1
0
mirror of synced 2026-02-13 21:16:57 +00:00

Add refactored e2e tests

Signed-off-by: Somtochi Onyekwere <somtochionyekwere@gmail.com>
This commit is contained in:
Somtochi Onyekwere
2022-09-29 22:07:19 +01:00
committed by Sunny
parent 1730f3c46b
commit f6b0c6e7ef
23 changed files with 3069 additions and 11 deletions

View File

@@ -0,0 +1,61 @@
resource "azurerm_key_vault" "this" {
name = local.name
resource_group_name = module.aks.resource_group
location = var.azure_location
tenant_id = data.azurerm_client_config.current.tenant_id
sku_name = "standard"
tags = var.tags
}
resource "azurerm_key_vault_access_policy" "admin" {
key_vault_id = azurerm_key_vault.this.id
tenant_id = data.azurerm_client_config.current.tenant_id
object_id = data.azurerm_client_config.current.object_id
key_permissions = [
"Create",
"Update",
"Encrypt",
"Delete",
"Get",
"List",
"Purge",
"Recover",
"GetRotationPolicy",
"SetRotationPolicy"
]
secret_permissions = [
"Get",
"Delete",
"Purge",
"Recover"
]
}
resource "azurerm_key_vault_access_policy" "cluster_binding" {
key_vault_id = azurerm_key_vault.this.id
tenant_id = data.azurerm_client_config.current.tenant_id
object_id = module.aks.principal_id
key_permissions = [
"Decrypt",
"Encrypt",
]
}
resource "azurerm_key_vault_key" "sops" {
depends_on = [azurerm_key_vault_access_policy.admin]
name = "sops"
key_vault_id = azurerm_key_vault.this.id
key_type = "RSA"
key_size = 2048
tags = var.tags
key_opts = [
"decrypt",
"encrypt",
]
}