Add variable azure_rbac_enabled

avinor · Jun 16, 2023 · 6122d24 · 6122d24
1 parent 8b71471
commit 6122d24
Show file tree

Hide file tree

Showing 4 changed files with 24 additions and 15 deletions.
diff --git a/.terraform.lock.hcl b/.terraform.lock.hcl
diff --git a/examples/rbac/main.tf b/examples/rbac/main.tf
@@ -6,6 +6,7 @@ module "rbac" {
   location            = "norwayeast"
   service_cidr        = "10.241.0.0/24"
   kubernetes_version  = "1.18.14"
+  azure_rbac_enabled  = true
 
   agent_pools = [
     {

diff --git a/main.tf b/main.tf
@@ -7,7 +7,7 @@ terraform {
     }
     azurerm = {
       source  = "hashicorp/azurerm"
-      version = "~> 3.57.0"
+      version = "~> 3.61.0"
     }
     azuread = {
       source  = "hashicorp/azuread"
@@ -173,6 +173,7 @@ resource "azurerm_kubernetes_cluster" "aks" {
   azure_active_directory_role_based_access_control {
     managed                = true
     admin_group_object_ids = var.cluster_admins
+    azure_rbac_enabled     = var.azure_rbac_enabled
   }
 
   identity {

diff --git a/variables.tf b/variables.tf
@@ -121,6 +121,13 @@ variable "azure_policy_enabled" {
   default     = true
 }
 
+variable "azure_rbac_enabled" {
+  description = "Enable Azure RBAC to control authorization"
+  type        = bool
+  default     = false
+}
+
+
 variable "oms_agent_log_analytics_workspace_id" {
   description = "The ID of the Log Analytics Workspace which the OMS Agent should send data to. if value is null, no agent is deployed."
   type        = string