Skip to content

Commit 69a878e

Browse files
mpminardimpminardi
authored
Merge pull request #25 from hashicorp/mpminardi/add-explanations-for-multiple-configurations
Add example var / explanations for multiple configuration support
2 parents 800f961 + c41fe37 commit 69a878e

File tree

7 files changed

+176
-1
lines changed

7 files changed

+176
-1
lines changed

‎aws/tfc-workspace.tf

Lines changed: 25 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -49,3 +49,28 @@ resource "tfe_variable" "tfc_aws_role_arn" {
4949

5050
# description = "The value to use as the audience claim in run identity tokens"
5151
# }
52+
53+
# The following is an example of the naming format used to define variables for
54+
# additional configurations. Additional required configuration values must also
55+
# be supplied in this same format, as well as any desired optional configuration
56+
# values.
57+
#
58+
# Additional configurations can be used to uniquely authenticate multiple aliases
59+
# of the same provider in a workspace, with different roles/permissions in different
60+
# accounts or regions.
61+
#
62+
# See https://developer.hashicorp.com/terraform/cloud-docs/workspaces/dynamic-provider-credentials/specifying-multiple-configurations
63+
# for more details on specifying multiple configurations.
64+
#
65+
# See https://developer.hashicorp.com/terraform/cloud-docs/workspaces/dynamic-provider-credentials/aws-configuration#specifying-multiple-configurations
66+
# for specific requirements and details for the AWS provider.
67+
68+
# resource "tfe_variable" "enable_aws_provider_auth_other_config" {
69+
# workspace_id = tfe_workspace.my_workspace.id
70+
71+
# key = "TFC_AWS_PROVIDER_AUTH_other_config"
72+
# value = "true"
73+
# category = "env"
74+
75+
# description = "Enable the Workload Identity integration for AWS for an additional configuration named other_config."
76+
# }

‎azure/tfc-workspace.tf

Lines changed: 25 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -49,3 +49,28 @@ resource "tfe_variable" "tfc_azure_client_id" {
4949

5050
# description = "The value to use as the audience claim in run identity tokens"
5151
# }
52+
53+
# The following is an example of the naming format used to define variables for
54+
# additional configurations. Additional required configuration values must also
55+
# be supplied in this same format, as well as any desired optional configuration
56+
# values.
57+
#
58+
# Additional configurations can be used to uniquely authenticate multiple aliases
59+
# of the same provider in a workspace, with different roles/permissions in different
60+
# accounts or regions.
61+
#
62+
# See https://developer.hashicorp.com/terraform/cloud-docs/workspaces/dynamic-provider-credentials/specifying-multiple-configurations
63+
# for more details on specifying multiple configurations.
64+
#
65+
# See https://developer.hashicorp.com/terraform/cloud-docs/workspaces/dynamic-provider-credentials/azure-configuration#specifying-multiple-configurations
66+
# for specific requirements and details for the Azure provider.
67+
68+
# resource "tfe_variable" "enable_azure_provider_auth_other_config" {
69+
# workspace_id = tfe_workspace.my_workspace.id
70+
71+
# key = "TFC_AZURE_PROVIDER_AUTH_other_config"
72+
# value = "true"
73+
# category = "env"
74+
75+
# description = "Enable the Workload Identity integration for Azure for an additional configuration named other_config."
76+
# }

‎gcp/tfc-workspace.tf

Lines changed: 25 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -99,3 +99,28 @@ resource "tfe_variable" "tfc_gcp_service_account_email" {
9999

100100
# description = "The value to use as the audience claim in run identity tokens"
101101
# }
102+
103+
# The following is an example of the naming format used to define variables for
104+
# additional configurations. Additional required configuration values must also
105+
# be supplied in this same format, as well as any desired optional configuration
106+
# values.
107+
#
108+
# Additional configurations can be used to uniquely authenticate multiple aliases
109+
# of the same provider in a workspace, with different roles/permissions in different
110+
# accounts or regions.
111+
#
112+
# See https://developer.hashicorp.com/terraform/cloud-docs/workspaces/dynamic-provider-credentials/specifying-multiple-configurations
113+
# for more details on specifying multiple configurations.
114+
#
115+
# See https://developer.hashicorp.com/terraform/cloud-docs/workspaces/dynamic-provider-credentials/gcp-configuration#specifying-multiple-configurations
116+
# for specific requirements and details for the GCP provider.
117+
118+
# resource "tfe_variable" "enable_gcp_provider_auth_other_config" {
119+
# workspace_id = tfe_workspace.my_workspace.id
120+
121+
# key = "TFC_GCP_PROVIDER_AUTH_other_config"
122+
# value = "true"
123+
# category = "env"
124+
125+
# description = "Enable the Workload Identity integration for GCP for an additional configuration named other_config."
126+
# }

‎vault-backed/aws/tfc-workspace.tf

Lines changed: 25 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -130,3 +130,28 @@ resource "tfe_variable" "tfc_aws_run_vault_role" {
130130

