add a few network iam bindings that are still necessary for aks

pluralsh · Jan 6, 2024 · 7576c1b · 7576c1b
1 parent af8343d
commit 7576c1b
Showing 1 changed file with 15 additions and 0 deletions.
diff --git a/terraform/clouds/azure/iam.tf b/terraform/clouds/azure/iam.tf
@@ -0,0 +1,15 @@
+resource "azurerm_role_assignment" "aks-network-identity-kubelet" {
+  scope                = azurerm_virtual_network.network.id
+  role_definition_name = "Network Contributor"
+  principal_id         = module.aks[0].kubelet_identity
+
+  depends_on = [module.aks, azurerm_virtual_network.network]
+}
+
+resource "azurerm_role_assignment" "aks-network-identity-ssi" {
+  scope                = azurerm_virtual_network.network.id
+  role_definition_name = "Network Contributor"
+  principal_id         = module.aks[0].cluster_identity
+
+  depends_on = [module.aks, azurerm_virtual_network.network]
+}