https://github.com/lukapetrovic-git/ansible-role-azure-ad-app
Ansible role to create Azure AD App Registrations/Service Principals + create/rotate Azure AD App secrets
https://github.com/lukapetrovic-git/ansible-role-azure-ad-app
azure azure-active-directory azure-ad azure-app-registration azure-key-vault azure-service-principal
Last synced: 3 months ago
JSON representation
Ansible role to create Azure AD App Registrations/Service Principals + create/rotate Azure AD App secrets
- Host: GitHub
- URL: https://github.com/lukapetrovic-git/ansible-role-azure-ad-app
- Owner: lukapetrovic-git
- License: mit
- Created: 2024-06-07T11:13:11.000Z (12 months ago)
- Default Branch: main
- Last Pushed: 2024-10-07T13:05:09.000Z (8 months ago)
- Last Synced: 2025-01-01T04:52:47.450Z (5 months ago)
- Topics: azure, azure-active-directory, azure-ad, azure-app-registration, azure-key-vault, azure-service-principal
- Homepage: https://galaxy.ansible.com/ui/standalone/roles/lukapetrovic-git/azure_ad_app/
- Size: 18.6 KB
- Stars: 0
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# ansible-role-azure-ad-app
Ansible role to manage Azure AD App Registrations and associated Service Principals
What the role does:
- Create an Azure AD App Registration
- Create an associated Service Principal (optional)
- Create/Manage client secrets for the Azure AD App Registration (optional):
- Create new client secret if there are none
- Create new client secret if existing secret/secrets are expiring soon
- Remove already expired client secrets
- Create Key Vault Secret containing the client secret that was created and update it (optional)
- Assign the Service Principal Azure RBAC Roles
# Notes
- Designed to be run on a single server (I prefer Ansible Controller), not intended to be run on multiple servers in parallel.
- Is opinionated about App Registration display names, will not allow you to create an App Registration if another exists with the same name, even though it is possible in Azure.
# Requirements
- Ansible 2.10 or later
- azure.azcollection 2.4.0
# Role Variables
All settable variables with explanations and links are located in the defaults/main.yml
## Future plans
- Create Action to publish to Ansible Galaxy
- Write Molecule tests
- Create Action to run Molecule tests
- Create CI
- Add examples to readme
- Add option to delete/clean up all created resources