diff --git a/alicloud/resource_alicloud_cs_edge_kubernetes.go b/alicloud/resource_alicloud_cs_edge_kubernetes.go index 207a94671055..325804d92b53 100644 --- a/alicloud/resource_alicloud_cs_edge_kubernetes.go +++ b/alicloud/resource_alicloud_cs_edge_kubernetes.go @@ -275,19 +275,22 @@ func resourceAlicloudCSEdgeKubernetes() *schema.Resource { "kube_config": { Type: schema.TypeString, Optional: true, - Deprecated: "Field 'kube_config' has been deprecated from provider version 1.187.0. New DataSource 'alicloud_cs_cluster_credential' manage your cluster's kube config.", + Deprecated: "Field 'kube_config' has been deprecated from provider version 1.187.0. Please use the attribute 'output_file' of new DataSource 'alicloud_cs_cluster_credential' to replace it.", }, "client_cert": { Type: schema.TypeString, Optional: true, + Deprecated: "Field 'client_cert' has been deprecated from provider version 1.243.0. From version 1.187.0, new DataSource 'alicloud_cs_cluster_credential' is recommended to manage cluster's kubeconfig, you can also save the 'certificate_authority.client_cert' attribute content of new DataSource 'alicloud_cs_cluster_credential' to an appropriate path(like ~/.kube/client-cert.pem) for replace it.", }, "client_key": { Type: schema.TypeString, Optional: true, + Deprecated: "Field 'client_key' has been deprecated from provider version 1.243.0. From version 1.187.0, new DataSource 'alicloud_cs_cluster_credential' is recommended to manage cluster's kubeconfig, you can also save the 'certificate_authority.client_key' attribute content of new DataSource 'alicloud_cs_cluster_credential' to an appropriate path(like ~/.kube/client-key.pem) for replace it.", }, "cluster_ca_cert": { Type: schema.TypeString, Optional: true, + Deprecated: "Field 'cluster_ca_cert' has been deprecated from provider version 1.243.0. From version 1.187.0, new DataSource 'alicloud_cs_cluster_credential' is recommended to manage cluster's kubeconfig, you can also save the 'certificate_authority.cluster_cert' attribute content of new DataSource 'alicloud_cs_cluster_credential' to an appropriate path(like ~/.kube/cluster-ca-cert.pem) for replace it.", }, "deletion_protection": { Type: schema.TypeBool, @@ -326,6 +329,7 @@ func resourceAlicloudCSEdgeKubernetes() *schema.Resource { }, }, }, + Deprecated: "Field 'certificate_authority' has been deprecated from provider version 1.243.0. Please use the attribute 'certificate_authority' of new DataSource 'alicloud_cs_cluster_credential' to replace it.", }, "connections": { Type: schema.TypeMap, diff --git a/alicloud/resource_alicloud_cs_kubernetes.go b/alicloud/resource_alicloud_cs_kubernetes.go index c91f2b7bfd9c..e17fd351f9da 100644 --- a/alicloud/resource_alicloud_cs_kubernetes.go +++ b/alicloud/resource_alicloud_cs_kubernetes.go @@ -543,19 +543,22 @@ func resourceAlicloudCSKubernetes() *schema.Resource { "kube_config": { Type: schema.TypeString, Optional: true, - Removed: "Field 'kube_config' has been removed from provider version 1.212.0. New DataSource 'alicloud_cs_cluster_credential' manage your cluster's kube config.", + Removed: "Field 'kube_config' has been removed from provider version 1.212.0. Please use the attribute 'output_file' of new DataSource 'alicloud_cs_cluster_credential' to replace it", }, "client_cert": { Type: schema.TypeString, Optional: true, + Deprecated: "Field 'client_cert' has been deprecated from provider version 1.243.0. From version 1.187.0, new DataSource 'alicloud_cs_cluster_credential' is recommended to manage cluster's kubeconfig, you can also save the 'certificate_authority.client_cert' attribute content of new DataSource 'alicloud_cs_cluster_credential' to an appropriate path(like ~/.kube/client-cert.pem) for replace it.", }, "client_key": { Type: schema.TypeString, Optional: true, + Deprecated: "Field 'client_key' has been deprecated from provider version 1.243.0. From version 1.187.0, new DataSource 'alicloud_cs_cluster_credential' is recommended to manage cluster's kubeconfig, you can also save the 