
* fix 201-aks-rbac-dashboard-admin * remove azuread provider block * rename aks resource to main --------- Co-authored-by: zjhe <hezijie@microsoft.com>
20 lines
460 B
HCL
20 lines
460 B
HCL
## Grant cluster-admin rights to the kubernetes-dashboard account.
|
|
## THIS IS NOT RECOMMENDED IN PRODUTION
|
|
resource "kubernetes_cluster_role_binding" "dashboard" {
|
|
metadata {
|
|
name = "kubernetes-dashboard"
|
|
}
|
|
|
|
role_ref {
|
|
api_group = "rbac.authorization.k8s.io"
|
|
kind = "ClusterRole"
|
|
name = "cluster-admin"
|
|
}
|
|
|
|
subject {
|
|
kind = "ServiceAccount"
|
|
name = "kubernetes-dashboard"
|
|
namespace = "kube-system"
|
|
}
|
|
}
|