-
Notifications
You must be signed in to change notification settings - Fork 2
/
rbac.tf
38 lines (32 loc) · 802 Bytes
/
rbac.tf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
resource "kubernetes_service_account" "this" {
automount_service_account_token = "true"
metadata {
name = "fluentd"
namespace = "kube-system"
}
}
resource "kubernetes_cluster_role" "this" {
metadata {
name = "fluentd"
}
rule {
api_groups = [""]
resources = ["pods", "namespaces"]
verbs = ["get", "list", "watch"]
}
}
resource "kubernetes_cluster_role_binding" "this" {
metadata {
name = "fluentd"
}
role_ref {
api_group = "rbac.authorization.k8s.io"
kind = "ClusterRole"
name = kubernetes_cluster_role.this.metadata.0.name
}
subject {
kind = "ServiceAccount"
name = kubernetes_service_account.this.metadata.0.name
namespace = kubernetes_service_account.this.metadata.0.namespace
}
}