I want to switch the code responsible for creating a AKS cluster to terraform and I have a hard time finding a function that replaces (permissive-binding option) for clusterrolebinding.

kubectl create clusterrolebinding permissive-binding \
  --clusterrole=cluster-admin \
  --user=admin \
  --user=kubelet \
  --group=system:serviceaccounts

I am using resource "kubernetes_cluster_role_binding", but is there an option to specify is about permissive-binding? In the documentation I can not find anything.