'certificate_authority.client_key' attribute content of new DataSource 'alicloud_cs_cluster_credential' to an appropriate path(like ~/.kube/client-key.pem) for replace it.", }, "cluster_ca_cert": { Type: schema.TypeString, Optional: true, + Deprecated: "Field 'cluster_ca_cert' has been deprecated from provider version 1.243.0. From version 1.187.0, new DataSource 'alicloud_cs_cluster_credential' is recommended to manage cluster's kubeconfig, you can also save the 'certificate_authority.cluster_cert' attribute content of new DataSource 'alicloud_cs_cluster_credential' to an appropriate path(like ~/.kube/cluster-ca-cert.pem) for replace it.", }, "certificate_authority": { Type: schema.TypeMap, @@ -576,6 +579,7 @@ func resourceAlicloudCSKubernetes() *schema.Resource { }, }, }, + Deprecated: "Field 'certificate_authority' has been deprecated from provider version 1.243.0. Please use the attribute 'certificate_authority' of new DataSource 'alicloud_cs_cluster_credential' to replace it.", }, "connections": { Type: schema.TypeMap, diff --git a/alicloud/resource_alicloud_cs_managed_kubernetes.go b/alicloud/resource_alicloud_cs_managed_kubernetes.go index 479aa3c58130..c50ca7c7076c 100644 --- a/alicloud/resource_alicloud_cs_managed_kubernetes.go +++ b/alicloud/resource_alicloud_cs_managed_kubernetes.go @@ -478,19 +478,22 @@ func resourceAlicloudCSManagedKubernetes() *schema.Resource { "kube_config": { Type: schema.TypeString, Optional: true, - Removed: "Field 'kube_config' has been removed from provider version 1.212.0. New DataSource 'alicloud_cs_cluster_credential' manage your cluster's kube config.", + Removed: "Field 'kube_config' has been removed from provider version 1.212.0. Please use the attribute 'output_file' of new DataSource 'alicloud_cs_cluster_credential' to replace it", }, "client_cert": { Type: schema.TypeString, Optional: true, + Deprecated: "Field 'client_cert' has been deprecated from provider version 1.243.0. From version 1.187.0, new DataSource 'alicloud_cs_cluster_credential' is recommended to manage cluster's kubeconfig, you can also save the 'certificate_authority.client_cert' attribute content of new DataSource 'alicloud_cs_cluster_credential' to an appropriate path(like ~/.kube/client-cert.pem) for replace it.", }, "client_key": { Type: schema.TypeString, Optional: true, + Deprecated: "Field 'client_key' has been deprecated from provider version 1.243.0. From version 1.187.0, new DataSource 'alicloud_cs_cluster_credential' is recommended to manage cluster's kubeconfig, you can also save the 'certificate_authority.client_key' attribute content of new DataSource 'alicloud_cs_cluster_credential' to an appropriate path(like ~/.kube/client-key.pem) for replace it.", }, "cluster_ca_cert": { Type: schema.TypeString, Optional: true, + Deprecated: "Field 'cluster_ca_cert' has been deprecated from provider version 1.243.0. From version 1.187.0, new DataSource 'alicloud_cs_cluster_credential' is recommended to manage cluster's kubeconfig, you can also save the 'certificate_authority.cluster_cert' attribute content of new DataSource 'alicloud_cs_cluster_credential' to an appropriate path(like ~/.kube/cluster-ca-cert.pem) for replace it.", }, "certificate_authority": { Type: schema.TypeMap, @@ -511,6 +514,7 @@ func resourceAlicloudCSManagedKubernetes() *schema.Resource { }, }, }, + Deprecated: "Field 'certificate_authority' has been deprecated from provider version 1.243.0. Please use the attribute 'certificate_authority' of new DataSource 'alicloud_cs_cluster_credential' to replace it.", }, "connections": { Type: schema.TypeMap, diff --git a/alicloud/resource_alicloud_cs_serverless_kubernetes.go b/alicloud/resource_alicloud_cs_serverless_kubernetes.go index d0613fec0317..13868d1c36f3 100644 --- a/alicloud/resource_alicloud_cs_serverless_kubernetes.go +++ b/alicloud/resource_alicloud_cs_serverless_kubernetes.go @@ -116,19 +116,22 @@ func resourceAlicloudCSServerlessKubernetes() *schema.Resource { "kube_config": { Type: schema.TypeString, Optional: