diff --git a/job-executer-service.tf b/job-executer-service.tf index 1cd559c..53a858a 100644 --- a/job-executer-service.tf +++ b/job-executer-service.tf @@ -48,4 +48,35 @@ set { helm_release.keptn, module.keptn-api-token ] +} + +resource "kubernetes_service_account" "jes-deploy-using-helm" { + metadata { + name = "jes-deploy-using-helm" + namespace = var.KEPTN_NAMESPACE + # annotations = { + # "eks.amazonaws.com/role-arn" = aws_iam_role.externaldns_route53.arn + # } + } + automount_service_account_token = true + + depends_on = [ + helm_release.keptn + ] +} + +resource "kubernetes_cluster_role_binding" "keptn-jes-deploy-using-helm" { + metadata { + name = "keptn-jes-deploy-using-helm" + } + role_ref { + api_group = "rbac.authorization.k8s.io" + kind = "ClusterRole" + name = "cluster-admin" + } + subject { + kind = "ServiceAccount" + name = "jes-deploy-using-helm" + namespace = var.KEPTN_NAMESPACE + } } \ No newline at end of file