconfig_raw is set,  kubeconfig_path is ignored.",
+				Type:         schema.TypeString,
+				Optional:     true,
+				ExactlyOneOf: []string{"kubeconfig_path", "kubeconfig_raw"},
+				Description:  "Raw kube config. If kubeconfig_raw is set, kubeconfig_path is ignored.",
 			},
 			"context": {
 				Type:        schema.TypeString,
@@ -74,40 +68,51 @@ func Provider() *schema.Provider {
 	}
 
 	p.ConfigureFunc = func(d *schema.ResourceData) (interface{}, error) {
-		var data []byte
 		var config *rest.Config
 		var err error
 
-		context := d.Get("context").(string)
 		raw := d.Get("kubeconfig_raw").(string)
-		data = []byte(raw)
+		path := d.Get("kubeconfig_path").(string)
+		context := d.Get("context").(string)
 
-		// try to get a config from kubeconfig_raw
-		config, err = getClientConfig(data, context)
-		if err != nil {
-			// if kubeconfig_raw did not work, try kubeconfig_path
-			path := d.Get("kubeconfig_path").(string)
-			data, _ = readKubeconfigFile(path)
+		if raw != "" {
+			config, err = getClientConfig([]byte(raw), context)
+			if err != nil {
+				return nil, fmt.Errorf("provider kustomization: kubeconfig_raw: %s", err)
+			}
+		}
+
+		if raw == "" && path != "" {
+			data, err := readKubeconfigFile(path)
+			if err != nil {
+				return nil, fmt.Errorf("provider kustomization: kubeconfig_path: %s", err)
+			}
 
 			config, err = getClientConfig(data, context)
 			if err != nil {
-				// if neither worked we fall back to an empty default config
-				config = &rest.Config{}
+				return nil, fmt.Errorf("provider kustomization: kubeconfig_path: %s", err)
 			}
 		}
 
+		// empty default config required to support
+		// using a cluster resource or data source
+		// that may not exist yet, to configure the provider
+		if config == nil {
+			config = &rest.Config{}
+		}
+
 		// Increase QPS and Burst rate limits
 		config.QPS = 120
 		config.Burst = 240
 
 		client, err := dynamic.NewForConfig(config)
 		if err != nil {
-			return nil, err
+			return nil, fmt.Errorf("provider kustomization: %s", err)
 		}
 
 		clientset, err := kubernetes.NewForConfig(config)
 		if err != nil {
-			return nil, err
+			return nil, fmt.Errorf("provider kustomization: %s", err)
 		}
 
 		cgvk := newCachedGroupVersionKind(clientset)
diff --git a/tests/fakekubeconfig b/tests/fakekubeconfig
@@ -0,0 +1,19 @@
+apiVersion: v1
+clusters:
+- cluster:
+    certificate-authority-data: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUM1ekNDQWMrZ0F3SUJBZ0lCQURBTkJna3Foa2lHOXcwQkFRc0ZBREFWTVJNd0VRWURWUVFERXdwcmRXSmwKY201bGRHVnpNQjRYRFRJeE1EUXhNVEV5TWpZek5sb1hEVE14TURRd09URXlNall6Tmxvd0ZURVRNQkVHQTFVRQpBeE1LYTNWaVpYSnVaWFJsY3pDQ0FTSXdEUVlKS29aSWh2Y05BUUVCQlFBRGdnRVBBRENDQVFvQ2dnRUJBTjJLCjBYVE1pU2pPSGtyeEJoYTJ4SUdrUFZGKzRFaWgvazhJT0l4SW1EUVBPT2U4Q0V0UEFsaXhzM2l5ajF2RUFFajEKUEQva0lENW9GWmJYOHExWWJQVmcrckJ1dTZpdVYrK0JacUZDNEJuU1NQTmE0MEdtamt0L3JwR3phMUF2U2RzYgplMDVlUFQzV3d5dVZVVWNYeDVsYS9LSllqMHk2N2VKalYvVll5THk0WGFidWNXTVFuR1hsU2xGZkJZMmMrWURICmppY0ZIVkVWWWMzQkloZ1IxRU51My93TkdkTlpodVRDRUtjUzRUdVFYb3ZkWEJLdDdzYW94N3RoWkRLZTZQUWMKQk8rRXVoYVRlelhFWHAwT25ZL3U4QlBscUl1bWFJV2ZUemVlQ0g4YXpZaDFpcTRNZGhWWUw4bjRsM2h0NUlYZgpQa294OHRYZUhKN0t0RDJJZ2xjQ0F3RUFBYU5DTUVBd0RnWURWUjBQQVFIL0JBUURBZ0trTUE4R0ExVWRFd0VCCi93UUZNQU1CQWY4d0hRWURWUjBPQkJZRUZGc1ZtaXd1bldXSXZiV0M0YkxMQ3VwZytPRUlNQTBHQ1NxR1NJYjMKRFFFQkN3VUFBNElCQVFDODRmK1R3QmpyaExvb2x1amJPVWlZQjJOc05hK2RHWUhNMG1WaHNHVUl4Q25KMUlVYQpabDdqRFh2bWtMNGsyekhhTm5XK0ZDY2J1S21xM3FIa1Y4NE9xRHlkcXB0MGtwdWRQbzZoZlJxR0xEM2NLSkF4CnhlQk9JM2hMOWIvUkF6dVFuOCtNeHNJNGVMaXFCcCtJeXZ4WkhSZklHSzBuZkw0MzJDVDlQRGw0bVEveFZNWTQKUEp6NmRteGorN2hkVmpEY3dMRGFVYmdNN25GUklDTkk5cEJIMmlrUEVqRFVseUFnL201UFRMdklKUXJyMTVlVQpMMGE5ajllcW1lL2tzYlBkaDVuc1V1MkZQMm1OazdKaHprNlgwZFdlZTA4S0l2L3hoeWhUZHNwaGE1cFcwTmFxCjBMREZrcWxsL0dPMlBuMkNuWGM1Y3lkeUppRGMrU1hUYnpROAotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg==
+    server: https://127.0.0.1:43779
+  name: kind-kind
+contexts:
+- context:
+    cluster: kind-kind
+    user: kind-kind
+  name: kind-kind
+current-context: kind-kind
+kind: Config
+preferences: {}
+users:
+- name: kind-kind
+  user:
+    client-certificate-data: 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
+    client-key-data: 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
