fix network contributor

aks-lts · Jul 29, 2024 · 1bb4455 · 1bb4455
1 parent 3b4279c
commit 1bb4455
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/config/prow/cluster/prow-cluster.bicep b/config/prow/cluster/prow-cluster.bicep
@@ -112,7 +112,7 @@ resource clusteraccesspip 'Microsoft.Authorization/roleAssignments@2022-04-01' =
   name: guid('storage-rbac', aks.id, ingresspip.id)
   scope: ingresspip
   properties: {
-    roleDefinitionId: '/subscriptions/${subscription().subscriptionId}/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c' // contributor
+    roleDefinitionId: '/subscriptions/${subscription().subscriptionId}/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7' // network contributor
     principalId: aks.identity.principalId
     principalType: 'ServicePrincipal'
     description: 'Allow aks cloud-provider to manage the public IP address'
@@ -171,3 +171,5 @@ output publicIpAddress string = ingresspip.properties.ipAddress
 output publicIpName string = ingresspip.name
 output storageAccountName string = sa.name
 output prowHostName string = clusterIngressFrontDoor.outputs.prowHostName
+output minioUserName string = guid('minio-user', aks_cluster_region, aks.id, sa.id)
+output minioUserPass string = guid('minio-password', aks_cluster_region, aks.id, sa.id)