File tree Expand file tree Collapse file tree 3 files changed +19
-19
lines changed Expand file tree Collapse file tree 3 files changed +19
-19
lines changed Original file line number Diff line number Diff line change @@ -135,21 +135,6 @@ Type: `string`
135
135
136
136
The following input variables are optional (have default values):
137
137
138
- ### add\_ identity\_ to\_ group
139
-
140
- Description: The name of a group which is assigned to appropriate roles in the subscription to manage resources that are required by the AKS.
141
- Setting this to a non empty string will add the AKS managed identity to this group.
142
-
143
- You need the following API permissions (with admin consent) on a service prinicpal to make this work:
144
-
145
- * Directory.Read.All
146
- * Group.Read.All
147
- * Group.ReadWrite.All
148
-
149
- Type: ` string `
150
-
151
- Default: ` "" `
152
-
153
138
### availability\_ zones
154
139
155
140
Description: availability zones to spread the cluster nodes across, if omitted, only one avilability zone is used
@@ -190,6 +175,21 @@ Type: `string`
190
175
191
176
Default: ` "basic" `
192
177
178
+ ### managed\_ identity\_ security\_ group
179
+
180
+ Description: The name of a group which is assigned to appropriate roles in the subscription to manage resources that are required by the AKS.
181
+ Setting this to a non empty string will add the AKS managed identity to this group.
182
+
183
+ You need the following API permissions (with admin consent) on a service prinicpal to make this work:
184
+
185
+ * Directory.Read.All
186
+ * Group.Read.All
187
+ * Group.ReadWrite.All
188
+
189
+ Type: ` string `
190
+
191
+ Default: ` "" `
192
+
193
193
### max\_ pods
194
194
195
195
Description: Amount of pods allowed on each node (be aware that kubernetes system pods are also counted
Original file line number Diff line number Diff line change 1
1
# Assign the k8s managed identity to a security group
2
2
3
3
data "azuread_group" "ownersgroup" {
4
- count = var. add_identity_to_group == " " ? 0 : 1
5
- display_name = var. add_identity_to_group
4
+ count = var. managed_identity_security_group == " " ? 0 : 1
5
+ display_name = var. managed_identity_security_group
6
6
}
7
7
8
8
resource "azuread_group_member" "k8smember" {
9
- count = var. add_identity_to_group == " " ? 0 : 1
9
+ count = var. managed_identity_security_group == " " ? 0 : 1
10
10
group_object_id = data. azuread_group . ownersgroup [0 ]. object_id
11
11
member_object_id = azurerm_kubernetes_cluster. k8s . identity [0 ]. principal_id
12
12
}
Original file line number Diff line number Diff line change @@ -167,7 +167,7 @@ variable "api_server_ip_ranges" {
167
167
description = " The IP ranges to allow for incoming traffic to the server nodes. To disable the limitation, set an empty list as value."
168
168
}
169
169
170
- variable "add_identity_to_group " {
170
+ variable "managed_identity_security_group " {
171
171
type = string
172
172
default = " "
173
173
description = <<- EOF
You can’t perform that action at this time.
0 commit comments