diff --git a/Terraform-AZURE-Services-Creation/AKS/rbac.tf b/Terraform-AZURE-Services-Creation/AKS/rbac.tf index 396d34c..9e3404a 100644 --- a/Terraform-AZURE-Services-Creation/AKS/rbac.tf +++ b/Terraform-AZURE-Services-Creation/AKS/rbac.tf @@ -56,7 +56,7 @@ data "azurerm_subscriptions" "thomasthorntoncloud" { resource "azurerm_role_assignment" "appgwcontainerfix" { principal_id = azurerm_user_assigned_identity.alb_identity.principal_id scope = data.azurerm_subscriptions.thomasthorntoncloud.subscriptions[0].id - role_definition_name = "contributor" + role_definition_name = "Network Contributor" depends_on = [ azurerm_kubernetes_cluster.k8s, azurerm_user_assigned_identity.alb_identity diff --git a/kubernetes_manifest/script/alb-controller-install-k8s.sh b/kubernetes_manifest/script/alb-controller-install-k8s.sh index 6272f60..1035687 100755 --- a/kubernetes_manifest/script/alb-controller-install-k8s.sh +++ b/kubernetes_manifest/script/alb-controller-install-k8s.sh @@ -2,38 +2,36 @@ RESOURCE_GROUP="devopsthehardway-rg" AKS_NAME="devopsthehardwayaks" -helm_resource_namespace="alb" +helm_resource_namespace="azure-alb-system" VNET_NAME="devopsthehardway-vnet" ALB_SUBNET_NAME="appgw" -# create namespace -# kubectl create namespace $helm_resource_namespace +create namespace +kubectl create namespace $helm_resource_namespace -# # az aks get-credentials --resource-group $RESOURCE_GROUP --name $AKS_NAME -# helm install alb-controller oci://mcr.microsoft.com/application-lb/charts/alb-controller \ -# --namespace $helm_resource_namespace \ -# --version 1.0.0 \ -# --set albController.namespace=$helm_resource_namespace \ -# --set albController.podIdentity.clientID=$(az identity show -g $RESOURCE_GROUP -n azure-alb-identity --query clientId -o tsv) +# az aks get-credentials --resource-group $RESOURCE_GROUP --name $AKS_NAME +helm install alb-controller oci://mcr.microsoft.com/application-lb/charts/alb-controller \ + --version 1.0.0 \ + --set albController.podIdentity.clientID=$(az identity show -g $RESOURCE_GROUP -n azure-alb-identity --query clientId -o tsv) -ALB_SUBNET_ID=$(az network vnet subnet show --name $ALB_SUBNET_NAME --resource-group $RESOURCE_GROUP --vnet-name $VNET_NAME --query '[id]' --output tsv) +# ALB_SUBNET_ID=$(az network vnet subnet show --name $ALB_SUBNET_NAME --resource-group $RESOURCE_GROUP --vnet-name $VNET_NAME --query '[id]' --output tsv) -# Creates the namespace for alb-controller -kubectl apply -f - <