azure-auth-method
devops-rob/azure-auth-method/vault
This Terraform module enables and configures teh Azure auth method in HashiCorp Vault to enable workload authentication from Azure to HashiCorp Vault.
Azure Auth Method for HashiCorp Vault This Terraform module enables and configures teh Azure auth method in HashiCorp Vault to enable workload authentication from Azure to HashiCorp Vault. Pre-requisites This module requires an Azure application registration, with a linked Service Principal, and a role assignment containing the following permissions: - Microsoft.Compute/virtualMachines//read - Microsoft.Compute/virtualMachineScaleSets//read An Azure application registration can be provisioned using the Azure AD Application Registration for HashiCorp Vault Terraform Module. Example usage ``hcl provider "vault" { address = "http://localhost:8200" token = var.token } provider "azuread" {} provider "azurerm" { features {} } variable "token" {} data "azuread_client_config" "current" {} data "az
| Name | Type | Description | Default |
|---|---|---|---|
| client_secret | string | The client secret for credentials to query the Azure APIs. | required |
| tenant_id | string | The tenant id for the Azure Active Directory organization. | required |
| azuread_application_url | string | The configured URL for the application registered in Azure Active Directory. | required |
| client_id | string | The client id for credentials to query the Azure APIs. | required |
| max_lease_ttl | string | Specifies the maximum time-to-live. If set, this overrides the global default. M | "9000s" |
| listing_visibility | string | Specifies whether to show this mount in the UI-specific listing endpoint. Valid | "unauth" |
| resource | string | The configured URL for the application registered in Azure Active Directory. | "https://management.azure.com/" |
path — The mount path of the Azure auth method.