true, - Deprecated: "Field 'kube_config' has been deprecated from provider version 1.187.0. New DataSource 'alicloud_cs_cluster_credential' manage your cluster's kube config.", + Deprecated: "Field 'kube_config' has been deprecated from provider version 1.187.0. Please use the attribute 'output_file' of new DataSource 'alicloud_cs_cluster_credential' to replace it.", }, "client_cert": { Type: schema.TypeString, Optional: true, + Deprecated: "Field 'client_cert' has been deprecated from provider version 1.243.0. From version 1.187.0, new DataSource 'alicloud_cs_cluster_credential' is recommended to manage cluster's kubeconfig, you can also save the 'certificate_authority.client_cert' attribute content of new DataSource 'alicloud_cs_cluster_credential' to an appropriate path(like ~/.kube/client-cert.pem) for replace it.", }, "client_key": { Type: schema.TypeString, Optional: true, + Deprecated: "Field 'client_key' has been deprecated from provider version 1.243.0. From version 1.187.0, new DataSource 'alicloud_cs_cluster_credential' is recommended to manage cluster's kubeconfig, you can also save the 'certificate_authority.client_key' attribute content of new DataSource 'alicloud_cs_cluster_credential' to an appropriate path(like ~/.kube/client-key.pem) for replace it.", }, "cluster_ca_cert": { Type: schema.TypeString, Optional: true, + Deprecated: "Field 'cluster_ca_cert' has been deprecated from provider version 1.243.0. From version 1.187.0, new DataSource 'alicloud_cs_cluster_credential' is recommended to manage cluster's kubeconfig, you can also save the 'certificate_authority.cluster_cert' attribute content of new DataSource 'alicloud_cs_cluster_credential' to an appropriate path(like ~/.kube/cluster-ca-cert.pem) for replace it.", }, "tags": { Type: schema.TypeMap, diff --git a/website/docs/r/cs_edge_kubernetes.html.markdown b/website/docs/r/cs_edge_kubernetes.html.markdown index 0158cadd9b81..71b3d166cb58 100644 --- a/website/docs/r/cs_edge_kubernetes.html.markdown +++ b/website/docs/r/cs_edge_kubernetes.html.markdown @@ -197,10 +197,10 @@ resource "alicloud_cs_edge_kubernetes" "default" { You can set some file paths to save kube_config information, but this way is cumbersome. Since version 1.105.0, we've written it to tf state file. About its use，see export attribute certificate_authority. From version 1.187.0+, new DataSource `alicloud_cs_cluster_credential` is recommended to manage cluster's kube_config. -* `kube_config` - (Optional, Deprecated from v1.187.0) The path of kube config, like `~/.kube/config`. -* `client_cert` - (Optional) The path of client certificate, like `~/.kube/client-cert.pem`. -* `client_key` - (Optional) The path of client key, like `~/.kube/client-key.pem`. -* `cluster_ca_cert` - (Optional) The path of cluster ca certificate, like `~/.kube/cluster-ca-cert.pem` +* `kube_config` - (Optional, Deprecated from v1.187.0) The path of kube config, like ~/.kube/config. Please use the attribute [output_file](https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/data-sources/cs_cluster_credential#output_file) of new DataSource `alicloud_cs_cluster_credential` to replace it. +* `client_cert` - (Optional, Deprecated from v1.243.0) From version 1.187.0, new DataSource `alicloud_cs_cluster_credential` is recommended to manage cluster's kubeconfig, you can also save the [certificate_authority.client_cert](https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/data-sources/cs_cluster_credential#client_cert) attribute content of new DataSource `alicloud_cs_cluster_credential` to an appropriate path(like ~/.kube/client-cert.pem) for replace it. +* `client_key` - (Optional, Deprecated from v1.243.0) From version 1.187.0, new DataSource `alicloud_cs_cluster_credential` is recommended to manage cluster's kubeconfig, you can also save the [certificate_authority.client_key](https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/data-sources/cs_cluster_credential#client_key) attribute content of new DataSource `alicloud_cs_cluster_credential` to