all corrections, but without the suggested removed changes due to PR171

00-locals.tf

@@ -29,19 +29,17 @@ locals {
       id          = var.cluster_id,
       clusterName = var.cluster_name,
       apiServer = {
-        extraArgs = {
-          cloud-provider = "external"
-          enable-admission-plugins = "MutatingAdmissionWebhook,ValidatingAdmissionWebhook, ServiceAccount"
-        },
         certSANs = [ 
           module.elb_k8s_elb.elb_dns_name,
-          ]
+          ],
+        extraArgs = {
+          enable-admission-plugins = var.admission_plugins
+        }
       },
       controllerManager = {
         extraArgs = {
           allocate-node-cidrs = var.allocate_node_cidrs
           cloud-provider = "external"
-          leader-elect = true
         }
       },
       network = {
@@ -77,8 +75,7 @@ locals {
     }
   }
 
-  # Used to configure Cilium Kube-Proxy replacement
-
+  # Used to configure Cilium Kube-Proxy replacement  
   config_cilium_patch = {
     cluster = {
       proxy = {
@@ -94,10 +91,8 @@ locals {
       }
     }
   }
-
-
-
-    config_patches_common = [
+
+  config_patches_common = [
       for path in var.config_patch_files : file(path)
     ]
 

00-variables.tf

@@ -166,4 +166,10 @@ variable "config_patch_files" {
   default     = []
   description = "Path to talos config path files that applies to all nodes"
   type        = list(string)
+}
+
+variable "admission_plugins" {
+  description = "List of admission plugins to enable"
+  type        = list(string)
+  default     = ["MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ServiceAccount"]
 }