role assignment¶

https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/role_assignment

acrPull/Push¶

aks accesses acr example https://github.com/fluxcd/test-infra/tree/65e1a901cbb9b3f9f27ffad7f9a32a6366eae1cc/tf-modules/azure/aks

AcrPull

resource "azurerm_role_assignment" "kubweb_to_acr" {
  scope                = azurerm_container_registry.acr.id
  role_definition_name = "AcrPull"
  principal_id         = azurerm_kubernetes_cluster.aks.kubelet_identity[0].object_id
}