Add harvester_api_server output to harvester-integration module#60
Conversation
|
Warning Rate limit exceeded
Your organization is not enrolled in usage-based pricing. Contact your admin to enable usage-based pricing to continue reviews beyond the rate limit, or try again in 57 minutes and 54 seconds. ⌛ How to resolve this issue?After the wait time has elapsed, a review can be triggered using the We recommend that you space out your commits to avoid hitting the rate limit. 🚦 How do rate limits work?CodeRabbit enforces hourly rate limits for each developer per organization. Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout. Please see our FAQ for further information. ℹ️ Review info⚙️ Run configurationConfiguration used: Organization UI Review profile: CHILL Plan: Pro Run ID: 📒 Files selected for processing (2)
✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
Exposes the Harvester Kubernetes API server URL extracted from the kubeconfig so downstream layers can pass it to the harvester-cloud-credential module without hardcoding the VIP. Marked sensitive because it derives from the kubeconfig input. Returns null when create_cloud_credential = false. Closes wso2#57 Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Checkov CKV_K8S_21 flags resources placed in the default namespace. Move the rancher-cloud-credential ServiceAccount and its token Secret to kube-system, which is the conventional namespace for infrastructure- level service accounts. The ClusterRoleBinding subject namespace reference is derived from the ServiceAccount metadata, so no separate change is needed there. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
f260857 to
8b19de7
Compare
Summary
harvester_api_serveroutput tomodules/management/harvester-integrationlocal._matched_cluster.cluster.server— already computed internally, no new parsingsensitive = true(derives fromharvester_kubeconfig)nullwhencreate_cloud_credential = false(brownfield)Why
Consumers that provision RKE2 clusters via
harvester-cloud-credentialneed the direct Harvester API URL (https://<vip>:6443). Without this output they must hardcode the VIP, which is environment-specific and error-prone.Consumer pattern
Test plan
02-managementwithcreate_cloud_credential = true— verify output matches the VIP in the kubeconfigcreate_cloud_credential = false— verify output isnullCloses #57
🤖 Generated with Claude Code