README.md

truefoundry-azure-platform-features

Requirements

Name	Version
terraform	>= 1.4
azuread	~> 3.0
azurerm	~> 3.107

Providers

Name	Version
azuread	~> 3.0
azurerm	~> 3.107

Modules

No modules.

Resources

Name	Type
azuread_application.truefoundry_platform_features_application	resource
azuread_service_principal.truefoundry_platform_features_service_principal	resource
azuread_service_principal_password.truefoundry_platform_features_service_principal_password	resource
azurerm_container_registry.truefoundry_container_registry	resource
azurerm_role_assignment.truefoundry_diagnostic_settings_read_role_assignment	resource
azurerm_role_assignment.truefoundry_reader_role_assignment	resource
azurerm_storage_account.truefoundry_platform_storage_account	resource
azurerm_storage_container.truefoundry_platform_container	resource

Inputs

Name	Description	Type	Default	Required
blob_container_enable_override	Enable overriding the name of container. This will only be used if feature_blob_storage_enabled is true. You need to pass container_override_name to pass the container name	bool	false	no
blob_container_override_name	Container name. Only used if container_enable_override is true	string	""	no
blob_storage_account_account_tier	Account tier of the storage account	string	"Standard"	no
blob_storage_account_enable_override	Enable overriding the name of storage account. This will only be used if feature_blob_storage_enabled is true. You need to pass blob_storage_account_override_name to pass the storage account name	bool	false	no
blob_storage_account_exposed_headers	List of exposed headers for CORS origins of storage account	list(string)	[ "Etag" ]	no
blob_storage_account_override_name	Storage account name. Only used if blob_storage_account_enable_override is true	string	""	no
blob_storage_account_replication_type	Replication type of storage account	string	"GRS"	no
blob_storage_cors_allowed_headers	List of allowed headers for CORS of storage account	list(string)	[ "*" ]	no
blob_storage_cors_allowed_maxage	List of allowed maxage for CORS of storage account	number	3000	no
blob_storage_cors_allowed_methods	List of allowed methods for CORS of storage account	list(string)	[ "GET", "POST", "PUT" ]	no
blob_storage_cors_allowed_origins	List of allowed origin for CORS of storage account	list(string)	[ "*" ]	no
cluster_id	ID of the AKS cluster	string	n/a	yes
cluster_integration_azuread_application_enable_override	Enable overriding the name of azuread application. This will only be used if feature_cluster_integration_azuread_application_enabled is true. You need to pass cluster_integration_azuread_application_override_name to pass the azuread application name	bool	false	no
cluster_integration_azuread_application_override_name	Azuread application name. Only used if cluster_integration_azuread_application_enable_override is true	string	""	no
cluster_integration_diagnostic_settings_role	Role that will be assigned to the service principal on AKS cluster for diagnostic settings	string	"Monitoring Reader"	no
cluster_integration_service_principal_password_expiry_end_date	End date post which service principal password would expire	string	"2124-02-12T09:42:53Z"	no
cluster_integration_service_principal_role	Role that will be assigned to the service principal on AKS cluster	string	"Reader"	no
cluster_integration_sign_in_audience	sign_in_audience of the cluster integration	string	"AzureADMyOrg"	no
cluster_name	Name of the AKS cluster	string	n/a	yes
container_registry_admin_enabled	Enable admin for the docker registry	bool	true	no
container_registry_enable_override	Enable overriding the name of container registry. This will only be used if feature_container_registry_enabled is true. You need to pass container_registry_override_name to pass the container registry name	bool	false	no
container_registry_override_name	Container registry name. Only used if container_registry_enable_override is true	string	""	no
container_registry_public_network_access_enabled	Whether public network access is allowed for the container registry	bool	true	no
container_registry_sku	SKU of the docker registry	string	"Standard"	no
feature_blob_storage_enabled	Enable blob storage feature in the platform	bool	true	no
feature_cluster_integration_enabled	Enable the support of cluster integration	bool	true	no
feature_container_registry_enabled	Enable docker registry feature in the platform	bool	true	no
location	Location of the storage account and container registry. This should be kept similar to resource group for ideal performance.	string	n/a	yes
resource_group_name	Name of the resource group	string	n/a	yes
tags	A map of tags to add to all resources	map(string)	{}	no

Outputs

Name	Description
truefoundry_blob_container_id	Storage account container ID
truefoundry_blob_storage_account_enabled	Flag to enable blob storage account
truefoundry_blob_storage_account_id	Storage account id
truefoundry_blob_storage_account_primary_blob_host	Storage account primary blob host
truefoundry_blob_storage_account_primary_connection_string	Storage account primary connection string
truefoundry_blob_storage_account_primary_location	Storage account primary location
truefoundry_blob_storage_account_primary_web_host	Storage account primary web host url
truefoundry_blob_storage_root_url	Storage account root URL for blob storage
truefoundry_cluster_integrations_azuread_application_client_id	Azure AD application client ID
truefoundry_cluster_integrations_azuread_application_id	Azure AD application ID
truefoundry_cluster_integrations_azuread_application_name	n/a
truefoundry_cluster_integrations_enabled	Flag to enable cluster integrations
truefoundry_cluster_integrations_service_principal_name	n/a
truefoundry_cluster_integrations_service_principal_password	n/a
truefoundry_cluster_integrations_service_principal_tenant_id	n/a
truefoundry_container_registry_admin_password	Container registry admin password
truefoundry_container_registry_admin_username	Container registry admin username
truefoundry_container_registry_enabled	Flag to enable container registry
truefoundry_container_registry_id	Container registry ID
truefoundry_container_registry_login_server	Container registry login server url