131131
# description = "The value to use as the audience claim in run identity tokens"
132132
# }
133+
134+
# The following is an example of the naming format used to define variables for
135+
# additional configurations. Additional required configuration values must also
136+
# be supplied in this same format, as well as any desired optional configuration
137+
# values.
138+
#
139+
# Additional configurations can be used to uniquely authenticate multiple aliases
140+
# of the same provider in a workspace, with different roles/permissions in different
141+
# accounts or regions.
142+
#
143+
# See https://developer.hashicorp.com/terraform/cloud-docs/workspaces/dynamic-provider-credentials/specifying-multiple-configurations
144+
# for more details on specifying multiple configurations.
145+
#
146+
# See https://developer.hashicorp.com/terraform/cloud-docs/workspaces/dynamic-provider-credentials/vault-backed/aws-configuration#specifying-multiple-configurations
147+
# for specific requirements and details for Vault-backed AWS.
148+
149+
# resource "tfe_variable" "enable_aws_provider_auth_other_config" {
150+
# workspace_id = tfe_workspace.my_workspace.id
151+
152+
# key = "TFC_VAULT_BACKED_AWS_AUTH_other_config"
153+
# value = "true"
154+
# category = "env"
155+
156+
# description = "Enable the Vault Secrets Engine integration for AWS for an additional configuration named other_config."
157+
# }

‎vault-backed/azure/tfc-workspace.tf

Lines changed: 25 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -110,3 +110,28 @@ resource "tfe_variable" "tfc_azure_vault_namespace" {
110110

111111
# description = "The value to use as the audience claim in run identity tokens"
112112
# }
113+
114+
# The following is an example of the naming format used to define variables for
115+
# additional configurations. Additional required configuration values must also
116+
# be supplied in this same format, as well as any desired optional configuration
117+
# values.
118+
#
119+
# Additional configurations can be used to uniquely authenticate multiple aliases
120+
# of the same provider in a workspace, with different roles/permissions in different
121+
# accounts or regions.
122+
#
123+
# See https://developer.hashicorp.com/terraform/cloud-docs/workspaces/dynamic-provider-credentials/specifying-multiple-configurations
124+
# for more details on specifying multiple configurations.
125+
#
126+
# See https://developer.hashicorp.com/terraform/cloud-docs/workspaces/dynamic-provider-credentials/vault-backed/azure-configuration#specifying-multiple-configurations
127+
# for specific requirements and details for Vault-backed Azure.
128+
129+
# resource "tfe_variable" "enable_azure_provider_auth_other_config" {
130+
# workspace_id = tfe_workspace.my_workspace.id
131+
132+
# key = "TFC_VAULT_BACKED_AZURE_AUTH_other_config"
133+
# value = "true"
134+
# category = "env"
135+
136+
# description = "Enable the Vault Secrets Engine integration for Azure for an additional configuration named other_config."
137+
# }

‎vault-backed/gcp/tfc-workspace.tf

Lines changed: 26 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -119,4 +119,29 @@ resource "tfe_variable" "tfc_gcp_run_vault_roleset" {
119119
# category = "env"
120120

121121
# description = "The value to use as the audience claim in run identity tokens"
122-
# }
122+
# }
123+
124+
# The following is an example of the naming format used to define variables for
125+
# additional configurations. Additional required configuration values must also
126+
# be supplied in this same format, as well as any desired optional configuration
127+
# values.
128+
#
129+
# Additional configurations can be used to uniquely authenticate multiple aliases
130+
# of the same provider in a workspace, with different roles/permissions in different
131+
# accounts or regions.
132+
#
133+
# See https://developer.hashicorp.com/terraform/cloud-docs/workspaces/dynamic-provider-credentials/specifying-multiple-configurations
134+
# for more details on specifying multiple configurations.
135+
#
136+
# See https://developer.hashicorp.com/terraform/cloud-docs/workspaces/dynamic-provider-credentials/vault-backed/gcp-configuration#specifying-multiple-configurations
137+
# for specific requirements and details for Vault-backed GCP.
138+
139+
# resource "tfe_variable" "enable_gcp_provider_auth_other_config" {
140+
# workspace_id = tfe_workspace.my_workspace.id
141+
142+
# key = "TFC_VAULT_BACKED_GCP_AUTH_other_config"
143+
# value = "true"
144+
# category = "env"
145+
146+
# description = "Enable the Vault Secrets Engine integration for GCP for an additional configuration named other_config."
147+
# }

‎vault/tfc-workspace.tf

Lines changed: 25 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -93,3 +93,28 @@ resource "tfe_variable" "tfc_vault_role" {
9393

9494
# description = "A Base64 encoded CA certificate to use when authenticating with Vault"
9595
# }
96+
97+
# The following is an example of the naming format used to define variables for
98+
# additional configurations. Additional required configuration values must also
99+
# be supplied in this same format, as well as any desired optional configuration
100+
# values.
101+
#
102+
# Additional configurations can be used to uniquely authenticate multiple aliases
103+
# of the same provider in a workspace, with different roles/permissions in different
104+
# accounts or regions.
105+
#
106+
# See https://developer.hashicorp.com/terraform/cloud-docs/workspaces/dynamic-provider-credentials/specifying-multiple-configurations
107+
# for more details on specifying multiple configurations.
108+
#
109+
# See https://developer.hashicorp.com/terraform/cloud-docs/workspaces/dynamic-provider-credentials/vault-configuration#specifying-multiple-configurations
110+
# for specific requirements and details for the Vault provider.
111+
112+
# resource "tfe_variable" "enable_vault_provider_auth_other_config" {
113+
# workspace_id = tfe_workspace.my_workspace.id
114+
115+
# key = "TFC_VAULT_PROVIDER_AUTH_other_config"
116+
# value = "true"
117+
# category = "env"
118+
119+
# description = "Enable the Workload Identity integration for Vault for an additional configuration named other_config."
120+
# }

0 commit comments

Comments
 (0)