Add vars to azure/mysql_flexible_server and azure/mysql_flexible_serv…

…er_public

modules/azure/mysql_flexible_server/main.tf

@@ -68,6 +68,16 @@ resource "azurerm_mysql_flexible_server_configuration" "mysql_flexible_server_co
   value               = var.slow_query_log
 }
 
+resource "azurerm_mysql_flexible_server_active_directory_administrator" "entra_admin" {
+  for_each = var.entra_administrator_enabled == false ? [] : [1]
+
+  server_id   = azurerm_mysql_flexible_server.mysql_flexible_server.id
+  identity_id = var.entra_identity_id
+  login       = var.entra_login
+  object_id   = var.entra_object_id
+  tenant_id   = var.entra_tenant_id
+}
+
 data "azurerm_monitor_diagnostic_categories" "diagnostic_categories" {
   count       = var.log_analytics_workspace_id == null ? 0 : 1
   resource_id = azurerm_mysql_flexible_server.mysql_flexible_server.id

modules/azure/mysql_flexible_server/variables.tf

@@ -81,6 +81,36 @@ variable "mysql_admin_username" {
   description = "The administrator login username for the mysql server."
 }
 
+variable "entra_administrator_enabled" {
+  type        = bool
+  description = "Specifies whether or not Entra authentication is enabled for this MySQL Server"
+  default     = false
+}
+
+variable "entra_identity_id" {
+  type        = string
+  description = "The Entra identity id for the mysql server."
+  default     = null
+}
+
+variable "entra_login" {
+  type        = string
+  description = "The Entra administrator login username for the mysql server."
+  default     = null
+}
+
+variable "entra_object_id" {
+  type        = string
+  description = "The Entra object id for the mysql server."
+  default     = null
+}
+
+variable "entra_tenant_id" {
+  type        = string
+  description = "The Entra tenant id for the mysql server."
+  default     = null
+}
+
 variable "password_keeper" {
   type        = map(string)
   description = "Random map of strings, when changed the mysql admin password will rotate."

modules/azure/mysql_flexible_server_public/main.tf

@@ -45,6 +45,15 @@ resource "azurerm_mysql_flexible_server" "mysql_flexible_server" {
     size_gb           = var.server_storage_max
   }
 
+  dynamic "identity" {
+    for_each = var.entra_administrator_enabled == false ? [] : [1]
+
+    content {
+      type         = "UserAssigned"
+      identity_ids = [var.entra_identity_id]
+    }
+  }
+
   lifecycle {
     ignore_changes  = [zone]
     prevent_destroy = true
@@ -66,6 +75,16 @@ resource "azurerm_mysql_flexible_server_configuration" "mysql_flexible_server_co
   value               = var.slow_query_log
 }
 
+resource "azurerm_mysql_flexible_server_active_directory_administrator" "entra_admin" {
+  for_each = var.entra_administrator_enabled == false ? [] : [1]
+
+  server_id   = azurerm_mysql_flexible_server.mysql_flexible_server.id
+  identity_id = var.entra_identity_id
+  login       = var.entra_login
+  object_id   = var.entra_object_id
+  tenant_id   = var.entra_tenant_id
+}
+
 data "azurerm_monitor_diagnostic_categories" "diagnostic_categories" {
   count       = var.log_analytics_workspace_id == null ? 0 : 1
   resource_id = azurerm_mysql_flexible_server.mysql_flexible_server.id

modules/azure/mysql_flexible_server_public/variables.tf

@@ -70,6 +70,36 @@ variable "admin_username" {
   description = "The administrator login username for the mysql server."
 }
 
+variable "entra_administrator_enabled" {
+  type        = bool
+  description = "Specifies whether or not Entra authentication is enabled for this MySQL Server"
+  default     = false
+}
+
+variable "entra_identity_id" {
+  type        = string
+  description = "The Entra identity id for the mysql server."
+  default     = null
+}
+
+variable "entra_login" {
+  type        = string
+  description = "The Entra administrator login username for the mysql server."
+  default     = null
+}
+
+variable "entra_object_id" {
+  type        = string
+  description = "The Entra object id for the mysql server."
+  default     = null
+}
+
+variable "entra_tenant_id" {
+  type        = string
+  description = "The Entra tenant id for the mysql server."
+  default     = null
+}
+
 variable "password_keeper" {
   type        = map(string)
   description = "Random map of strings, when changed the mysql admin password will rotate."