Skip to content

schubergphilis/terraform-azure-mcaf-core

Repository files navigation

terraform-azure-mcaf-core

Terraform module to create the Core component of each workload, currently only implements Terraform-azure-mcaf-key-vault

Requirements

Name Version
terraform >= 1.7
azurerm >= 4

Providers

Name Version
azurerm >= 4

Modules

Name Source Version
keyvault_with_cmk github.com/schubergphilis/terraform-azure-mcaf-key-vault.git v0.3.1

Resources

Name Type
azurerm_resource_group.this resource
azurerm_client_config.current data source

Inputs

Name Description Type Default Required
key_vault n/a
object({
name = string
enabled_for_disk_encryption = optional(bool, false)
enabled_for_deployment = optional(bool, false)
enabled_for_template_deployment = optional(bool, false)
enable_rbac_authorization = optional(bool, true)
purge_protection = optional(bool, true)
soft_delete_retention_days = optional(number, 30)
sku = optional(string, "standard")
ip_rules = optional(list(string), [])
subnet_ids = optional(list(string), [])
network_bypass = optional(string, "None")
cmk_keys_create = optional(bool, true)
cmkrsa_key_name = optional(string, "cmkrsa")
cmkec_key_name = optional(string, "cmkec")
cmk_rotation_period = optional(string, "P18M")
cmk_expiry_period = optional(string, "P2Y")
cmk_notify_period = optional(string, "P30D")
})
n/a yes
location Location of the resources to create string n/a yes
resource_group The name of the resource group in which to create the resources.
object({
name = string
})
{
"name": null
}
no
tags A map of tags to assign to the resource. map(string) {} no

Outputs

Name Description
cmkrsa_id CMK RSA Key ID
cmkrsa_key_name CMK RSA Key Name
cmkrsa_resource_resource_id CMK RSA Key Resource ID
cmkrsa_resource_versionless_id CMK RSA Key ID
cmkrsa_verionsless_id CMK RSA Key ID
key_vault_id n/a
key_vault_name n/a
key_vault_uri n/a