File tree Expand file tree Collapse file tree 10 files changed +37
-37
lines changed
examples/basic-azure-integration
meshcloud-idp-lookup-service-principal
meshcloud-metering-service-principal
meshcloud-replicator-service-principal Expand file tree Collapse file tree 10 files changed +37
-37
lines changed Original file line number Diff line number Diff line change 1
1
.terraform
2
- .terraform.lock.hcl
2
+ .terraform.lock.hcl
3
+ terraform.tfstate *
Original file line number Diff line number Diff line change 4
4
#
5
5
# Remove/comment the backend block below if you are only testing the module.
6
6
# Please be aware that you cannot destroy the created resources via terraform if you lose the state file.
7
- terraform {
8
- backend "azurerm" {
9
- tenant_id = " aadTenantId"
10
- subscription_id = " subscriptionId"
11
- resource_group_name = " rg-cloud-foundation"
12
- storage_account_name = " tfstatesiqw0x"
13
- container_name = " tfstates"
14
- key = " meshplatform-setup"
15
- }
16
- }
7
+ # terraform {
8
+ # backend "azurerm" {
9
+ # tenant_id = "aadTenantId"
10
+ # subscription_id = "subscriptionId"
11
+ # resource_group_name = "rg-cloud-foundation"
12
+ # storage_account_name = "tfstatesiqw0x"
13
+ # container_name = "tfstates"
14
+ # key = "meshplatform-setup"
15
+ # }
16
+ # }
17
17
18
18
provider "azurerm" {
19
19
# Configuration options
@@ -29,4 +29,4 @@ module "meshplatform" {
29
29
30
30
service_principal_name_suffix = " <UNIQUE_NAME>"
31
31
mgmt_group_name = " <MANAGEMENT_GROUP_NAME>|<MANAGEMENT_GROUP_ID>" # Either the Management group Name or ID
32
- }
32
+ }
Original file line number Diff line number Diff line change 1
- output "replicator_service_principal " {
1
+ output "replicator_credentials " {
2
2
description = " Replicator Service Principal."
3
3
value = module. meshplatform . replicator_service_principal
4
4
}
5
5
6
- output "replicator_service_principal_password " {
6
+ output "replicator_client_secret " {
7
7
description = " Password for Replicator Service Principal."
8
8
value = module. meshplatform . replicator_service_principal_password
9
9
sensitive = true
10
10
}
11
11
12
- output "metering_service_principal " {
12
+ output "metering_credentials " {
13
13
description = " Metering Service Principal."
14
14
value = module. meshplatform . metering_service_principal
15
15
}
16
16
17
- output "metering_service_principal_password " {
17
+ output "metering_client_secret " {
18
18
description = " Password for Metering Service Principal."
19
19
value = module. meshplatform . metering_service_principal_password
20
20
sensitive = true
Original file line number Diff line number Diff line change @@ -66,4 +66,4 @@ moved {
66
66
moved {
67
67
from = module. idp_lookup_spp
68
68
to = module. idp_lookup_service_principal
69
- }
69
+ }
Original file line number Diff line number Diff line change @@ -65,8 +65,8 @@ resource "azuread_service_principal_password" "service_principal_pw" {
65
65
}
66
66
67
67
68
- # facilitate migration from v0.1.0 of the module
69
- moved {
70
- from = azuread_service_principal_password. spp_pw
71
- to = azuread_service_principal_password. service_principal_pw
72
- }
68
+ # # facilitate migration from v0.1.0 of the module
69
+ # moved {
70
+ # from = azuread_service_principal_password.spp_pw
71
+ # to = azuread_service_principal_password.service_principal_pw
72
+ # }
Original file line number Diff line number Diff line change @@ -118,7 +118,7 @@ resource "time_rotating" "replicator_secret_rotation" {
118
118
rotation_days = 365
119
119
}
120
120
121
- resource "azuread_application_password" "service_principal_pw " {
121
+ resource "azuread_application_password" "application_pw " {
122
122
application_object_id = azuread_application. meshcloud_metering . object_id
123
123
rotate_when_changed = {
124
124
rotation = time_rotating.replicator_secret_rotation.id
Original file line number Diff line number Diff line change 1
- output "service_principal " {
1
+ output "credentials " {
2
2
description = " Service Principal application id and object id"
3
3
value = {
4
4
Enterprise_Application_Object_ID = azuread_service_principal.meshcloud_metering.id
@@ -7,8 +7,8 @@ output "service_principal" {
7
7
}
8
8
}
9
9
10
- output "service_principal_password " {
11
- description = " Password for the Service Principal ."
