Skip to content

Commit 3af5094

Browse files
committed
fix: Switch variable name
1 parent 79ed5c0 commit 3af5094

File tree

3 files changed

+19
-19
lines changed

3 files changed

+19
-19
lines changed

README.md

Lines changed: 15 additions & 15 deletions
Original file line numberDiff line numberDiff line change
@@ -135,21 +135,6 @@ Type: `string`
135135

136136
The following input variables are optional (have default values):
137137

138-
### add\_identity\_to\_group
139-
140-
Description: The name of a group which is assigned to appropriate roles in the subscription to manage resources that are required by the AKS.
141-
Setting this to a non empty string will add the AKS managed identity to this group.
142-
143-
You need the following API permissions (with admin consent) on a service prinicpal to make this work:
144-
145-
* Directory.Read.All
146-
* Group.Read.All
147-
* Group.ReadWrite.All
148-
149-
Type: `string`
150-
151-
Default: `""`
152-
153138
### availability\_zones
154139

155140
Description: availability zones to spread the cluster nodes across, if omitted, only one avilability zone is used
@@ -190,6 +175,21 @@ Type: `string`
190175

191176
Default: `"basic"`
192177

178+
### managed\_identity\_security\_group
179+
180+
Description: The name of a group which is assigned to appropriate roles in the subscription to manage resources that are required by the AKS.
181+
Setting this to a non empty string will add the AKS managed identity to this group.
182+
183+
You need the following API permissions (with admin consent) on a service prinicpal to make this work:
184+
185+
* Directory.Read.All
186+
* Group.Read.All
187+
* Group.ReadWrite.All
188+
189+
Type: `string`
190+
191+
Default: `""`
192+
193193
### max\_pods
194194

195195
Description: Amount of pods allowed on each node (be aware that kubernetes system pods are also counted

managed_identity.tf

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,12 +1,12 @@
11
# Assign the k8s managed identity to a security group
22

33
data "azuread_group" "ownersgroup" {
4-
count = var.add_identity_to_group == "" ? 0 : 1
5-
display_name = var.add_identity_to_group
4+
count = var.managed_identity_security_group == "" ? 0 : 1
5+
display_name = var.managed_identity_security_group
66
}
77

88
resource "azuread_group_member" "k8smember" {
9-
count = var.add_identity_to_group == "" ? 0 : 1
9+
count = var.managed_identity_security_group == "" ? 0 : 1
1010
group_object_id = data.azuread_group.ownersgroup[0].object_id
1111
member_object_id = azurerm_kubernetes_cluster.k8s.identity[0].principal_id
1212
}

vars.tf

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -167,7 +167,7 @@ variable "api_server_ip_ranges" {
167167
description = "The IP ranges to allow for incoming traffic to the server nodes. To disable the limitation, set an empty list as value."
168168
}
169169

170-
variable "add_identity_to_group" {
170+
variable "managed_identity_security_group" {
171171
type = string
172172
default = ""
173173
description = <<-EOF

0 commit comments

Comments
 (0)