Error when try apply configmap to auth with EKS cluster-CodePudding

i have the follow question. i try connect to eks cluster using a Terraform with Gitlab CI/CD , i receive the error message , but when try it in my compute , this error dont appear, someone had same error ?


$ terraform output authconfig > authconfig.yaml
$ cat authconfig.yaml
<<EOT
apiVersion: v1
kind: ConfigMap
metadata:
    name: aws-auth
    namespace: kube-system
data:
    mapRoles: |
      - rolearn: "arn:aws:iam::503655390180:role/clusters-production-workers"
            username: system:node:{{EC2PrivateDNSName}}
            groups:
                - system:bootstrappers
                - system:nodes
EOT
$ kubectl create -f authconfig.yaml -n kube-system
error: error parsing authconfig.yaml: error converting YAML to JSON: yaml: line 2: mapping values are not allowed in this context

CodePudding user response：

The error message tells you the authconfig.yaml file can not be converted from YAML to JSON, suggesting it's not a valid yaml

The cat authconfig.yaml you're showing us includes some <<EOT and EOT tags. I would suggest to remove those, before running kubectl create -f

CodePudding user response：

The output is including EOT(EndOfText) marks since it is generated as a multiline string originally.

as documentation suggests (terrafom doc link)

Don't use "heredoc" strings to generate JSON or YAML. Instead, use the jsonencode function or the yamlencode function so that Terraform can be responsible for guaranteeing valid JSON or YAML syntax.

use json encoding or yaml encoding before building output.

If you want to continue like this with what you have now then try to give these options with output -json or -raw

terraform output -json authconfig > authconfig.yaml or
terraform output -raw authconfig > authconfig.yaml