Testing Terraform pipelines

.github/workflows/azure_terraform_apply.yml

@@ -31,6 +31,7 @@ jobs:
       matrix:
         stack:
           - acm-general
+          - sysadmin-demo
 
     defaults:
       run:

.github/workflows/azure_terraform_plan.yml

@@ -28,6 +28,7 @@ jobs:
       matrix:
         stack:
           - acm-general
+          - sysadmin-demo
 
     defaults:
       run:

azure/terraform/stacks/acm-general/external-dns.tf

@@ -8,15 +8,15 @@ resource "azuread_application" "externaldns" {
 }
 
 resource "azuread_service_principal" "externaldns" {
-  application_id               = azuread_application.externaldns.application_id
+  client_id                    = azuread_application.externaldns.client_id
   app_role_assignment_required = false
   owners                       = distinct(concat([data.azuread_client_config.current.object_id], var.additional_owner_ids))
   description                  = "Service Principal for ExternalDNS within on-prem Kubernetes"
 }
 
 resource "azuread_service_principal_password" "externaldns" {
   display_name         = "${var.external_dns_namespace}Password"
-  service_principal_id = azuread_service_principal.externaldns.object_id
+  service_principal_id = azuread_service_principal.externaldns.id
 }
 
 resource "azurerm_role_assignment" "externaldns_reader" {
@@ -43,8 +43,8 @@ output "externaldns_sp_keyid" {
   value = azuread_service_principal_password.externaldns.key_id
 }
 
-output "externaldns_sp_appid" {
-  value = azuread_application.externaldns.application_id
+output "externaldns_sp_clientid" {
+  value = azuread_application.externaldns.client_id
 }
 
 output "externaldns_sp_password" {

azure/terraform/stacks/acm-general/providers.tf

@@ -1,9 +1,13 @@
 terraform {
-  required_version = "1.5.2"
+  required_version = "1.9.8"
   required_providers {
     azurerm = {
       source  = "hashicorp/azurerm"
-      version = "3.63.0"
+      version = "4.9.0"
+    }
+    azuread = {
+      source  = "hashicorp/azuread"
+      version = "3.0.2"
     }
   }
 }
@@ -13,3 +17,6 @@ provider "azurerm" {
   features {}
 }
 
+provider "azuread" {
+  # Configuration options
+}

azure/terraform/stacks/sysadmin-demo/chasetest.tf

@@ -0,0 +1,7 @@
+resource "azurerm_dns_a_record" "chasetest" {
+  name                = "chasetest"
+  zone_name           = data.azurerm_dns_zone.acmuic_org.name
+  resource_group_name = data.azurerm_resource_group.acm_general.name
+  ttl                 = 60
+  records             = ["127.0.0.1"]
+}

azure/terraform/stacks/sysadmin-demo/configuration/prod.tfvars

@@ -0,0 +1 @@
+# Prod environment variables

azure/terraform/stacks/sysadmin-demo/providers.tf

@@ -1,9 +1,9 @@
 terraform {
-  required_version = "1.3.2"
+  required_version = "1.9.8"
   required_providers {
     azurerm = {
       source  = "hashicorp/azurerm"
-      version = "3.27.0"
+      version = "4.9.0"
     }
   }
 }