xpk/terraform.aws-baseline-infra
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

UPD: removed enable_sso and alias to prevent conflicts

Browse Source
This commit is contained in:
xpk 2022-12-12 18:51:43 +08:00
parent 15942ee76c
commit aaad6ac8cc
Signed by: xpk
GPG Key ID: CD4FF6793F09AB86
3 changed files with 3 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
modules/security_identity_compliance/ds-adconnector/main.tf
View File

@ -1,8 +1,7 @@
resource "aws_directory_service_directory" "connector" { resource "aws_directory_service_directory" "connector" {
name = var.adc-domainname name = var.adc-domainname
alias = var.adc-alias # required by enable-sso enable_sso = false # enabling this results in error when terraform is ran in member accounts
enable_sso = var.adc-enable-sso
password = var.adc-service-account-password password = var.adc-service-account-password
size = var.adc-size size = var.adc-size
type = "ADConnector" type = "ADConnector"

4
modules/security_identity_compliance/ds-adconnector/outputs.tf
View File

@ -6,6 +6,6 @@ output security-group-id {
value = aws_directory_service_directory.connector.security_group_id value = aws_directory_service_directory.connector.security_group_id
} }
output connect-settings { output customer-dns-ip {
value = aws_directory_service_directory.connector.connect_settings value = aws_directory_service_directory.connector.connect_settings[*].customer_dns_ips
} }

2
modules/security_identity_compliance/ds-adconnector/variables.tf
View File

@ -5,6 +5,4 @@ variable "adc-dns-ips" {}
variable "adc-service-account-username" {} variable "adc-service-account-username" {}
variable "adc-subnet-ids" {} variable "adc-subnet-ids" {}
variable "adc-vpc-id" {} variable "adc-vpc-id" {}
variable "adc-alias" {}
variable "adc-enable-sso" {}
variable "default-tags" {} variable "default-tags" {}