Files
falco/integrations/kubernetes-response-engine/deployment/aws/Makefile
Néstor Salceda 4696519deb Honor the principle of least privilege for AWS deployment
Configure needed permisssions instead of using one too permissive.
2018-11-12 11:49:07 +01:00

18 lines
509 B
Makefile

all: rbac create configure
rbac:
kubectl apply -f ../cluster-role.yaml
kubectl apply -f cluster-role-binding.yaml
create:
terraform apply -auto-approve
configure:
kubectl get -n kube-system configmap/aws-auth -o yaml | awk "/mapRoles: \|/{print;print \"$(shell terraform output patch_for_aws_auth)\";next}1" > aws-auth-patch.yml
kubectl -n kube-system replace -f aws-auth-patch.yml
clean:
terraform destroy -force
kubectl delete -f cluster-role-binding.yaml
kubectl delete -f ../cluster-role.yaml