eks-web-console-group.tf

gistfile1.txt

resource "kubernetes_manifest" "eks_console_role" {
  manifest = {
    apiVersion = "rbac.authorization.k8s.io/v1"
    kind = "ClusterRole"
    metadata = {
      name = "eks-console"
    }
    rules = [
      {
        "apiGroups" = [
          "",
        ]
        "resources" = [
          "namespaces",
          "nodes",
          "pods",
        ]
        "verbs" = [
          "get",
          "list",
        ]
      },
      {
        "apiGroups" = [
          "apps",
        ]
        "resources" = [
          "daemonsets",
          "deployments",
          "replicasets",
          "statefulsets",
        ]
        "verbs" = [
          "get",
          "list",
        ]
      },
      {
        "apiGroups" = [
          "batch",
        ]
        "resources" = [
          "jobs",
        ]
        "verbs" = [
          "get",
          "list",
        ]
      }
    ]
  }
}

resource "kubernetes_manifest" "eks_console_role_binding" {
  depends_on = [
    kubernetes_manifest.eks_console_role,
  ]

  manifest = {
    apiVersion = "rbac.authorization.k8s.io/v1"
    kind = "ClusterRoleBinding"
    metadata = {
      name = "eks-console"
    }
    roleRef = {
      "apiGroup" = "rbac.authorization.k8s.io"
      "kind" = "ClusterRole"
      "name" = "eks-console"
    }
    subjects = [
      {
        "apiGroup" = "rbac.authorization.k8s.io"
        "kind" = "Group"
        "name" = "eks-console"
      }
    ]
  } 
}