lonegunmanb 343534d2ec
201-aks-rbac-dashboard-admin patch (#148)
* fix 201-aks-rbac-dashboard-admin

* remove azuread provider block

* rename aks resource to main

---------

Co-authored-by: zjhe <hezijie@microsoft.com>
2023-02-22 09:32:13 +08:00

20 lines
460 B
HCL

## Grant cluster-admin rights to the kubernetes-dashboard account.
## THIS IS NOT RECOMMENDED IN PRODUTION
resource "kubernetes_cluster_role_binding" "dashboard" {
metadata {
name = "kubernetes-dashboard"
}
role_ref {
api_group = "rbac.authorization.k8s.io"
kind = "ClusterRole"
name = "cluster-admin"
}
subject {
kind = "ServiceAccount"
name = "kubernetes-dashboard"
namespace = "kube-system"
}
}