Storage Entra ID access (#117)

* Update dependencies * Configure Entra ID auth where possible
geekzter · Jun 7, 2024 · 109a80a · 109a80a
1 parent 334dbc5
commit 109a80a
Show file tree

Hide file tree

Showing 3 changed files with 99 additions and 93 deletions.
diff --git a/scripts/identity b/scripts/identity
diff --git a/terraform/.terraform.lock.hcl b/terraform/.terraform.lock.hcl
diff --git a/terraform/storage.tf b/terraform/storage.tf
@@ -6,7 +6,9 @@ resource azurerm_storage_account diagnostics {
   account_tier                 = "Standard"
   account_replication_type     = "LRS"
   allow_nested_items_to_be_public = false
+  default_to_oauth_authentication = true
   enable_https_traffic_only    = true
+  shared_access_key_enabled    = true
 
   tags                         = local.tags
 }
@@ -90,7 +92,9 @@ resource azurerm_storage_account automation_storage {
   account_tier                 = "Standard"
   account_replication_type     = "LRS"
   allow_nested_items_to_be_public = false
+  default_to_oauth_authentication = true
   enable_https_traffic_only    = true
+  shared_access_key_enabled    = false
 
   tags                         = local.tags
 }
@@ -173,7 +177,9 @@ resource azurerm_storage_account share {
   account_kind                 = "FileStorage"
   account_tier                 = "Premium"
   account_replication_type     = "LRS"
+  default_to_oauth_authentication = true
   enable_https_traffic_only    = false # Needs to be off for NFS
+  shared_access_key_enabled    = true # Azire Files Share does not support Entra ID AuthN yet
 
   tags                         = local.tags
+1 −0		.gitignore
+6 −5		README.md
+94 −0		scripts/add_app_itsm_information.ps1
+187 −0		scripts/azure-devops/tf_create_azurerm_service_connection.ps1
+22 −0		scripts/functions.ps1
+26 −26		terraform/azure-devops/create-service-connection/.terraform.lock.hcl
+9 −0		terraform/azure-devops/create-service-connection/backend.tf.sample
+10 −6		terraform/azure-devops/create-service-connection/main.tf
+10 −6		terraform/azure-devops/create-service-connection/modules/app-registration/main.tf
+0 −0		terraform/azure-devops/create-service-connection/modules/app-registration/outputs.tf
+5 −3		terraform/azure-devops/create-service-connection/modules/app-registration/variables.tf
+6 −6		terraform/azure-devops/create-service-connection/outputs.tf
+11 −0		terraform/azure-devops/create-service-connection/variables.tf