add kube config and other certificate path parameters

Author: xiaozhu36

CHANGELOG.md

@@ -1,4 +1,10 @@
-## 1.2.0 (Unreleased)
+## 1.3.0 (Unreleased)
+## 1.2.0 (December 3, 2019)
+
+IMPROVEMENTS:
+
+- add kube config and other certificate path parameters [GH-6](https://github.com/terraform-alicloud-modules/terraform-alicloud-managed-kubernetes/pull/6)
+
 ## 1.1.0 (December 3, 2019)
 
 BUG FIXES:

README.md

@@ -70,10 +70,24 @@ This moudle can set [sls project](https://www.terraform.io/docs/providers/aliclo
     ```
 
 1. Using existing sls project with `sls_project_name`:  
-    ```hcl
+    ```hcl-terraform
     sls_project_name = "Your-sls-project-name"
     ```
 
+If you want to store kube config and other certificates after the cluster created, you can set the following parameters: 
+
+1. Store kube config with `kube_config_path`:  
+    ```hcl-terraform
+    kube_config_path = "/home/xxx/.kube/config"
+    ```
+
+1. Store more certificates`:  
+    ```hcl-terraform
+    client_cert_path     = "/home/xxx/.kube/client-cert.pem"
+    client_key_path      = "/home/xxx/.kube/client-key.pem"
+    cluster_ca_cert_path = "/home/xxx/.kube/cluster-ca-cert.pem"
+    ```
+
 ## Inputs
 
 | Name | Description | Type | Default | Required |
@@ -102,6 +116,10 @@ This moudle can set [sls project](https://www.terraform.io/docs/providers/aliclo
 | cluster_network_type | Network type, valid options are `flannel` and `terway` | string | "flannel" | no |
 | new_sls_project | Create a new sls project for this module | bool | false | no |
 | sls_project_name | Specify a existing sls project for this module | string | "" | no |
+| kube_config_path | The path of kube config, like ~/.kube/config | string | "" | no |
+| client_cert_path | The path of client certificate, like ~/.kube/client-cert.pem | string | "" | no |
+| client_key_path | The path of client key, like ~/.kube/client-key.pem | string | "" | no |
+| cluster_ca_cert_path | The path of cluster ca certificate, like ~/.kube/cluster-ca-cert.pem | string | "" | no |
 
 ## Outputs
 

main.tf

@@ -33,5 +33,10 @@ resource "alicloud_cs_managed_kubernetes" "this" {
     type    = "SLS"
     project = local.sls_project == "" ? null : local.sls_project
   }
+  kube_config     = var.kube_config_path
+  client_cert     = var.client_cert_path
+  client_key      = var.client_key_path
+  cluster_ca_cert = var.cluster_ca_cert_path
+
   depends_on = [alicloud_snat_entry.new]
 }

variables.tf

@@ -86,7 +86,7 @@ variable "worker_disk_size" {
 }
 
 variable "ecs_password" {
-  description = "The password of work nodes."
+  description = "The password of worker nodes."
   default     = "Abc12345"
 }
 
@@ -123,4 +123,21 @@ variable "new_sls_project" {
 variable "sls_project_name" {
   description = "Specify a existing sls project for this module."
   default     = ""
+}
+
+variable "kube_config_path" {
+  description = "The path of kube config, like ~/.kube/config"
+  default     = ""
+}
+variable "client_cert_path" {
+  description = "The path of client certificate, like ~/.kube/client-cert.pem"
+  default     = ""
+}
+variable "client_key_path" {
+  description = "The path of client key, like ~/.kube/client-key.pem"
+  default     = ""
+}
+variable "cluster_ca_cert_path" {
+  description = "The path of cluster ca certificate, like ~/.kube/cluster-ca-cert.pem"
+  default     = ""
 }