an appropriate path(like ~/.kube/client-key.pem) for replace it. +* `cluster_ca_cert` - (Optional, Deprecated from v1.243.0) From version 1.187.0, new DataSource `alicloud_cs_cluster_credential` is recommended to manage cluster's kubeconfig, you can also save the [certificate_authority.cluster_cert](https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/data-sources/cs_cluster_credential#cluster_cert) attribute content of new DataSource `alicloud_cs_cluster_credential` to an appropriate path(like ~/.kube/cluster-ca-cert.pem) for replace it. *Removed params* @@ -282,7 +282,7 @@ The following attributes are exported: * `api_server_intranet` - API Server Intranet endpoint. * `master_public_ip` - Master node SSH IP address. * `service_domain` - Service Access Domain. -* `certificate_authority` - (Map, Available since v1.105.0) Nested attribute containing certificate authority data for your cluster. +* `certificate_authority` - (Map, Deprecated from v1.243.0) Nested attribute containing certificate authority data for your cluster. Please use the attribute [certificate_authority](https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/data-sources/cs_cluster_credential#certificate_authority) of new DataSource `alicloud_cs_cluster_credential` to replace it. * `cluster_cert` - The base64 encoded cluster certificate data required to communicate with your cluster. Add this to the certificate-authority-data section of the kubeconfig file for your cluster. * `client_cert` - The base64 encoded client certificate data required to communicate with your cluster. Add this to the client-certificate-data section of the kubeconfig file for your cluster. * `client_key` - The base64 encoded client key data required to communicate with your cluster. Add this to the client-key-data section of the kubeconfig file for your cluster. diff --git a/website/docs/r/cs_kubernetes.html.markdown b/website/docs/r/cs_kubernetes.html.markdown index ae8b26d67bb0..60eed4e900ee 100644 --- a/website/docs/r/cs_kubernetes.html.markdown +++ b/website/docs/r/cs_kubernetes.html.markdown @@ -266,9 +266,9 @@ If you want to use `Flannel` as CNI network plugin, You need to specify the `pod *Computed params* -* `client_cert` - (Optional) The path of client certificate, like `~/.kube/client-cert.pem`. -* `client_key` - (Optional) The path of client key, like `~/.kube/client-key.pem`. -* `cluster_ca_cert` - (Optional) The path of cluster ca certificate, like `~/.kube/cluster-ca-cert.pem` +* `client_cert` - (Optional, Deprecated from v1.243.0) From version 1.187.0, new DataSource `alicloud_cs_cluster_credential` is recommended to manage cluster's kubeconfig, you can also save the [certificate_authority.client_cert](https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/data-sources/cs_cluster_credential#client_cert) attribute content of new DataSource `alicloud_cs_cluster_credential` to an appropriate path(like ~/.kube/client-cert.pem) for replace it. +* `client_key` - (Optional, Deprecated from v1.243.0) From version 1.187.0, new DataSource `alicloud_cs_cluster_credential` is recommended to manage cluster's kubeconfig, you can also save the [certificate_authority.client_key](https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/data-sources/cs_cluster_credential#client_key) attribute content of new DataSource `alicloud_cs_cluster_credential` to an appropriate path(like ~/.kube/client-key.pem) for replace it. +* `cluster_ca_cert` - (Optional, Deprecated from v1.243.0) From version 1.187.0, new DataSource `alicloud_cs_cluster_credential` is recommended to manage cluster's kubeconfig, you can also save the [certificate_authority.cluster_cert](https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/data-sources/cs_cluster_credential#cluster_cert) attribute content of new DataSource `alicloud_cs_cluster_credential` to an appropriate path(like ~/.kube/cluster-ca-cert.pem) for replace it. *Removed params* @@ -284,7 +284,7 @@ If you want to use `Flannel` as CNI network plugin, You need to