Commit a8b0176d authored by Danny's avatar Danny

add name to resource

parent 0efbc2d2
......@@ -5,42 +5,42 @@ resource "kubernetes_role" "kubernetes_dashboard_role" {
}
rule {
api_group = [""]
resources = ["secrets"]
verbs = ["create"]
api_groups = [""]
resources = ["secrets"]
verbs = ["create"]
}
rule {
api_group = [""]
resources = ["configmaps"]
verbs = ["create"]
api_groups = [""]
resources = ["configmaps"]
verbs = ["create"]
}
rule {
api_group = [""]
resources = ["kubernetes-dashboard-key-holder", "kubernetes-dashboard-certs"]
verbs = ["get", "update", "delete"]
api_groups = [""]
resources = ["kubernetes-dashboard-key-holder", "kubernetes-dashboard-certs"]
verbs = ["get", "update", "delete"]
}
rule {
api_group = [""]
api_groups = [""]
resources = ["configmaps"]
resource_names = ["kubernetes-dashboard-settings"]
verbs = ["get", "update"]
}
rule {
api_group = [""]
resources = ["services"]
resourceNames = ["heapster"]
verbs = ["proxy"]
api_groups = [""]
resources = ["services"]
resource_names = ["heapster"]
verbs = ["proxy"]
}
rule {
api_group = [""]
resources = ["services/proxy"]
resourceNames = ["heapster", "http:heapster:", "http:heaptser:"]
verbs = ["get"]
api_groups = [""]
resources = ["services/proxy"]
resource_names = ["heapster", "http:heapster:", "http:heaptser:"]
verbs = ["get"]
}
}
......@@ -51,12 +51,12 @@ resource "kubernetes_role_binding" "kubernetes_dashboard_role_bind" {
}
role_ref {
api_group = ["rbac.authorization.k8s.io"]
kind = "Role"
name = "kubernetes-dashboard-minimal"
api_groups = "rbac.authorization.k8s.io"
kind = "Role"
name = "kubernetes-dashboard-minimal"
}
subjects {
subject {
kind = "ServiceAccount"
name = "kubernetes-dashboard"
}
......
resource "kubernetes_secret" {
resource "kubernetes_secret" "kubernetes_dashboard_secret" {
metadata {
labels {
app = "kubernetes-dashboard"
......
resource "kubernetes_service_account" "kubernetes_dashboard_serviceaccount" {
metadata {
app = "kubernetes-dashboard"
name = "kubernetes-dashboard"
namespace = "kube-system"
}
}
......@@ -28,10 +28,10 @@ resource "kubernetes_deployment" "kubernetes_dashboard_deployment" {
termination_grace_period_seconds = 60
volume {
name = "${kubernetes_service_account.kube_dash_service_account.default_secret_name}"
name = "${kubernetes_service_account.kubernetes_dashboard_serviceaccount.default_secret_name}"
secret {
secret_name = "${kubernetes_service_account.kube_dash_service_account.default_secret_name}"
secret_name = "${kubernetes_service_account.kubernetes_dashboard_serviceaccount.default_secret_name}"
}
}
......@@ -45,7 +45,7 @@ resource "kubernetes_deployment" "kubernetes_dashboard_deployment" {
volume {
name = "tmp-volume"
empty_dir = ""
empty_dir {}
}
container {
......@@ -55,7 +55,7 @@ resource "kubernetes_deployment" "kubernetes_dashboard_deployment" {
volume_mount {
mount_path = "/var/run/secrets/kubernetes.io/serviceaccount"
name = "${kubernetes_service_account.aws_alb_service_account.default_secret_name}"
name = "${kubernetes_service_account.kubernetes_dashboard_serviceaccount.default_secret_name}"
read_only = true
}
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment