Skip to content

Commit d65d6e7

Browse files
Felix Ziegerfelixzieger
authored andcommitted
remove comment about custom role
1 parent 7e81c4f commit d65d6e7

File tree

1 file changed

+0
-30
lines changed
  • modules/meshcloud-metering-service-principal

1 file changed

+0
-30
lines changed

modules/meshcloud-metering-service-principal/module.tf

Lines changed: 0 additions & 30 deletions
Original file line numberDiff line numberDiff line change
@@ -15,36 +15,6 @@ terraform {
1515
}
1616
}
1717

18-
# At this point, we would have liked to use a custom role for the following reasons:
19-
# - permissions are explicitedly stated and can easily be fine tuned in the future
20-
# - we are independent of changes to Built-In Roles by Microsoft
21-
# - we could have restricted the existence of the role to just it's scope
22-
# HOWEVER, since Microsoft decided you cannot assign the 'Microsoft.Billing/billingPeriods/read' via the api (Status=400 Code="InvalidActionOrNotAction" Message="'Microsoft.Billing/billingPeriods/read' does not match any of the actions supported by the providers.")
23-
# we have to use a built in role for now that has that permission. If in the future they fix this problem, we can use the following custom role snippet
24-
# resource azurerm_role_definition meshcloud_metering {
25-
# name = "metering.${var.service_principal_name_suffix}"
26-
# scope = var.scope
27-
# description = "Permissions required by meshcloud in order to supply billing and usage data via its metering module"
28-
29-
# permissions {
30-
# actions = [
31-
# "Microsoft.Consumption/*/read",
32-
# "Microsoft.CostManagement/*/read",
33-
# "Microsoft.Billing/billingPeriods/read",
34-
# "Microsoft.Resources/subscriptions/read",
35-
# "Microsoft.Resources/subscriptions/resourceGroups/read",
36-
# "Microsoft.Support/*",
37-
# "Microsoft.Advisor/configurations/read",
38-
# "Microsoft.Advisor/recommendations/read",
39-
# "Microsoft.Management/managementGroups/read"
40-
# ]
41-
# }
42-
43-
# assignable_scopes = [
44-
# var.scope
45-
# ]
46-
# }
47-
4818
//---------------------------------------------------------------------------
4919
// Assign Cost Management reader role to the enterprise application
5020
//---------------------------------------------------------------------------

0 commit comments

Comments
 (0)