specify the `pod * `worker_numbers` - (Removed) The number of workers, use `worker_number` to instead it. * `nodes` - (Removed) The master nodes, use `master_nodes` to instead it. * `exclude_autoscaler_nodes` - (Removed since v1.212.0) Exclude autoscaler nodes from `worker_nodes`. Default to `false`. -* `kube_config` - (Removed since v1.212.0) The path of kube config, like `~/.kube/config`. You can set some file paths to save kube_config information, but this way is cumbersome. Since version 1.105.0, we've written it to tf state file. About its use，see export attribute certificate_authority. From version 1.187.0+, new DataSource `alicloud_cs_cluster_credential` is recommended to manage cluster's kube_config. +* `kube_config` - (Removed since v1.212.0) The path of kube config, like ~/.kube/config. Please use the attribute [output_file](https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/data-sources/cs_cluster_credential#output_file) of new DataSource `alicloud_cs_cluster_credential` to replace it. * `availability_zone` - (Removed since v1.212.0) The Zone where new kubernetes cluster will be located. If it is not be specified, the `vswitch_ids` should be set, its value will be vswitch's zone. * `worker_number` - (Removed since v1.212.0) The worker node number of the kubernetes cluster. Default to 3. It is limited up to 50 and if you want to enlarge it, please apply white list or contact with us. * `worker_vswitch_ids` - (Removed since v1.212.0) The vswitches used by workers. @@ -421,7 +421,7 @@ The following attributes are exported: * `api_server_intranet` - API Server Intranet endpoint. * `master_public_ip` - Master node SSH IP address. * `service_domain` - Service Access Domain. -* `certificate_authority` - (Map, Available since v1.105.0) Nested attribute containing certificate authority data for your cluster. +* `certificate_authority` - (Map, Deprecated from v1.243.0) Nested attribute containing certificate authority data for your cluster. Please use the attribute [certificate_authority](https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/data-sources/cs_cluster_credential#certificate_authority) of new DataSource `alicloud_cs_cluster_credential` to replace it. * `cluster_cert` - The base64 encoded cluster certificate data required to communicate with your cluster. Add this to the certificate-authority-data section of the kubeconfig file for your cluster. * `client_cert` - The base64 encoded client certificate data required to communicate with your cluster. Add this to the client-certificate-data section of the kubeconfig file for your cluster. * `client_key` - The base64 encoded client key data required to communicate with your cluster. Add this to the client-key-data section of the kubeconfig file for your cluster. diff --git a/website/docs/r/cs_managed_kubernetes.html.markdown b/website/docs/r/cs_managed_kubernetes.html.markdown index 7d18e09a01df..13541af1b2ae 100644 --- a/website/docs/r/cs_managed_kubernetes.html.markdown +++ b/website/docs/r/cs_managed_kubernetes.html.markdown @@ -237,9 +237,9 @@ If you want to use `Flannel` as CNI network plugin, You need to specify the `pod *Computed params* -* `client_cert` - (Optional) The path of client certificate, like `~/.kube/client-cert.pem`. -* `client_key` - (Optional) The path of client key, like `~/.kube/client-key.pem`. -* `cluster_ca_cert` - (Optional) The path of cluster ca certificate, like `~/.kube/cluster-ca-cert.pem` +* `client_cert` - (Optional, Deprecated from v1.243.0) From version 1.187.0, new DataSource `alicloud_cs_cluster_credential` is recommended to manage cluster's kubeconfig, you can also save the [certificate_authority.client_cert](https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/data-sources/cs_cluster_credential#client_cert) attribute content of new DataSource `alicloud_cs_cluster_credential` to an appropriate path(like ~/.kube/client-cert.pem) for replace it. +* `client_key` - (Optional, Deprecated from v1.243.0) From version 1.187.0, new DataSource `alicloud_cs_cluster_credential` is recommended to manage cluster's kubeconfig, you can also save the [certificate_authority.client_key](https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/data-sources/cs_cluster_credential#client_key) attribute content of new DataSource `alicloud_cs_cluster_credential` to an appropriate path(like ~/.kube/client-key.pem) for replace it. +* `cluster_ca_cert` - (Optional, Deprecated from v1.243.0) From version 1.187.0, new DataSource `alicloud_cs_cluster_credential` is recommended to manage cluster's kubeconfig, you can also save the [certificate_authority.cluster_cert](https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/data-sources/cs_cluster_credential#cluster_cert) attribute content of new DataSource `alicloud_cs_cluster_credential` to an appropriate path(like ~/.kube/cluster-ca-cert.pem) for replace it. *Removed params* @@ -255,7 +255,7 @@ If you want to use `Flannel` as CNI network plugin, You need to specify the `pod * `rds_instances` - (Removed since v1.212.0) RDS instance list, You can choose which RDS instances whitelist to add instances to. * `install_cloud_monitor` - (Removed since v1.212.0) Install cloud monitor agent on ECS. Default is `true` in previous version. From provider version 1.208.0, the default value is `false`. * `exclude_autoscaler_nodes` - (Removed since v1.212.0) Exclude autoscaler nodes from `worker_nodes`. Default to `false`. -* `kube_config` - (Removed since v1.212.0) The path of kube config, like `~/.kube/config`. You can set some file paths to save kube_config information, but this way is cumbersome. Since version 1.105.0, we've written it to tf state file. About its use，see export attribute certificate_authority. From version 1.187.0, new DataSource `alicloud_cs_cluster_credential` is recommended to manage cluster's kube_config. +* `kube_config` - (Removed since v1.212.0) The path of kube config, like ~/.kube/config. Please use the attribute [output_file](https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/data-sources/cs_cluster_credential#output_file) of new DataSource `alicloud_cs_cluster_credential` to replace it. * `availability_zone` - (Removed since v1.212.0) The Zone where new kubernetes cluster will be located. If it is not be specified, the `vswitch_ids` should be set, its value will be vswitch's zone. * `worker_number` - (Removed since v1.212.0) The worker node number of the kubernetes cluster. Default to 3. It is limited up to 50 and if you want to enlarge it, please apply white list or contact with us. From version 1.109.1, It is not necessary in the professional managed cluster, but it is necessary in other types of clusters. * `worker_instance_types` - (Removed since v1.212.0) The instance type of worker node. Specify one type for single AZ Cluster, three types for MultiAZ Cluster. From version 1.109.1, It is not necessary in the professional managed cluster, but it is necessary in other types of clusters. @@ -644,7 +644,7 @@ The following attributes are exported: * `master_public_ip` - Master node SSH IP address. * `service_domain` - Service Access Domain. * `worker_ram_role_name` - The RamRole Name attached to worker node. -* `certificate_authority` - (Available since v1.105.0) Nested attribute containing certificate authority data for your cluster. +* `certificate_authority` - (Map, Deprecated from v1.243.0) Nested attribute containing certificate authority data for your cluster. Please use the attribute [certificate_authority](https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/data-sources/cs_cluster_credential#certificate_authority) of new DataSource `alicloud_cs_cluster_credential` to replace it. * `cluster_cert` - The base64 encoded cluster certificate data required to communicate with your cluster. Add this to the certificate-authority-data section of the kubeconfig file for your cluster. * `client_cert` - The base64 encoded client certificate data required to communicate with your cluster. Add this to the client-certificate-data section of the