Merge pull request #164 from Esri/issue161_2

#161 Updated ALB Controller identity role assignment
Esri · Jan 23, 2025 · ae4c5e9 · ae4c5e9
2 parents 05050fc + ab6af1b
commit ae4c5e9
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/azure/arcgis-site-core/k8s-cluster/modules/alb-controller/main.tf b/azure/arcgis-site-core/k8s-cluster/modules/alb-controller/main.tf
@@ -59,8 +59,9 @@ resource "azurerm_role_assignment" "aks_cluster_reader" {
   principal_id                     = azurerm_user_assigned_identity.azure_alb_identity.principal_id
   principal_type                   = "ServicePrincipal"
   role_definition_name             = "Reader"
-  scope                            = data.azurerm_kubernetes_cluster.site_cluster.node_resource_group_id
-  # scope                            = data.azurerm_resource_group.cluster_rg.id
+  # In ALB Controller 1.2.3 the scope had to be the node resource group of the AKS cluster.
+  # scope                            = data.azurerm_kubernetes_cluster.site_cluster.node_resource_group_id
+  scope                            = data.azurerm_resource_group.cluster_rg.id
   skip_service_principal_aad_check = true
 
   depends_on = [