mirror of
https://github.com/edgelesssys/constellation.git
synced 2024-12-13 01:44:22 -05:00
.. | ||
.terraform.lock.hcl | ||
main.tf | ||
outputs.tf | ||
README.md | ||
variables.tf |
Terraform Azure IAM creation
This terraform configuration creates the necessary Azure resources that need to be available to host a Constellation cluster.
You can create the resources with the following commands:
mkdir constellation_azure_iam
cd constellation_azure_iam
curl --remote-name-all https://raw.githubusercontent.com/edgelesssys/constellation/main/hack/terraform/azure/iam/{main.tf,output.tf,variables.tf,.terraform.lock.hcl}
terraform init
terraform apply
The following terraform output values are available (with their corresponding keys in the Constellation configuration file):
subscription_id
(subscription)tenant_id
(tenant)uami_id
(userAssignedIdentity)
You can either get the profile names from the Terraform output and manually add them to your Constellation configuration file according to our Documentation.
Or you can do this with a yq
command:
yq -i "
.provider.azure.subscription = $(terraform output subscription_id) |
.provider.azure.tenant = $(terraform output tenant_id) |
.provider.azure.userAssignedIdentity = $(terraform output uami_id) |
" path/to/constellation-conf.yaml
Where path/to/constellation-conf.yaml
is the path to your Constellation configuration file.