OuterSrc / terraform-azurerm-caf

Terraform supermodule for the Terraform platform engineering for Azure
http://aka.ms/caf/terraform
MIT License
0 stars 0 forks source link

Bug report-VM Domain join issue #6

Open ml-justinhewitt opened 1 year ago

ml-justinhewitt commented 1 year ago

Is there an existing issue for this?

Community Note

Version of the module you are using

v0.0.5

Rover Version

No response

Terraform Version

No response

AzureRM Provider Version

No response

Affected Resource(s)/Data Source(s)

Any VM created

Terraform Configuration Files

# ### The extension section below will cause the pipeline to look in the
    # ### Corporate IT Production (UK) subscription for EVERY keyvault. Once the
    # ### VM has joined the domain, comment out this section
    # virtual_machine_extensions = {
    #   microsoft_azure_domainjoin = {
    #     domain_name = "ad.serco.com"
    #     restart     = "true"
    #     ou_path     = "OU=Azure,OU=Servers,OU=MH1,DC=ad,DC=serco,DC=com"

    #     domain_join_password_keyvault = {
    #       key_vault_id = "/subscriptions/fe26d1a5-ee22-4a18-8bb9-657328bf49fa/resourceGroups/SRA4PM-Devops/providers/Microsoft.KeyVault/vaults/SCO-AZU-ArmTemplates"
    #       secret_name  = "JoinDomain"
    #     }
    #     domain_join_username_keyvault = {
    #       key_vault_id = "/subscriptions/fe26d1a5-ee22-4a18-8bb9-657328bf49fa/resourceGroups/SRA4PM-Devops/providers/Microsoft.KeyVault/vaults/SCO-AZU-ArmTemplates"
    #       secret_name  = "JoinDomainUser"
    #     }
    #   }
    # }

Expected Behaviour

VM should join to domain

Actual Behaviour

Pipeline fails as it tries to address the KeyVault in the current subscription using an amalgamation of the Corporate IT Production (UK) subscription's ID and the current subscription's RG/Vault

Steps to Reproduce

No response

Important Factoids

No response

References

No response