Refactor AKS kube_config output and update Helm provider configuration for consistency

Author: devsocket

terraform/modules/aks/outputs.tf

@@ -4,6 +4,10 @@ output "cluster_name" {
 }
 
 output "kube_config" {
-  description = "The kube config of the AKS cluster"
-  value       = azurerm_kubernetes_cluster.this.kube_config_raw
+  value = {
+    host                   = azurerm_kubernetes_cluster.this.kube_config[0].host
+    client_certificate     = azurerm_kubernetes_cluster.this.kube_config[0].client_certificate
+    client_key             = azurerm_kubernetes_cluster.this.kube_config[0].client_key
+    cluster_ca_certificate = azurerm_kubernetes_cluster.this.kube_config[0].cluster_ca_certificate
+  }
 }

terraform/modules/helm-deploy/main.tf

@@ -1,9 +1,9 @@
 provider "helm" {
-  kubernetes {
-    host = var.kube_config["host"]
-    client_certificate = base64encode(var.kube_config["client_certificate"])
-    client_key = base64encode(var.kube_config["client_key"])
-    cluster_ca_certificate = base64encode(var.kube_config["cluster_ca_certificate"])
+  kubernetes = {
+      host                   = var.kube_config["host"]
+      client_certificate     = base64decode(var.kube_config["client_certificate"])
+      client_key             = base64decode(var.kube_config["client_key"])
+      cluster_ca_certificate = base64decode(var.kube_config["cluster_ca_certificate"])
   }
 }
 

terraform/modules/network/main.tf

@@ -22,7 +22,7 @@ resource "azurerm_network_security_group" "aks_nsg" {
     name                = "${var.vnet_name}-aks-nsg"
     location            = var.location
     resource_group_name = var.resource_group_name
-    security_rule = {
+    security_rule {
         name                       = "AllowKubeAPI"
         priority                   = 100
         direction                  = "Inbound"

terraform/shared/providers.tf

@@ -10,10 +10,10 @@ provider "kubernetes" {
 }
 
 provider "helm" {
-  kubernetes {
-    host                   = var.kube_config["host"]
-    client_certificate     = base64decode(var.kube_config["client_certificate"])
-    client_key             = base64decode(var.kube_config["client_key"])
-    cluster_ca_certificate = base64decode(var.kube_config["cluster_ca_certificate"])
+  kubernetes = {
+    host                   = azurerm_kubernetes_cluster.this.kube_config[0].host
+    client_certificate     = base64decode(azurerm_kubernetes_cluster.this.kube_config[0].client_certificate)
+    client_key             = base64decode(azurerm_kubernetes_cluster.this.kube_config[0].client_key)
+    cluster_ca_certificate = base64decode(azurerm_kubernetes_cluster.this.kube_config[0].cluster_ca_certificate)
   }
 }