azurerm_bastion_host - adding property kerberos_enabled

internal/services/network/bastion_host_resource.go

@@ -107,6 +107,12 @@ func resourceBastionHost() *pluginsdk.Resource {
 				Default:  false,
 			},
 
+			"kerberos_enabled": {
+				Type:     pluginsdk.TypeBool,
+				Optional: true,
+				Default:  false,
+			},
+
 			"scale_units": {
 				Type:         pluginsdk.TypeInt,
 				Optional:     true,
@@ -171,6 +177,7 @@ func resourceBastionHostCreateUpdate(d *pluginsdk.ResourceData, meta interface{}
 	sku := d.Get("sku").(string)
 	fileCopyEnabled := d.Get("file_copy_enabled").(bool)
 	ipConnectEnabled := d.Get("ip_connect_enabled").(bool)
+	kerberosEnabled := d.Get("kerberos_enabled").(bool)
 	shareableLinkEnabled := d.Get("shareable_link_enabled").(bool)
 	tunnelingEnabled := d.Get("tunneling_enabled").(bool)
 
@@ -186,6 +193,10 @@ func resourceBastionHostCreateUpdate(d *pluginsdk.ResourceData, meta interface{}
 		return fmt.Errorf("`ip_connect_enabled` is only supported when `sku` is `Standard`")
 	}
 
+	if kerberosEnabled && sku == string(bastionhosts.BastionHostSkuNameBasic) {
+		return fmt.Errorf("`kerberos_enabled` is only supported when `sku` is `Standard`")
+	}
+
 	if shareableLinkEnabled && sku == string(bastionhosts.BastionHostSkuNameBasic) {
 		return fmt.Errorf("`shareable_link_enabled` is only supported when `sku` is `Standard`")
 	}
@@ -213,6 +224,7 @@ func resourceBastionHostCreateUpdate(d *pluginsdk.ResourceData, meta interface{}
 			DisableCopyPaste:    utils.Bool(!d.Get("copy_paste_enabled").(bool)),
 			EnableFileCopy:      utils.Bool(fileCopyEnabled),
 			EnableIPConnect:     utils.Bool(ipConnectEnabled),
+			EnableKerberos:      utils.Bool(kerberosEnabled),
 			EnableShareableLink: utils.Bool(shareableLinkEnabled),
 			EnableTunneling:     utils.Bool(tunnelingEnabled),
 			IPConfigurations:    expandBastionHostIPConfiguration(d.Get("ip_configuration").([]interface{})),
@@ -270,6 +282,7 @@ func resourceBastionHostRead(d *pluginsdk.ResourceData, meta interface{}) error
 			d.Set("scale_units", props.ScaleUnits)
 			d.Set("file_copy_enabled", props.EnableFileCopy)
 			d.Set("ip_connect_enabled", props.EnableIPConnect)
+			d.Set("kerberos_enabled", props.EnableKerberos)
 			d.Set("shareable_link_enabled", props.EnableShareableLink)
 			d.Set("tunneling_enabled", props.EnableTunneling)
 

internal/services/network/bastion_host_resource_test.go

@@ -224,6 +224,7 @@ resource "azurerm_bastion_host" "test" {
   sku                    = "Standard"
   file_copy_enabled      = true
   ip_connect_enabled     = true
+  kerberos_enabled       = true
   shareable_link_enabled = true
   tunneling_enabled      = true
 

website/docs/r/bastion_host.html.markdown

@@ -82,6 +82,10 @@ The following arguments are supported:
 
 ~> **Note:** `ip_connect_enabled` is only supported when `sku` is `Standard`.
 
+* `kerberos_enabled` - (Optional) Is Kerberos authentication feature enabled for the Bastion Host. Defaults to `false`.
+
+~> **Note:** `kerberos_enabled` is only supported when `sku` is `Standard`.
+
 * `scale_units` - (Optional) The number of scale units with which to provision the Bastion Host. Possible values are between `2` and `50`. Defaults to `2`.
 
 ~> **Note:** `scale_units` only can be changed when `sku` is `Standard`. `scale_units` is always `2` when `sku` is `Basic`.