Skip to content

Azure-Terraform/terraform-azurerm-kubernetes-aad-pod-identity

Repository files navigation

terraform-azurerm-kubernetes-aad-pod-identity

Introduction

AAD Pod Identity enables Kubernetes applications to access cloud resources securely with Azure Active Directory. This module will install/configure the helm chart in AKS.

Requirements

Name Version
terraform >= 0.14.8
azurerm >= 2.51.0
helm >= 2.0.3

Providers

Name Version
azurerm >= 2.51.0
helm >= 2.0.3

Inputs

Name Description Type Default Required
additional_scopes aad pod identity scopes residing outside of AKS MC_resource_group (resource group id or identity id would be a common input) map(string) {} no
additional_yaml_config n/a string "" no
aks_identity Service principal client_id or kubelet identity client_id. See here. string n/a yes
aks_node_resource_group resource group created by AKS string n/a yes
create_namespace Create the namespace for the identity if it doesn't yet exist bool true no
enable_kubenet_plugin Enable feature when AKS cluster uses Kubenet network plugin, leave default if use AzureCNI bool false no
helm_chart_version Azure AD pod identity helm chart version string "3.0.3" no
identities Azure identities to be configured
map(object({
namespace = string
name = string
client_id = string
resource_id = string
}))
null no
install_crds Install CRDs bool true no

Outputs

No output.