From 76d0dc4493aa36e69de016239cf23299ea6432b1 Mon Sep 17 00:00:00 2001
From: Haitao Chen <haitch@microsoft.com>
Date: Tue, 23 Jul 2024 22:47:23 -0700
Subject: [PATCH] tweaks

---
 .github/workflows/deploy-lts-prow.yaml | 3 +++
 config/prow/cluster/prow-cluster.bicep | 2 ++
 2 files changed, 5 insertions(+)

diff --git a/.github/workflows/deploy-lts-prow.yaml b/.github/workflows/deploy-lts-prow.yaml
index b41516d..168d03d 100644
--- a/.github/workflows/deploy-lts-prow.yaml
+++ b/.github/workflows/deploy-lts-prow.yaml
@@ -42,6 +42,9 @@ jobs:
           subscriptionId: ${{ vars.AZURE_SUBSCRIPTION_ID }}
           resourceGroupName: ${{ vars.AZURE_RG }}
           template: ./config/prow/cluster/prow-cluster.bicep
+          parameters: |
+            aks_cluster_region=westus2
+            aks_cluster_admins=${{ secrets.PROW_ADMINS }}
           failOnStdErr: false
 
       - name: Fetch config
diff --git a/config/prow/cluster/prow-cluster.bicep b/config/prow/cluster/prow-cluster.bicep
index 9f16f0f..f91bf0d 100644
--- a/config/prow/cluster/prow-cluster.bicep
+++ b/config/prow/cluster/prow-cluster.bicep
@@ -1,5 +1,6 @@
 param aks_cluster_region string = 'westus3'
 param aks_cluster_prefix string = 'aks-lts-prow'
+param aks_cluster_admins array = []
 param system_vm_sku string = 'Standard_DS3_v2'
 param prow_vm_sku string = 'Standard_DS3_v2'
 param test_vm_sku string = 'Standard_D16s_v5'
@@ -75,6 +76,7 @@ resource aks 'Microsoft.ContainerService/managedClusters@2023-03-01' = {
     aadProfile: {
       managed: true
       enableAzureRBAC: false
+      adminGroupObjectIDs: aks_cluster_admins
     }
     storageProfile: {
       diskCSIDriver: {