fix: add validation to prompt ansible vault password when SCC workload protection instance is detected (#792)

surajsbharadwaj · web-flow · commit 59d410e5fb35 · 2025-03-18T20:25:38.000+01:00
diff --git a/modules/pi-sap-system-type1/variables.tf b/modules/pi-sap-system-type1/variables.tf
@@ -236,4 +236,9 @@ variable "scc_wp_instance" {
     api_endpoint       = "",
     ingestion_endpoint = ""
   }
+
+  validation {
+    condition     = var.scc_wp_instance.guid == "" || (var.ansible_vault_password != "" && var.ansible_vault_password != null)
+    error_message = "Ansible vault password must not be empty or null when SCC workload instance is enabled. Value must be set for ansible_vault_password variable."
+  }
 }

Original file line number	Diff line number	Diff line change
`@@ -236,4 +236,9 @@ variable "scc_wp_instance" {`
`236`	`236`	`api_endpoint = "",`
`237`	`237`	`ingestion_endpoint = ""`
`238`	`238`	`}`
	`239`	`+`
	`240`	`+ validation {`
	`241`	`+ condition = var.scc_wp_instance.guid == "" \|\| (var.ansible_vault_password != "" && var.ansible_vault_password != null)`
	`242`	`+ error_message = "Ansible vault password must not be empty or null when SCC workload instance is enabled. Value must be set for ansible_vault_password variable."`
	`243`	`+ }`
`239`	`244`	`}`