kubeconfig file for your cluster. * `client_key` - The base64 encoded client key data required to communicate with your cluster. Add this to the client-key-data section of the kubeconfig file for your cluster. diff --git a/website/docs/r/cs_serverless_kubernetes.html.markdown b/website/docs/r/cs_serverless_kubernetes.html.markdown index 9aea31f8b4d2..60fed7a2d60e 100644 --- a/website/docs/r/cs_serverless_kubernetes.html.markdown +++ b/website/docs/r/cs_serverless_kubernetes.html.markdown @@ -118,10 +118,10 @@ The following arguments are supported: - false: Disable deletion protection. * `enable_rrsa` - (Optional, Available since v1.171.0) Whether to enable cluster to support RRSA for version 1.22.3+. Default to `false`. Once the RRSA function is turned on, it is not allowed to turn off. If your cluster has enabled this function, please manually modify your tf file and add the rrsa configuration to the file, learn more [RAM Roles for Service Accounts](https://www.alibabacloud.com/help/zh/container-service-for-kubernetes/latest/use-rrsa-to-enforce-access-control). * `tags` - (Optional) Default nil, A map of tags assigned to the kubernetes cluster and work nodes. -* `kube_config` - (Optional, Deprecated from v1.187.0) The path of kube config, like `~/.kube/config`. -* `client_cert` - (Optional) The path of client certificate, like `~/.kube/client-cert.pem`. -* `client_key` - (Optional) The path of client key, like `~/.kube/client-key.pem`. -* `cluster_ca_cert` - (Optional) The path of cluster ca certificate, like `~/.kube/cluster-ca-cert.pem` +* `kube_config` - (Optional, Deprecated from v1.187.0) The path of kube config, like ~/.kube/config. Please use the attribute [output_file](https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/data-sources/cs_cluster_credential#output_file) of new DataSource `alicloud_cs_cluster_credential` to replace it. +* `client_cert` - (Optional, Deprecated from v1.243.0) From version 1.187.0, new DataSource `alicloud_cs_cluster_credential` is recommended to manage cluster's kubeconfig, you can also save the [certificate_authority.client_cert](https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/data-sources/cs_cluster_credential#client_cert) attribute content of new DataSource `alicloud_cs_cluster_credential` to an appropriate path(like ~/.kube/client-cert.pem) for replace it. +* `client_key` - (Optional, Deprecated from v1.243.0) From version 1.187.0, new DataSource `alicloud_cs_cluster_credential` is recommended to manage cluster's kubeconfig, you can also save the [certificate_authority.client_key](https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/data-sources/cs_cluster_credential#client_key) attribute content of new DataSource `alicloud_cs_cluster_credential` to an appropriate path(like ~/.kube/client-key.pem) for replace it. +* `cluster_ca_cert` - (Optional, Deprecated from v1.243.0) From version 1.187.0, new DataSource `alicloud_cs_cluster_credential` is recommended to manage cluster's kubeconfig, you can also save the [certificate_authority.cluster_cert](https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/data-sources/cs_cluster_credential#cluster_cert) attribute content of new DataSource `alicloud_cs_cluster_credential` to an appropriate path(like ~/.kube/cluster-ca-cert.pem) for replace it. * `security_group_id` - (Optional, ForceNew, Available since v1.91.0) The ID of the security group to which the ECS instances in the cluster belong. If it is not specified, a new Security group will be built. * `resource_group_id` - (Optional, Available since v1.101.0) The ID of the resource group,by default these cloud resources are automatically assigned to the default resource group. * `load_balancer_spec` - (Optional, Deprecated since v1.229.1) The cluster api server load balance instance specification, default `slb.s2.small`. For more information on how to select a LB instance specification, see [SLB instance overview](https://help.aliyun.com/document_detail/85931.html). Only works for **Create** Operation.