Skip to content

Latest commit

 

History

History
110 lines (88 loc) · 5.69 KB

README.md

File metadata and controls

110 lines (88 loc) · 5.69 KB
Raw

DevOps Service Connection

Use this module to create a service connection and the corresponding service principal.

Usage

It's very easy to use!

terraform {
  required_providers {
    azuredevops = {
      source  = "microsoft/azuredevops"
      version = "~> 0.4.0"
    }
    azuread = {
      source  = "hashicorp/azuread"
      version = "~> 2.39.0"
    }
    azurerm = {
      source  = "hashicorp/azurerm"
      version = "~> 3.63.0"
    }
  }
}

provider "azuread" {}

provider "azurerm" {
  features {}
}

provider "azuredevops" {
  org_service_url = "<yourDevopsUrl>"
  personal_access_token = "<yourPAT>"
}

data "azuredevops_project" "example" {
  name = "Example Project"
}

data "azurerm_subscription" "current" {}

module "service_connection" {
  source = "../.."
  azure_devops_project = data.azuredevops_project.example
  display_name = data.azurerm_subscription.current.display_name
  subscription_id = data.azurerm_subscription.current.subscription_id
  subscription_name = data.azurerm_subscription.current.display_name
  tenant_id = data.azurerm_subscription.current.tenant_id
}

Requirements

Name Version
azuread ~> 2.39.0
azuredevops ~> 0.4.0
azurerm ~> 3.90.0

Inputs

Name Description Type Default Required
azure_devops_project Azure DevOps project to create the service connection in. 
object({
    name = string
    id   = string
  })
 n/a yes
display_name Display name of Service principal (prefix: sp-) and service connection (prefix: sc-azurerm-). string n/a yes
subscription_id ID of subscription to create service connection to. string n/a yes
subscription_name Name of subscription to create service connection to. string n/a yes
tenant_id Tenant of the service principal. string n/a yes
application Optional azuread_application if one already exists. 
object({
    object_id = string
    application_id = string
  })
 null no
application_permission The permission the serviceprincipal gets on the target subscription. Defaults to Contributor. string "Contributor" no
service_connection_suffix Suffix of the service connection name. Defaults to devops-01 string "devops-01" no

Outputs

Name Description
application Created azuread_application by this module for reuse in other service connections or null if already exists.
service_endpoint Service Endpoint for the created service connection
service_principal_object_id Object Id of created Service Principle 
  ## Resource types

  | Type | Used |
  |------|-------|
    | [azuread_application](https://registry.terraform.io/providers/hashicorp/azuread/latest/docs/resources/application) | 1 |
    | [azuread_application_password](https://registry.terraform.io/providers/hashicorp/azuread/latest/docs/resources/application_password) | 1 |
    | [azuread_service_principal](https://registry.terraform.io/providers/hashicorp/azuread/latest/docs/resources/service_principal) | 1 |
    | [azuredevops_serviceendpoint_azurerm](https://registry.terraform.io/providers/microsoft/azuredevops/latest/docs/resources/serviceendpoint_azurerm) | 1 |
    | [azurerm_role_assignment](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/role_assignment) | 1 |

  **`Used` only includes resource blocks.** `for_each` and `count` meta arguments, as well as resource blocks of modules are not considered.

Modules

No modules.

    ## Resources by Files

        ### main.tf

        | Name | Type |
        |------|------|
              | [azuread_application.this](https://registry.terraform.io/providers/hashicorp/azuread/latest/docs/resources/application) | resource |
              | [azuread_application_password.this](https://registry.terraform.io/providers/hashicorp/azuread/latest/docs/resources/application_password) | resource |
              | [azuread_service_principal.this](https://registry.terraform.io/providers/hashicorp/azuread/latest/docs/resources/service_principal) | resource |
              | [azuredevops_serviceendpoint_azurerm.this](https://registry.terraform.io/providers/microsoft/azuredevops/latest/docs/resources/serviceendpoint_azurerm) | resource |
              | [azurerm_role_assignment.this](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/role_assignment) | resource |
              | [azuread_client_config.current](https://registry.terraform.io/providers/hashicorp/azuread/latest/docs/data-sources/client_config) | data source |