mirror of
https://github.com/edgelesssys/constellation.git
synced 2024-12-13 18:04:20 -05:00
33 lines
1.3 KiB
Markdown
33 lines
1.3 KiB
Markdown
# Terraform Azure IAM creation
|
|
|
|
This terraform configuration creates the necessary Azure resources that need to be available to host a Constellation cluster.
|
|
|
|
You can create the resources with the following commands:
|
|
|
|
```sh
|
|
mkdir constellation_azure_iam
|
|
cd constellation_azure_iam
|
|
curl --remote-name-all https://raw.githubusercontent.com/edgelesssys/constellation/main/hack/terraform/azure/iam/{main.tf,output.tf,variables.tf,.terraform.lock.hcl}
|
|
terraform init
|
|
terraform apply
|
|
```
|
|
|
|
The following terraform output values are available (with their corresponding keys in the Constellation configuration file):
|
|
|
|
- `subscription_id` (subscription)
|
|
- `tenant_id` (tenant)
|
|
- `uami_id` (userAssignedIdentity)
|
|
|
|
You can either get the profile names from the Terraform output and manually add them to your Constellation configuration file according to our [Documentation](https://docs.edgeless.systems/constellation/getting-started/first-steps).
|
|
Or you can do this with a `yq` command:
|
|
|
|
```sh
|
|
yq -i "
|
|
.provider.azure.subscription = $(terraform output subscription_id) |
|
|
.provider.azure.tenant = $(terraform output tenant_id) |
|
|
.provider.azure.userAssignedIdentity = $(terraform output uami_id) |
|
|
" path/to/constellation-conf.yaml
|
|
```
|
|
|
|
Where `path/to/constellation-conf.yaml` is the path to your Constellation configuration file.
|