fix(usermanagedideneity): lack of compatibility between variable umi_…

…federated_credentials_advanced and federated_credentials_advanced for audience sub-variable (#300) * added conditions to role assignment * bugfix, make fmt and make docs * change conditions behavior * bugfix * bugfixes with tests and update README.md files * style: remove locale from URLs * style: remove locale from urls * docs: make docs * change sub-variable audience to audiences and change type from string to set of string * update README.md file --------- Co-authored-by: Tomasz Charewicz <[email protected]> Co-authored-by: Matt White <[email protected]>
Azure · Dec 13, 2023 · b88b905 · b88b905
1 parent 128d8f7
commit b88b905
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/README.md b/README.md
@@ -640,7 +640,7 @@ map(object({
     name               = string
     subject_identifier = string
     issuer_url         = string
-    audience           = optional(string, "api://AzureADTokenExchange")
+    audiences          = optional(set(string), ["api://AzureADTokenExchange"])
   }))
 ```
 

diff --git a/variables.usermanagedidentity.tf b/variables.usermanagedidentity.tf
@@ -108,7 +108,7 @@ variable "umi_federated_credentials_advanced" {
     name               = string
     subject_identifier = string
     issuer_url         = string
-    audience           = optional(string, "api://AzureADTokenExchange")
+    audiences          = optional(set(string), ["api://AzureADTokenExchange"])
   }))
   nullable    = false
   default     = {}