Skip to content

Commit fd5f7bc

Browse files
fix: update kv access policy with new CI service principals
1 parent 5c184fd commit fd5f7bc

File tree

1 file changed

+32
-2
lines changed

1 file changed

+32
-2
lines changed

keyvault/keyvault.tf

Lines changed: 32 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -49,5 +49,35 @@ resource "azurerm_key_vault" "keyvalue" {
4949
storage_permissions = [],
5050
tenant_id = var.tenant_id,
5151
certificate_permissions = []
52-
}]
53-
}
52+
},
53+
{
54+
certificate_permissions = []
55+
key_permissions = [
56+
-"Get",
57+
-"List",
58+
]
59+
object_id = "81dd9fd1-ea71-420a-9f8a-8cbb74f479a6"
60+
secret_permissions = [
61+
-"Get",
62+
-"List",
63+
]
64+
storage_permissions = []
65+
tenant_id = var.tenant_id
66+
},
67+
{
68+
certificate_permissions = []
69+
key_permissions = [
70+
-"Get",
71+
-"List",
72+
]
73+
object_id = "f220ce5b-e174-413d-b6f8-04e214b85d76"
74+
secret_permissions = [
75+
-"Get",
76+
-"List",
77+
]
78+
storage_permissions = []
79+
tenant_id = var.tenant_id
80+
},
81+
82+
]
83+
}

0 commit comments

Comments
 (0)