Switch to using local for security_context

GoogleCloudPlatform · Mar 8, 2024 · 1441567 · 1441567
1 parent dc323d2
commit 1441567
Showing 1 changed file with 8 additions and 4 deletions.
diff --git a/modules/kuberay-cluster/kuberay.tf b/modules/kuberay-cluster/kuberay.tf
@@ -18,6 +18,10 @@ resource "google_storage_bucket_iam_member" "gcs-bucket-iam" {
   member = "serviceAccount:${var.google_service_account}@${var.project_id}.iam.gserviceaccount.com"
 }
 
+locals {
+  security_context = chomp(yamlencode({ for k, v in var.security_context : k => v if v != null }))
+}
+
 resource "helm_release" "ray-cluster" {
   name             = "example-cluster"
   repository       = "https://ray-project.github.io/kuberay-helm/"
@@ -30,31 +34,31 @@ resource "helm_release" "ray-cluster" {
       gcs_bucket          = var.gcs_bucket
       k8s_service_account = var.google_service_account
       grafana_host        = var.grafana_host
-      security_context    = chomp(yamlencode({ for k, v in var.security_context : k => v if v != null }))
+      security_context    = local.security_context
       secret_name         = var.db_secret_name
       project_id          = var.project_id
       db_region           = var.db_region
       }) : var.enable_tpu ? templatefile("${path.module}/kuberay-tpu-values.yaml", {
       gcs_bucket          = var.gcs_bucket
       k8s_service_account = var.google_service_account
       grafana_host        = var.grafana_host
-      security_context    = chomp(yamlencode({ for k, v in var.security_context : k => v if v != null }))
+      security_context    = local.security_context
       secret_name         = var.db_secret_name
       project_id          = var.project_id
       db_region           = var.db_region
       }) : var.enable_gpu ? templatefile("${path.module}/kuberay-gpu-values.yaml", {
       gcs_bucket          = var.gcs_bucket
       k8s_service_account = var.google_service_account
       grafana_host        = var.grafana_host
-      security_context    = chomp(yamlencode({ for k, v in var.security_context : k => v if v != null }))
+      security_context    = local.security_context
       secret_name         = var.db_secret_name
       project_id          = var.project_id
       db_region           = var.db_region
       }) : templatefile("${path.module}/kuberay-values.yaml", {
       gcs_bucket          = var.gcs_bucket
       k8s_service_account = var.google_service_account
       grafana_host        = var.grafana_host
-      security_context    = chomp(yamlencode({ for k, v in var.security_context : k => v if v != null }))
+      security_context    = local.security_context
       secret_name         = var.db_secret_name
       project_id          = var.project_id
       db_region           = var.db_region