12
- value = azuread_application_password. service_principal_pw . value
10
+ output "application_client_secret " {
11
+ description = " Client Secret Of the Application ."
12
+ value = azuread_application_password. application_pw . value
13
13
sensitive = true
14
14
}
Original file line number Diff line number Diff line change @@ -43,7 +43,6 @@ resource "azurerm_role_definition" "meshcloud_replicator" {
43
43
# Assigning Subscriptions to Management Groups
44
44
" Microsoft.Management/managementGroups/subscriptions/write" ,
45
45
" Microsoft.Management/managementGroups/write" ,
46
-
47
46
# Permissions for reading and writing tags
48
47
" Microsoft.Resources/tags/*" ,
49
48
@@ -141,7 +140,7 @@ resource "azuread_application" "meshcloud_replicator" {
141
140
resource "time_rotating" "replicator_secret_rotation" {
142
141
rotation_days = 365
143
142
}
144
- resource "azuread_application_password" "service_principal_pw " {
143
+ resource "azuread_application_password" "application_pw " {
145
144
application_object_id = azuread_application. meshcloud_replicator . object_id
146
145
rotate_when_changed = {
147
146
rotation = time_rotating.replicator_secret_rotation.id
Original file line number Diff line number Diff line change 1
- output "service_principal " {
1
+ output "credentials " {
2
2
description = " Service Principal application id and object id"
3
3
value = {
4
4
Enterprise_Application_Object_ID = azuread_service_principal.meshcloud_replicator.id
@@ -7,9 +7,9 @@ output "service_principal" {
7
7
}
8
8
}
9
9
10
- output "service_principal_password " {
11
- description = " Password for the Service Principal ."
12
- value = azuread_application_password. service_principal_pw . value
10
+ output "application_client_secret " {
11
+ description = " Client Secret Of the Application ."
12
+ value = azuread_application_password. application_pw . value
13
13
sensitive = true
14
14
}
15
15
Original file line number Diff line number Diff line change 1
1
2
2
output "replicator_service_principal" {
3
3
description = " Replicator Service Principal."
4
- value = length (module. replicator_service_principal ) > 0 ? module. replicator_service_principal [0 ]. service_principal : null
4
+ value = length (module. replicator_service_principal ) > 0 ? module. replicator_service_principal [0 ]. credentials : null
5
5
}
6
6
7
7
output "replicator_service_principal_password" {
8
8
description = " Password for Replicator Service Principal."
9
- value = length (module. replicator_service_principal ) > 0 ? module. replicator_service_principal [0 ]. service_principal_password : null
9
+ value = length (module. replicator_service_principal ) > 0 ? module. replicator_service_principal [0 ]. application_client_secret : null
10
10
sensitive = true
11
11
}
12
12
@@ -17,12 +17,12 @@ output "replicator_service_principal_password" {
17
17
18
18
output "metering_service_principal" {
19
19
description = " Metering Service Principal."
20
- value = length (module. metering_service_principal ) > 0 ? module. metering_service_principal [0 ]. service_principal : null
20
+ value = length (module. metering_service_principal ) > 0 ? module. metering_service_principal [0 ]. credentials : null
21
21
}
22
22
23
23
output "metering_service_principal_password" {
24
24
description = " Password for Metering Service Principal."
25
- value = length (module. metering_service_principal ) > 0 ? module. metering_service_principal [0 ]. service_principal_password : null
25
+ value = length (module. metering_service_principal ) > 0 ? module. metering_service_principal [0 ]. application_client_secret : null
26
26
sensitive = true
27
27
}
28
28
You can’t perform that action at this time.
0 commit comments