mirror of
https://github.com/puppetmaster/typhoon.git
synced 2024-12-26 18:49:34 +01:00
7b8a51070f
* With the new component system, these components can be managed independent from the cluster and rolled or edited in advanced ways
25 lines
500 B
HCL
25 lines
500 B
HCL
resource "kubernetes_service_account" "coredns" {
|
|
metadata {
|
|
name = "coredns"
|
|
namespace = "kube-system"
|
|
}
|
|
automount_service_account_token = false
|
|
}
|
|
|
|
|
|
resource "kubernetes_cluster_role_binding" "coredns" {
|
|
metadata {
|
|
name = "system:coredns"
|
|
}
|
|
role_ref {
|
|
api_group = "rbac.authorization.k8s.io"
|
|
kind = "ClusterRole"
|
|
name = "system:coredns"
|
|
}
|
|
subject {
|
|
kind = "ServiceAccount"
|
|
name = "coredns"
|
|
namespace = "kube-system"
|
|
}
|
|
}
|