Skip to content

Latest commit

 

History

History
59 lines (42 loc) · 4.38 KB

README.md

File metadata and controls

59 lines (42 loc) · 4.38 KB

Terraform Module for Azure AKS Managed Identity for CDW

This module contains resource files and example variable definition files for creation of the Azure Kubernetes Service (AKS) managed identity required for the Cloudera Data Warehouse (CDW) service. This requirement is described in this section of the CDW documentation.

Usage

The examples directory has example Azure AKS Managed Identity creation:

  • ex01-aks_managed_identity uses a set of inputs for the module.

An example terraform.tfvars.sample values file is included to show input variable values.

Requirements

Name Version
terraform >= 1.5.7
azurerm >= 4.0.0

Providers

Name Version
azurerm >= 4.0.0

Modules

No modules.

Resources

Name Type
azurerm_role_assignment.cdp_cdw_aks_cred_storage_assign resource
azurerm_role_assignment.cdp_cdw_aks_cred_subscription_assign resource
azurerm_user_assigned_identity.cdp_cdw_aks_cred resource
azurerm_storage_account.data_storage_account data source
azurerm_subscription.current data source

Inputs

Name Description Type Default Required
azure_aks_credential_managed_identity_name Name of the Managed Identity for the AKS Credential string n/a yes
azure_data_storage_account Name of the Azure Storage Account used for CDP Data string n/a yes
azure_resource_group_name Azrue Resource Group for CDP environment. string n/a yes
azure_region Region which Cloud resources will be created string null no
cdw_aks_cred_storage_role_assignments List of Role Assignments for the AKS Credential at Data Storage Account scope. 
list(object({
    role        = string
    description = optional(string)
    })
  )
 
[
  {
    "description": "Assign Storage Blob Data Owner assignment to CDP Data Storage Container to AKS Credential",
    "role": "Storage Blob Data Owner"
  }
]
 no
cdw_aks_cred_subscription_role_assignments List of Role Assignments for the AKS Credential at subscription scope 
list(object({
    role        = string
    description = optional(string)
    })
  )
 
[
  {
    "description": "Assign Contributor Role to AKS Credential",
    "role": "Contributor"
  }
]
 no
tags Tags applied to provised resources map(any) null no

Outputs

Name Description
azure_aks_managed_identity_id ID of the Azure AKS managed identity
azure_subscription_id Subscription ID where the Azure AKS managed identity is created