init: copied modules from lawndale-infra
This commit is contained in:
22
kubernetes/kube-proxy/rbac.tf
Normal file
22
kubernetes/kube-proxy/rbac.tf
Normal file
@@ -0,0 +1,22 @@
|
||||
resource "kubernetes_service_account" "this" {
|
||||
metadata {
|
||||
name = "kube-proxy"
|
||||
namespace = "kube-system"
|
||||
}
|
||||
}
|
||||
|
||||
resource "kubernetes_cluster_role_binding" "this" {
|
||||
metadata {
|
||||
name = "kube-proxy-is-system-node-proxier"
|
||||
}
|
||||
role_ref {
|
||||
api_group = "rbac.authorization.k8s.io"
|
||||
kind = "ClusterRole"
|
||||
name = "system:node-proxier"
|
||||
}
|
||||
subject {
|
||||
kind = "ServiceAccount"
|
||||
name = kubernetes_service_account.this.metadata.0.name
|
||||
namespace = "kube-system"
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user