add app gw container

thomast1906 · Mar 22, 2024 · 41695fd · 41695fd
1 parent 7c9248f
commit 41695fd
Showing 1 changed file with 11 additions and 1 deletion.
diff --git a/Terraform-AZURE-Services-Creation/AKS/rbac.tf b/Terraform-AZURE-Services-Creation/AKS/rbac.tf
@@ -26,4 +26,14 @@ resource "azurerm_role_assignment" "acr_pull" {
   depends_on = [
     azurerm_kubernetes_cluster.k8s
   ]
-}
+}
+
+resource "azurerm_role_assignment" "appgwcontainer" {
+  principal_id         = azurerm_user_assigned_identity.alb_identity.principal_id
+  scope                = data.azurerm_resource_group.resource_group.name.id
+  role_definition_name = "reader"
+  depends_on = [
+    azurerm_kubernetes_cluster.k8s,
+    azurerm_user_assigned_identity.alb_identity
+  ]
+}