terraform-provider-vault icon indicating copy to clipboard operation
terraform-provider-vault copied to clipboard

[Enhancement]: Add vault_raft_snapshot_agent_config support for azure_auth_mode from enterprise

Open joshuaauger opened this issue 7 months ago • 1 comments
trafficstars

Description

Currently, the vault vault_raft_snapshot_agent_config does not support using managed identities in azure, this is likely because the enterprise options are not avialable.

Affected Resource(s) and/or Data Source(s)

vault_raft_snapshot_agent_config

Potential Terraform Configuration

variable "azure_account_name" {}
variable "azure_account_key" {}

resource "vault_raft_snapshot_agent_config" "azure_backups" {
  name             = "azure_backup"
  interval_seconds = 86400 # 24h
  retain           = 7
  path_prefix      = "/"
  storage_type     = "azure-blob"

  # Storage Type Configuration
  azure_container_name = "vault-blob"
  azure_account_name   = var.azure_account_name
  azure_auth_mode.     = "managed"
  azure_client_id.     = "67f54c3e-b4dd-45a3-9999-89b945b6ecb7"
}

References

https://developer.hashicorp.com/vault/api-docs/system/storage/raftautosnapshots#azure_auth_mode

Would you like to implement a fix?

No

joshuaauger avatar Mar 27 '25 13:03 joshuaauger

This is also something that my company expects, using a Managed Identity is the cleanest way to login to Azure services.

Just to precise the issue description, the whole feature being an enterprise feature, I do not think the leftover is due to ENT vs. OSS.

HenriBlacksmith avatar Apr 03 '25 21:04 HenriBlacksmith