Merge pull request #71 from PerfectThymeTech/marvinbuss/create_missin…

…g_role Add Missing Role Assignment
PerfectThymeTech · May 12, 2024 · 148d1b5 · 148d1b5
2 parents 7f6af0c + 75df3f0
commit 148d1b5
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 0 deletions.
diff --git a/code/infra/keyvault.tf b/code/infra/keyvault.tf
@@ -55,6 +55,10 @@ resource "azurerm_key_vault_secret" "key_vault_secret_github_pat" {
 
   content_type = "text/plain"
   value        = var.github_personal_access_token
+
+  depends_on = [
+    azurerm_role_assignment.current_role_assignment_key_vault_secrets_operator
+  ]
 }
 
 resource "azurerm_private_endpoint" "key_vault_private_endpoint" {

diff --git a/code/infra/roleassignments.tf b/code/infra/roleassignments.tf
@@ -1,3 +1,9 @@
+resource "azurerm_role_assignment" "current_role_assignment_key_vault_secrets_operator" {
+  scope                = azurerm_key_vault.key_vault.id
+  role_definition_name = "Key Vault Secrets Operator"
+  principal_id         = data.azurerm_client_config.current.object_id
+}
+
 # User Assigned Identity
 resource "azurerm_role_assignment" "uai_role_assignment_key_vault_secrets_user" {
   scope                = azurerm_key_vault.key_vault.id