Skip to content

Commit bfe95aa

Browse files
committed
docs: update vault admin ids details
1 parent da35bd8 commit bfe95aa

2 files changed

Lines changed: 18 additions & 9 deletions

File tree

applications/argocd/README.md

Lines changed: 10 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -117,7 +117,7 @@ Workload Identities allow Kubernetes workloads to authenticate with Azure servic
117117

118118
The [Application Resources Terraform Module](../../base-infrastructure/terraform/app_resources) is used to define and provision the necessary infrastructure and resources for the application in a consistent, and repeatable manner. The module creates the application's key-vault, any storage containers, a database on a specified database server, as well as an Azure Workload Identity for the application with appropriate permissions on the aforementioned resources. Typical usage of the module would look like this:
119119

120-
```
120+
```terraform
121121
module "some_application_resources" {
122122
source = "./app_resources"
123123
@@ -164,6 +164,15 @@ module "some_application_resources" {
164164
]
165165
}
166166
```
167+
> [!Tip]
168+
> `vault_admin_ids` needs a **user ID**.
169+
>
170+
> Get your user ID with:
171+
> - `az ad signed-in-user show | jq '.id'`
172+
> - https://portal.azure.com/#view/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/~/Overview -> `My feed`
173+
>
174+
> You can confirm it by opening:
175+
> `https://portal.azure.com/#view/Microsoft_AAD_UsersAndTenants/UserProfileMenuBlade/~/overview/userId/<user-id>`
167176
168177
## 5. Common Container Registry
169178
The Common Container Registry is a centralized repository for storing and managing Docker container images. It ensures that all necessary container images are readily available for deployment. Within the terraform code is contained the integration between the container registry and the AKS cluster's kubelets such that imagePullSecrets are not required in most cases.

base-infrastructure/terraform/app_resources.tf

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -61,8 +61,8 @@ module "alert_hub_resources" {
6161
}
6262

6363
vault_admin_ids = [
64-
"c31baae7-afbf-4ad3-8e01-5abbd68adb16",
65-
"32053268-3970-48f3-9b09-c4280cd0b67d"
64+
"c31baae7-afbf-4ad3-8e01-5abbd68adb16", # Navin (TC)
65+
"32053268-3970-48f3-9b09-c4280cd0b67d", # Moses (DFS)
6666
]
6767
}
6868

@@ -112,8 +112,8 @@ module "sdt_resources" {
112112
}
113113

114114
vault_admin_ids = [
115-
"c31baae7-afbf-4ad3-8e01-5abbd68adb16",
116-
"32053268-3970-48f3-9b09-c4280cd0b67d"
115+
"c31baae7-afbf-4ad3-8e01-5abbd68adb16", # Navin (TC)
116+
"32053268-3970-48f3-9b09-c4280cd0b67d", # Moses (DFS)
117117
]
118118
}
119119

@@ -160,8 +160,8 @@ module "montandon_etl_resources" {
160160
}
161161

162162
vault_admin_ids = [
163-
"c31baae7-afbf-4ad3-8e01-5abbd68adb16",
164-
"32053268-3970-48f3-9b09-c4280cd0b67d"
163+
"c31baae7-afbf-4ad3-8e01-5abbd68adb16", # Navin (TC)
164+
"32053268-3970-48f3-9b09-c4280cd0b67d", # Moses (DFS)
165165
]
166166
}
167167

@@ -191,7 +191,7 @@ module "montandon_eoapi_resources" {
191191
}
192192

193193
vault_admin_ids = [
194-
"c31baae7-afbf-4ad3-8e01-5abbd68adb16",
195-
"32053268-3970-48f3-9b09-c4280cd0b67d"
194+
"c31baae7-afbf-4ad3-8e01-5abbd68adb16", # Navin (TC)
195+
"32053268-3970-48f3-9b09-c4280cd0b67d", # Moses (DFS)
196196
]
197197
}

0 commit comments

Comments
 (0)