feat: policy definition retries

Azure · Dec 19, 2024 · 6c35c81 · 6c35c81
1 parent 30e1d38
commit 6c35c81
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 1 deletion.
diff --git a/templates/platform_landing_zone/modules/management_groups/locals.tf b/templates/platform_landing_zone/modules/management_groups/locals.tf
@@ -13,4 +13,12 @@ locals {
       overrides               = try(policy_assignment_value.overrides, null)
     } }
   } }
+  default_retries = {
+    policy_definitions = {
+      error_message_regex = ["AuthorizationFailed"]
+    }
+    policy_set_definitions = {
+      error_message_regex = ["AuthorizationFailed"]
+    }
+  }
 }
diff --git a/templates/platform_landing_zone/modules/management_groups/main.tf b/templates/platform_landing_zone/modules/management_groups/main.tf
@@ -10,7 +10,7 @@ module "management_groups" {
   enable_telemetry                    = var.enable_telemetry
   management_group_hierarchy_settings = try(var.management_group_settings.management_group_hierarchy_settings, null)
   partner_id                          = try(var.management_group_settings.partner_id, null)
-  retries                             = try(var.management_group_settings.retries, {})
+  retries                             = try(var.management_group_settings.retries, local.default_retries)
   subscription_placement              = try(var.management_group_settings.subscription_placement, {})
   timeouts                            = try(var.management_group_settings.timeouts, {})
   dependencies                        = var.dependencies