terraform - 无法从 Kubernetes 获取服务帐户：找不到服务帐户"<name of service account>"

Question

这以前工作得很好，但由于某种原因，现在已经不好了，如果有人能帮助解决这个问题，我们将不胜感激：

我的地形代码如下，已经替换了关键信息。用"<gt"仅在此处公开分享：

外部main.tf有这个：

module "<name>_service_account" {
source = "../modules/kubernetes/service-account"
name   = "<name>-deployer"
}
# Create <name> platform namespace
resource "kubernetes_namespace" "<name>-platform" {
metadata {
name = "<name>-platform"
}
}

服务帐户main.tf模块：

resource "kubernetes_service_account" "serviceaccount" {
metadata {
name      = var.name
namespace = "kube-system"
}
}

resource "kubernetes_cluster_role_binding" "serviceaccount" {
metadata {
name = var.name
}
subject {
kind = "User"
name = "system:serviceaccount:kube-system:${var.name}"
}
role_ref {
kind      = "ClusterRole"
name      = "cluster-admin"
api_group = "rbac.authorization.k8s.io"
}
}
data "kubernetes_service_account" "serviceaccount" {
metadata {
name = var.name
namespace = "kube-system"
}
depends_on = [
resource.kubernetes_service_account.serviceaccount
]
}
data "kubernetes_secret" "serviceaccount" {
metadata {
name = data.kubernetes_service_account.serviceaccount.default_secret_name
namespace = "kube-system"
}
binary_data = {
"token": ""
}
depends_on = [
resource.kubernetes_service_account.serviceaccount
]
}

以上模块的我的输出.tf：

output "secret_token" {
sensitive = true
value = lookup(data.kubernetes_secret.serviceaccount.binary_data, "token")
}

我在地形管道中遇到的错误：

│ Error: Unable to fetch service account from Kubernetes: serviceaccounts "<name>-deployer" not found
│ 
│   with module.<name>_service_account.data.kubernetes_service_account.serviceaccount,
│   on ../modules/kubernetes/service-account/main.tf line 27, in data "kubernetes_service_account" "serviceaccount":
│   27: data "kubernetes_service_account" "serviceaccount" {

Answer 1

弄清楚了，这是一个新的环境/项目，我的地形刷新阶段仍在进行中，因此它找不到服务帐户，删除它，只让计划和应用程序先运行就解决了这个问题。