https://github.com/avinor/terraform-azuread-service-principal

Terraform module to create service principal credentials and assign it access to resources
https://github.com/avinor/terraform-azuread-service-principal

azure service-principals terraform terraform-module

Last synced: 3 months ago
JSON representation

Terraform module to create service principal credentials and assign it access to resources

• Host: GitHub
• URL: https://github.com/avinor/terraform-azuread-service-principal
• Owner: avinor
• License: apache-2.0
• Created: 2019-08-08T12:34:37.000Z (about 5 years ago)
• Default Branch: master
• Last Pushed: 2024-06-17T09:44:40.000Z (5 months ago)
• Last Synced: 2024-06-22T22:04:01.672Z (5 months ago)
• Topics: azure, service-principals, terraform, terraform-module
• Language: HCL
• Homepage:
• Size: 85 KB
• Stars: 8
• Watchers: 4
• Forks: 5
• Open Issues: 2
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

• jimsghstars - avinor/terraform-azuread-service-principal - Terraform module to create service principal credentials and assign it access to resources (HCL)

README

        
# Service Principal

Module to create a service principal and assign it certain roles. This used to be `terraform-azurerm-kubernetes-service-principal` but is now made more generic so it can create any service principals. It will output the application id and password that can be used for input in other modules.

This module requires elevated access to be able to create the application in AzureAD and assign roles to resources. It is therefore not recommended to be run as any CI/CD pipeline, but instead manually before running any automated process. The output can still be used by reading remote state.

## Usage

Examples use [tau](https://github.com/avinor/tau).

```terraform

module {

    source = "avinor/service-principal/azurerm"

    version = "1.0.0"

}

inputs {

    name = "simple-sp"

    end_date = "2020-01-01T00:00:00Z"

    assignments = [

        {

            scope = "/subscriptions/xxxx/"

            role_definition_name = "Contributor"

        },

    ]

}

```