Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Feature Request: Support for Azure AD Service Principal / Application ID Creation #677

Closed
kmcquade opened this issue Jan 9, 2018 · 2 comments

Comments

@kmcquade
Copy link

kmcquade commented Jan 9, 2018

Terraform Version

0.11.1

Affected Resource(s)

  • Azure AD Service Principal creation (referred to as principal ID here.

Expected Behavior

Create Azure AD Service Principal. It would be nice to create a service principal for an application without having to do it with PowerShell first.

Example Flow

Example with currently supported terraform module:
https://www.terraform.io/docs/providers/azurerm/r/role_assignment.html#principal_id

  • In CI server, using CI server's service principal
  • Supply subscription ID, etc.
  • Create service principal for an application (without having to do powershell first)
  • Create resource group for application
  • Create role definition, limited to that resource group via scope
  • Create role assignment, limited to that principal

Benefits

  • Create and destroy service principal for an application via Terraform at build time.
  • Prevents "dangling principals" so to speak
  • Avoid ugly powershell before build and destroy
@tombuildsstuff
Copy link
Contributor

Hey @kmcquade

Thanks for opening this issue :)

This functionality has previously been requested in #16 - so that we don't have multiple issues tracking the same thing I'm going to close this issue in favour of #16.

Thanks!

@ghost
Copy link

ghost commented Apr 1, 2020

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.

If you feel this issue should be reopened, we encourage creating a new issue linking back to this one for added context. If you feel I made an error 🤖 🙉 , please reach out to my human friends 👉 hashibot-feedback@hashicorp.com. Thanks!

@ghost ghost locked and limited conversation to collaborators Apr 1, 2020
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants