sap-hana
sap-hana copied to clipboard
Backlog: Service Principal creation by Terraform
Problem statement Current we create SP for Azure fencing agent with shell script.
Enhancement The goal is to have the above SP created in TF.
Notes
- Quick starter sample code here.
- To achieve this, azuread plugin from TF is required. Keep in mind the current plugin runs with the legacy Azure REST API[1]
- The user who is creating the service principal with TF has to have a very high level rights in the subscription[2]
[1]. https://developer.microsoft.com/en-us/identity/blogs/deprecation-of-app-registrations-legacy-experience-and-the-application-registration-portal-apps-dev-microsoft-com/ [2]. https://www.terraform.io/docs/providers/azuread/guides/service_principal_configuration.html
Dependencies
Checklist