attach cluster uami to node subnet

tembo-io · Nov 18, 2024 · f779903 · f779903
1 parent ecde535
commit f779903
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/main.tf b/main.tf
@@ -48,6 +48,18 @@ resource "azurerm_role_assignment" "network_contributor_on_resource_group" {
   role_definition_name = "Network Contributor"
 }
 
+resource "azurerm_role_assignment" "virtual_machine_contributor_on_resource_group" {
+  principal_id         = data.azurerm_user_assigned_identity.cluster_identity.principal_id
+  scope                = data.azurerm_resource_group.this.id
+  role_definition_name = "Virtual Machine Contributor"
+}
+
+resource "azurerm_role_assignment" "network_contributor_on_node_subnet" {
+  principal_id         = data.azurerm_user_assigned_identity.cluster_identity.principal_id
+  scope                = var.network.node_subnet_id
+  role_definition_name = "Network Contributor"
+}
+
 resource "azurerm_kubernetes_cluster" "this" {
   location                          = var.location
   name                              = "aks-${var.name}"