terraform-provider-vault
terraform-provider-vault copied to clipboard
[Enhancement]: Add vault_raft_snapshot_agent_config support for azure_auth_mode from enterprise
trafficstars
Description
Currently, the vault vault_raft_snapshot_agent_config does not support using managed identities in azure, this is likely because the enterprise options are not avialable.
Affected Resource(s) and/or Data Source(s)
vault_raft_snapshot_agent_config
Potential Terraform Configuration
variable "azure_account_name" {}
variable "azure_account_key" {}
resource "vault_raft_snapshot_agent_config" "azure_backups" {
name = "azure_backup"
interval_seconds = 86400 # 24h
retain = 7
path_prefix = "/"
storage_type = "azure-blob"
# Storage Type Configuration
azure_container_name = "vault-blob"
azure_account_name = var.azure_account_name
azure_auth_mode. = "managed"
azure_client_id. = "67f54c3e-b4dd-45a3-9999-89b945b6ecb7"
}
References
https://developer.hashicorp.com/vault/api-docs/system/storage/raftautosnapshots#azure_auth_mode
Would you like to implement a fix?
No
This is also something that my company expects, using a Managed Identity is the cleanest way to login to Azure services.
Just to precise the issue description, the whole feature being an enterprise feature, I do not think the leftover is due to ENT vs. OSS.