Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Enhancement]: Add persist_app parameter to vault_azure_secret_backend_role resource #2297

Open
benemon opened this issue Jul 17, 2024 · 0 comments · May be fixed by #2299
Open

[Enhancement]: Add persist_app parameter to vault_azure_secret_backend_role resource #2297

benemon opened this issue Jul 17, 2024 · 0 comments · May be fixed by #2299

Comments

@benemon
Copy link

benemon commented Jul 17, 2024

Description

The persist_app field is missing from the vault_azure_secret_backend_role resource.

As per https://developer.hashicorp.com/vault/api-docs/v1.16.x/secret/azure#persist_app, there is now an API parameter that allows generated SPNs to persist for the lifetime of the role.

Affected Resource(s) and/or Data Source(s)

  • resource azure_secret_backend_role

Potential Terraform Configuration

resource "vault_azure_secret_backend_role" "my-role" {
  backend = vault_azure_secret_backend.azure.path
  role    = "my-role"
  ttl     = 600
  max_ttl = 3600
  persist_app = true

  azure_roles {
    role_name = "Contributor"
    scope     = "/subscriptions/${var.subscription_id}"
  }
}

References

https://developer.hashicorp.com/vault/api-docs/v1.16.x/secret/azure#persist_app

Would you like to implement a fix?

Yes

@benemon benemon changed the title [Enhancement]: Add persist_app parameter to azure_secret_backend_role resource [Enhancement]: Add persist_app parameter to vault_azure_secret_backend_role resource Jul 17, 2024
@benemon benemon linked a pull request Jul 18, 2024 that will close this issue
2 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant