From f0687eb6718890a1ade2b4f126a219ad9f91dfcd Mon Sep 17 00:00:00 2001 From: Richard Hagen Date: Thu, 19 Sep 2024 14:32:30 +0200 Subject: [PATCH] Create missing fedcred (#1452) --- terraform/subscriptions/s940/prod/common/github.tf | 11 +++++++++++ terraform/subscriptions/s941/dev/common/github.tf | 11 +++++++++++ 2 files changed, 22 insertions(+) diff --git a/terraform/subscriptions/s940/prod/common/github.tf b/terraform/subscriptions/s940/prod/common/github.tf index d388b6cdd..0a3ad1c79 100644 --- a/terraform/subscriptions/s940/prod/common/github.tf +++ b/terraform/subscriptions/s940/prod/common/github.tf @@ -41,3 +41,14 @@ resource "azuread_application_federated_identity_credential" "github-operator-fe timeouts {} } + +resource "azuread_application_federated_identity_credential" "github-operator-federated-credentials-operations" { + application_id = data.azuread_application.github_operator.id + display_name = "radix-platform-operations-operations" + description = "Allow Github to authenticate" + audiences = ["api://AzureADTokenExchange"] + issuer = "https://token.actions.githubusercontent.com" + subject = "repo:equinor/radix-platform:environment:operations" + + timeouts {} +} diff --git a/terraform/subscriptions/s941/dev/common/github.tf b/terraform/subscriptions/s941/dev/common/github.tf index 4e176dd69..7fbbcca97 100644 --- a/terraform/subscriptions/s941/dev/common/github.tf +++ b/terraform/subscriptions/s941/dev/common/github.tf @@ -41,3 +41,14 @@ resource "azuread_application_federated_identity_credential" "github-operator-fe timeouts {} } + +resource "azuread_application_federated_identity_credential" "github-operator-federated-credentials-operations" { + application_id = data.azuread_application.github_operator.id + display_name = "radix-platform-operations-operations" + description = "Allow Github to authenticate" + audiences = ["api://AzureADTokenExchange"] + issuer = "https://token.actions.githubusercontent.com" + subject = "repo:equinor/radix-platform:environment:operations" + + timeouts {} +}