Merge pull request #93 from SazniMohamed/main-aug-19

Update AKS Firewall module to add key_vault_secrets_provider metablock only if enabled
wso2 · Aug 19, 2024 · eeb1404 · eeb1404
2 parents 4cb31b1 + 915249b
commit eeb1404
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 3 deletions.
diff --git a/modules/azurerm/AKS-Firewall/aks_cluster.tf b/modules/azurerm/AKS-Firewall/aks_cluster.tf
@@ -98,7 +98,10 @@ resource "azurerm_kubernetes_cluster" "aks_cluster" {
     outbound_type      = "userDefinedRouting"
   }
 
-  key_vault_secrets_provider {
-    secret_rotation_enabled = var.secret_rotation_enabled
+  dynamic "key_vault_secrets_provider" {
+    for_each = var.secret_rotation_enabled ? [1] : []
+    content {
+      secret_rotation_enabled = var.secret_rotation_enabled
+    }
   }
 }
diff --git a/modules/azurerm/AKS-Firewall/outputs.tf b/modules/azurerm/AKS-Firewall/outputs.tf
@@ -86,7 +86,7 @@ output "node_resource_group" {
 
 output "aks_key_vault_secrets_provider_identity" {
   depends_on = [azurerm_kubernetes_cluster.aks_cluster]
-  value      = azurerm_kubernetes_cluster.aks_cluster.key_vault_secrets_provider[0].secret_identity[0].object_id
+  value      = var.secret_rotation_enabled ? azurerm_kubernetes_cluster.aks_cluster.key_vault_secrets_provider[0].secret_identity[0].object_id : null
 }
 
 output "oidc_issuer_url" {