(fix) Circular dependency on kubeconfig for Coder installations

  1. Updated providers.tf in all environments:
    - Changed Kubernetes provider from config_path to config_raw to read kubeconfig directly from remote state
    - Changed Helm provider from config_path to config_raw
    - Removed the local_file resource that was creating the circular dependency
  2. Updated main.tf in all environments:
    - Added skip_requesting_account_id = true to the remote state data source configuration to fix AWS authentication errors with Scaleway S3

  These changes will:
  - Fix the circular dependency that was preventing Terraform initialization
  - Allow the GitHub Actions workflow to complete successfully
  - Maintain compatibility with local scripts that use saved kubeconfig files
  - Work seamlessly with both CI/CD and local development workflows.

Author: pacphi

environments/dev/coder/main.tf

@@ -15,6 +15,7 @@ data "terraform_remote_state" "infra" {
     skip_credentials_validation = true
     skip_metadata_api_check     = true
     skip_region_validation      = true
+    skip_requesting_account_id  = true
   }
 }
 

environments/dev/coder/providers.tf

@@ -23,17 +23,13 @@ terraform {
 
 # Configure Kubernetes provider using kubeconfig from infrastructure
 provider "kubernetes" {
-  config_path = "${path.module}/kubeconfig"
+  # Use the kubeconfig content directly from remote state
+  config_raw = data.terraform_remote_state.infra.outputs.kubeconfig
 }
 
 provider "helm" {
   kubernetes {
-    config_path = "${path.module}/kubeconfig"
+    # Use the kubeconfig content directly from remote state
+    config_raw = data.terraform_remote_state.infra.outputs.kubeconfig
   }
-}
-
-# Write kubeconfig to file for providers
-resource "local_file" "kubeconfig" {
-  content  = data.terraform_remote_state.infra.outputs.kubeconfig
-  filename = "${path.module}/kubeconfig"
 }

environments/prod/coder/main.tf

@@ -15,6 +15,7 @@ data "terraform_remote_state" "infra" {
     skip_credentials_validation = true
     skip_metadata_api_check     = true
     skip_region_validation      = true
+    skip_requesting_account_id  = true
   }
 }
 

environments/prod/coder/providers.tf

@@ -23,17 +23,13 @@ terraform {
 
 # Configure Kubernetes provider using kubeconfig from infrastructure
 provider "kubernetes" {
-  config_path = "${path.module}/kubeconfig"
+  # Use the kubeconfig content directly from remote state
+  config_raw = data.terraform_remote_state.infra.outputs.kubeconfig
 }
 
 provider "helm" {
   kubernetes {
-    config_path = "${path.module}/kubeconfig"
+    # Use the kubeconfig content directly from remote state
+    config_raw = data.terraform_remote_state.infra.outputs.kubeconfig
   }
-}
-
-# Write kubeconfig to file for providers
-resource "local_file" "kubeconfig" {
-  content  = data.terraform_remote_state.infra.outputs.kubeconfig
-  filename = "${path.module}/kubeconfig"
 }

environments/staging/coder/main.tf

@@ -15,6 +15,7 @@ data "terraform_remote_state" "infra" {
     skip_credentials_validation = true
     skip_metadata_api_check     = true
     skip_region_validation      = true
+    skip_requesting_account_id  = true
   }
 }
 

environments/staging/coder/providers.tf

@@ -23,17 +23,13 @@ terraform {
 
 # Configure Kubernetes provider using kubeconfig from infrastructure
 provider "kubernetes" {
-  config_path = "${path.module}/kubeconfig"
+  # Use the kubeconfig content directly from remote state
+  config_raw = data.terraform_remote_state.infra.outputs.kubeconfig
 }
 
 provider "helm" {
   kubernetes {
-    config_path = "${path.module}/kubeconfig"
+    # Use the kubeconfig content directly from remote state
+    config_raw = data.terraform_remote_state.infra.outputs.kubeconfig
   }
-}
-
-# Write kubeconfig to file for providers
-resource "local_file" "kubeconfig" {
-  content  = data.terraform_remote_state.infra.outputs.kubeconfig
-  filename = "${path.module}/kubeconfig"
 }