iits-consulting / otc-terraform-template Goto Github PK

Hi there,

I would like to ask if there is a reason why you have created separate state files for the infrastructure and Kubernetes cluster.
In the end I want to use a similar version in GitHub Actions combined with Terraform to provision the infrastructure and ArgoCD with the App of Apps pattern.

Is it possible to hand over the kubeconfig to the Kubernetes provider?

I deployed your template and ran into two problems.

1. The two Kafka Charts are not deploying. I get the following error with the Kafka exporter:

Error Init Kafka Client: kafka: client has run out of available brokers to talk to: dial tcp: lookup kafka-0.kafka-headless.kafka.svc.cluster.local: no such host

EDIT: I found another Error in ArgoCD, originating from the Kafka Exporter Pod itself:

policy restrict-seccomp-strict/check-seccomp-strict fail: validation error: Use of custom Seccomp profiles is disallowed. The fields spec.securityContext.seccompProfile.type, spec.containers[].securityContext.seccompProfile.type, spec.initContainers[].securityContext.seccompProfile.type, and spec.ephemeralContainers[*].securityContext.seccompProfile.type must be set to RuntimeDefault or Localhost. rule check-seccomp-strict[0] failed at path /spec/securityContext/seccompProfile/ rule check-seccomp-strict[1] failed at path /spec/containers/0/securityContext/seccompProfile/

2. I can not find the correct Basic Auth credentials. When I try to access the admin domain (e.g. admin.may-domain.com) I get a prompt asking me for a username and password. I tried out multiple values such as the ArgoCD credentials and the credentials provided in the Helm Chart for the Basic Auth. Any idea what went wrong here?

Best regards!

Dear Dev-Team,

I used your example code and setup the backend as described. The only functionality I am missing is the tf_remote_state. When I try to access this property I am prompted to enter a region. It seems like the prompt only accepts AWS regions but as I am using OTC this also leads to an error.

Is there a way to still us you S3 backend and tf_remote_state or do I have to use a different kind of backend?

Best regards,
Lenny