forked from edalferes/terraform-azure-aks
-
Notifications
You must be signed in to change notification settings - Fork 0
/
sp.tf
46 lines (39 loc) · 1.17 KB
/
sp.tf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
resource "azuread_application" "sp" {
display_name = local.sp_name
available_to_other_tenants = false
oauth2_allow_implicit_flow = false
}
resource "azuread_service_principal" "sp" {
application_id = azuread_application.sp.application_id
}
resource "random_string" "unique" {
length = 32
special = false
upper = true
keepers = {
service_principal = azuread_service_principal.sp.id
}
}
resource "azuread_service_principal_password" "sp" {
service_principal_id = azuread_service_principal.sp.id
value = random_string.unique.result
end_date = var.end_date
}
resource "azurerm_role_assignment" "role_assignment_network" {
scope = local.subnet_id
role_definition_name = "Contributor"
principal_id = azuread_service_principal.sp.id
}
resource "azurerm_role_assignment" "role_assignment_aks" {
scope = azurerm_kubernetes_cluster.k8s.id
role_definition_name = "Contributor"
principal_id = azuread_service_principal.sp.id
}
resource "null_resource" "delay_after_sp_created" {
provisioner "local-exec" {
command = "sleep 60"
}
triggers = {
"before" = azuread_service_principal_password.sp.value
}
}