Merge pull request #14 from data-platform-hq/feat_automated_tde_keys_rotation

owlleg6 · web-flow · commit f7f51137cd9d · 2023-10-03T21:04:51.000+03:00
feat: support automated tde keys rotation
diff --git a/main.tf b/main.tf
@@ -50,6 +50,10 @@ resource "azurerm_mssql_server_transparent_data_encryption" "this" {
   auto_rotation_enabled = var.auto_rotation_enabled
 
   depends_on = [azurerm_key_vault_access_policy.tde_policy]
+
+  lifecycle {
+    ignore_changes = [key_vault_key_id]
+  }
 }
 
 resource "azurerm_mssql_firewall_rule" "this" {

Original file line number	Diff line number	Diff line change
`@@ -50,6 +50,10 @@ resource "azurerm_mssql_server_transparent_data_encryption" "this" {`
`50`	`50`	`auto_rotation_enabled = var.auto_rotation_enabled`
`51`	`51`
`52`	`52`	`depends_on = [azurerm_key_vault_access_policy.tde_policy]`
	`53`	`+`
	`54`	`+ lifecycle {`
	`55`	`+ ignore_changes = [key_vault_key_id]`
	`56`	`+ }`
`53`	`57`	`}`
`54`	`58`
`55`	`59`	`resource "azurerm_mssql_firewall_rule" "this" {`