如何使用Helm提供商在TerraForm中覆盖默认图表值？

Question

我们正在Terraform中使用Helm Provider来提供iStio Ingress网关，后者在后端使用此 noreflow noreferrer“ A>

下面是Terraform代码段，以提供相同的内容。请帮助覆盖默认图表值，以创建内部负载平衡器，而不是默认外部外部平衡器。我们知道可以通过更新清单文件中的注释来完成。但是不确定如何在Terraform代码段中执行相同的操作？

terraform {
  required_providers {
    helm = {
      source = "hashicorp/helm"
      version = ">= 1.0.0"
    }
  }
}

provider "helm" {
  kubernetes {
    config_path = "${var.kubeconfig_file}"
  }
}

resource "helm_release" "istio-ingress" {
  repository        = local.istio_charts_url
  chart             = "gateway"
  name              = "istio-ingress-gateway"
  namespace         = kubernetes_namespace.istio_system.metadata.0.name
  version           = ">= 1.12.1"
  timeout           = 500
  cleanup_on_fail   = true
  force_update      = false
  depends_on        = [helm_release.istiod]
}

Answer 1

您可以使用set参数块（ https://registry.terraform.io/providers/hashicorp/helm/helm/latest/docs/resources/release#set ） href =“ https://registry.terraform.io/providers/hashicorp/helm/latest/docs/Resources/Release#Values” rel =“ noreferrer”> https://registry.terraform.io/providers/hashicorp/helm/latest/latest/docs/docs/resources/release#values ）来自原始values.yaml的默认设置

应看起来像：

resource "helm_release" "istio-ingress" {
  repository        = local.istio_charts_url
  chart             = "gateway"
  name              = "istio-ingress-gateway"
  namespace         = kubernetes_namespace.istio_system.metadata.0.name
  version           = ">= 1.12.1"
  timeout           = 500
  cleanup_on_fail   = true
  force_update      = false
  depends_on        = [helm_release.istiod]

  set {
    name  = "serviceAnnotations.cloud.google.com/load-balancer-type"
    value = "internal"
  }
}

或

resource "helm_release" "istio-ingress" {
  repository        = local.istio_charts_url
  chart             = "gateway"
  name              = "istio-ingress-gateway"
  namespace         = kubernetes_namespace.istio_system.metadata.0.name
  version           = ">= 1.12.1"
  timeout           = 500
  cleanup_on_fail   = true
  force_update      = false
  depends_on        = [helm_release.istiod]

  values = [
    file("${path.module}/custom-values.yaml")
  ]
}

放置一个custom-values.yaml您的代码中的文件。

本文很好地解释了它：
https://getBetterdevops.io/terraform/terraform-with-helm/

希望这会有所帮助！