terraform-github-repo-oidc-connection-azuread

Terraform Module for deploying GitHub OIDC Connection to Azure via AzureAD

Requirements

Name	Version
terraform	>= 1.3.0
azuread	>= 2.31.0
github	>= 5.13.0

Providers

Name	Version
azuread	2.33.0
github	5.16.0

Modules

No modules.

Resources

Name	Type
azuread_application.github_oidc_app	resource
azuread_application_federated_identity_credential.pull_request	resource
azuread_application_federated_identity_credential.repo_branches	resource
azuread_application_federated_identity_credential.repo_environments	resource
azuread_application_federated_identity_credential.repo_tags	resource
azuread_service_principal.github_oidc_app	resource
github_actions_environment_secret.environment_client_id	resource
github_actions_environment_secret.environment_subscription_id	resource
github_actions_secret.repo_client_id	resource
github_actions_secret.repo_subscription_id	resource
github_repository_environment.azure_environments	resource
azuread_application_published_app_ids.well_known	data source
azuread_service_principal.well_known	data source
github_organization.current	data source
github_repository.repos	data source

Inputs

Name	Description	Type	Default	Required
connection_name	The name of the connection.	string	n/a	yes
github_organization	The name of the GitHub organization to configure for use with the connection.	string	n/a	yes
github_repos	The list of GitHub repositories to configure for use with the connection.	list(object({ repository_name = string branch_names = optional(list(string), []) environment_names = optional(list(string), []) create_environments = bool enable_pull_requests = bool tag_names = optional(list(string), []) }))	n/a	yes
subscription_id	The Azure Subscription ID to configure for use with the connection.	string	n/a	yes
well_known_application_permissions	The list of well-known application permissions to configure for use with the connection.	list(object({ name = string permissions = list(object({ name = string type = string })) }))	[]	no

Outputs

Name	Description
connection_sp_client_id	The client ID of the service principal for the connection.
connection_sp_object_id	The object ID of the service principal for the connection.
connection_subscription_id	The default subscription ID for the connection.