You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: modules/azure/aks/buildingblock/README.md
-1Lines changed: 0 additions & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -4,7 +4,6 @@ supportedPlatforms:
4
4
- azure
5
5
description: |
6
6
Provision a production-grade Azure Kubernetes Service (AKS) cluster with Azure AD, OIDC, Workload Identity, Log Analytics and custom VNet using Terraform.
Copy file name to clipboardExpand all lines: modules/azure/azure-bastion/buildingblock/README.md
-1Lines changed: 0 additions & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -3,7 +3,6 @@ name: Azure Bastion Host
3
3
supportedPlatforms:
4
4
- azure
5
5
description: Provides secure RDP and SSH connectivity to virtual machines in Azure virtual networks without exposing them to the public internet, with comprehensive monitoring and alerting.
6
-
category: networking
7
6
---
8
7
9
8
# Azure Bastion Building Block with Comprehensive Observability
Copy file name to clipboardExpand all lines: modules/azure/container-registry/buildingblock/README.md
-1Lines changed: 0 additions & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -4,7 +4,6 @@ supportedPlatforms:
4
4
- azure
5
5
description: |
6
6
Provides a production-grade Azure Container Registry for storing and managing Docker container images and OCI artifacts with private networking support.
| <aname="input_create_hub_service_principal_name"></a> [create\_hub\_service\_principal\_name](#input\_create\_hub\_service\_principal\_name)| name of a separate service principal to create for hub VNet peering (least privilege) |`string`|`null`| no |
57
+
| <aname="input_create_service_principal_name"></a> [create\_service\_principal\_name](#input\_create\_service\_principal\_name)| name of a service principal to create and grant permissions to deploy the building block |`string`|`null`| no |
58
+
| <aname="input_existing_hub_principal_ids"></a> [existing\_hub\_principal\_ids](#input\_existing\_hub\_principal\_ids)| set of existing principal ids that will be granted permissions to peer with the hub VNet |`set(string)`|`[]`| no |
59
+
| <aname="input_existing_principal_ids"></a> [existing\_principal\_ids](#input\_existing\_principal\_ids)| set of existing principal ids that will be granted permissions to deploy the building block |`set(string)`|`[]`| no |
60
+
| <aname="input_hub_scope"></a> [hub\_scope](#input\_hub\_scope)| Scope for hub VNet peering permissions (management group or subscription). Typically a hub subscription, but can be a management group containing hub resources. |`string`| n/a | yes |
61
+
| <aname="input_hub_workload_identity_federation"></a> [hub\_workload\_identity\_federation](#input\_hub\_workload\_identity\_federation)| Configuration for workload identity federation for hub service principal. If not provided, an application password will be created instead. | <pre>object({<br> issuer = string<br> subject = string<br> })</pre> |`null`| no |
36
62
| <aname="input_name"></a> [name](#input\_name)| name of the building block, used for naming resources |`string`|`"key-vault"`| no |
37
-
| <aname="input_principal_ids"></a> [principal\_ids](#input\_principal\_ids)|set of principal ids that will be granted permissions to deploy the building block |`set(string)`| n/a | yes |
38
-
| <aname="input_scope"></a> [scope](#input\_scope)|Scope where the building block should be deployable, typically the parent of all Landing Zones. |`string`| n/a|yes|
63
+
| <aname="input_scope"></a> [scope](#input\_scope)|Scope where the building block should be deployable (management group or subscription), typically the parent of all Landing Zones. |`string`| n/a | yes |
64
+
| <aname="input_workload_identity_federation"></a> [workload\_identity\_federation](#input\_workload\_identity\_federation)|Configuration for workload identity federation. If not provided, an application password will be created instead. |<pre>object({<br> issuer = string<br> subject = string<br> })</pre>|`null`| no|
39
65
40
66
## Outputs
41
67
42
68
| Name | Description |
43
69
|------|-------------|
70
+
| <aname="output_application_password"></a> [application\_password](#output\_application\_password)| Information about the created application password (excludes the actual password value for security). |
71
+
