default

apiVersion: tf.upbound.io/v1beta1
kind: ProviderConfig
metadata:
  name: default
spec:
  configuration: |
    terraform {
      backend "kubernetes" {
        secret_suffix     = "providerconfig-aws-eu-west-1"
        namespace         = "upbound-system"
        in_cluster_config = true
      }
    }
    provider "aws" {
      shared_credentials_file = "${path.module}/aws-creds.ini"
      region = "eu-west-1"
    }
  credentials:
    - filename: aws-creds.ini
      secretRef:
        key: credentials
        name: aws-creds
        namespace: upbound-system
      source: Secret
    - filename: .terraformrc
      secretRef:
        key: .terraformrc
        name: terraformrc
        namespace: upbound-system
      source: Secret

aws-eu-west-1

apiVersion: tf.upbound.io/v1beta1
kind: ProviderConfig
metadata:
  name: aws-eu-west-1
spec:
  configuration: |
    terraform {
      required_providers {
        aws = {
          source = "hashicorp/aws"
          version = "5.6.1"
        }
      }
      backend "kubernetes" {
        secret_suffix     = "providerconfig-aws-eu-west-1"
        namespace         = "upbound-system"
        in_cluster_config = true
      }
    }
    provider "aws" {
      shared_credentials_files = ["${path.module}/aws-creds.ini"]
      region = "eu-west-1"
    }
  credentials:
    - filename: aws-creds.ini
      secretRef:
        key: credentials
        name: aws-creds
        namespace: upbound-system
      source: Secret

default

apiVersion: tf.upbound.io/v1beta1
kind: ProviderConfig
metadata:
  name: default
spec:
  configuration: |
    provider "google" {
      credentials = "gcp-credentials.json"
      project     = "official-provider-testing"
    }

    // Modules _must_ use remote state. The provider does not persist state.
    terraform {
      backend "kubernetes" {
        secret_suffix     = "providerconfig-default"
        namespace         = "upbound-system"
        in_cluster_config = true
      }
    }
  credentials:
    - filename: gcp-credentials.json
      secretRef:
        key: credentials
        name: gcp-creds
        namespace: upbound-system
      source: Secret

aws-irsa

apiVersion: tf.upbound.io/v1beta1
kind: ProviderConfig
metadata:
  annotations: {}
  name: aws-irsa
spec:
  configuration: |
    terraform {
      backend "kubernetes" {
        secret_suffix     = "providerconfig-tf-aws"
        namespace         = "crossplane-system"
        in_cluster_config = true
      }
    }
    provider "aws" {}
  credentials:
    - filename: aws.json
      source: None