| <aname="output_created_application"></a> [created\_application](#output\_created\_application)| Information about the created Azure AD application. |
72
+
| <aname="output_created_hub_application"></a> [created\_hub\_application](#output\_created\_hub\_application)| Information about the created hub Azure AD application. |
73
+
| <aname="output_created_hub_service_principal"></a> [created\_hub\_service\_principal](#output\_created\_hub\_service\_principal)| Information about the created hub service principal. |
74
+
| <aname="output_created_service_principal"></a> [created\_service\_principal](#output\_created\_service\_principal)| Information about the created service principal. |
44
75
| <aname="output_documentation_md"></a> [documentation\_md](#output\_documentation\_md)| Markdown documentation with information about the Key Vault Building Block building block backplane |
45
-
| <aname="output_role_assignment_ids"></a> [role\_assignment\_ids](#output\_role\_assignment\_ids)| The IDs of the role assignments for the service principals. |
46
-
| <aname="output_role_assignment_principal_ids"></a> [role\_assignment\_principal\_ids](#output\_role\_assignment\_principal\_ids)| The principal IDs of the service principals that have been assigned the role. |
47
-
| <aname="output_role_definition_id"></a> [role\_definition\_id](#output\_role\_definition\_id)| The ID of the role definition that enables deployment of the building block to subscriptions. |
48
-
| <aname="output_role_definition_name"></a> [role\_definition\_name](#output\_role\_definition\_name)| The name of the role definition that enables deployment of the building block to subscriptions. |
76
+
| <aname="output_hub_application_password"></a> [hub\_application\_password](#output\_hub\_application\_password)| Information about the created hub application password (excludes the actual password value for security). |
77
+
| <aname="output_hub_role_assignment_ids"></a> [hub\_role\_assignment\_ids](#output\_hub\_role\_assignment\_ids)| The IDs of the hub role assignments for all service principals. |
78
+
| <aname="output_hub_role_assignment_principal_ids"></a> [hub\_role\_assignment\_principal\_ids](#output\_hub\_role\_assignment\_principal\_ids)| The principal IDs of all service principals that have been assigned the hub role. |
79
+
| <aname="output_hub_role_definition_id"></a> [hub\_role\_definition\_id](#output\_hub\_role\_definition\_id)| The ID of the role definition that enables deployment of the building block to the hub. |
80
+
| <aname="output_hub_role_definition_name"></a> [hub\_role\_definition\_name](#output\_hub\_role\_definition\_name)| The name of the role definition that enables deployment of the building block to the hub. |
81
+
| <aname="output_hub_scope"></a> [hub\_scope](#output\_hub\_scope)| The scope (management group or subscription) where VNet peering role is applied. |
82
+
| <aname="output_hub_workload_identity_federation"></a> [hub\_workload\_identity\_federation](#output\_hub\_workload\_identity\_federation)| Information about the created hub workload identity federation credential. |
83
+
| <aname="output_provider_tf"></a> [provider\_tf](#output\_provider\_tf)| Ready-to-use provider.tf configuration for buildingblock deployment |
84
+
| <aname="output_role_assignment_ids"></a> [role\_assignment\_ids](#output\_role\_assignment\_ids)| The IDs of the role assignments for all service principals. |
85
+
| <aname="output_role_assignment_principal_ids"></a> [role\_assignment\_principal\_ids](#output\_role\_assignment\_principal\_ids)| The principal IDs of all service principals that have been assigned the role. |
86
+
| <aname="output_role_definition_id"></a> [role\_definition\_id](#output\_role\_definition\_id)| The ID of the role definition that enables deployment of the building block. |
87
+
| <aname="output_role_definition_name"></a> [role\_definition\_name](#output\_role\_definition\_name)| The name of the role definition that enables deployment of the building block. |
49
88
| <aname="output_scope"></a> [scope](#output\_scope)| The scope where the role definition and role assignments are applied. |
89
+
| <aname="output_workload_identity_federation"></a> [workload\_identity\_federation](#output\_workload\_identity\_federation)| Information about the created workload identity federation credential. |
0 commit comments