Merge pull request #476 from Azure/patch.cleanup.5.6.10

Update latest rover and minimum terraform version

Author: arnaudlh

.devcontainer/docker-compose.yml

@@ -6,7 +6,7 @@
   version: '3.7'
   services:
     rover:
-      image: aztfmod/rover:1.4.6-2305.1807
+      image: aztfmod/rover:1.4.6-2306.1405
       user: vscode
 
       labels:

.github/workflows/landingzones-tf100.yml

@@ -39,7 +39,7 @@ jobs:
           random_length: ['5']
 
     container:
-      image: aztfmod/rover:1.4.6-2305.1807
+      image: aztfmod/rover:1.4.6-2306.1405
       options: --user 0
 
     steps:
@@ -96,7 +96,7 @@ jobs:
           ]
 
     container:
-      image: aztfmod/rover:1.4.6-2305.1807
+      image: aztfmod/rover:1.4.6-2306.1405
       options: --user 0
 
     steps:
@@ -143,7 +143,7 @@ jobs:
           random_length: ['5']
 
     container:
-      image: aztfmod/rover:1.4.6-2305.1807
+      image: aztfmod/rover:1.4.6-2306.1405
       options: --user 0
 
     steps:
@@ -198,7 +198,7 @@ jobs:
           ]
 
     container:
-      image: aztfmod/rover:1.4.6-2305.1807
+      image: aztfmod/rover:1.4.6-2306.1405
       options: --user 0
 
     steps:
@@ -244,7 +244,7 @@ jobs:
         random_length: ['5']
 
     container:
-      image: aztfmod/rover:1.4.6-2305.1807
+      image: aztfmod/rover:1.4.6-2306.1405
       options: --user 0
 
     steps:

caf_launchpad/main.tf

@@ -23,7 +23,7 @@ terraform {
       version = "~> 1.2.0"
     }
   }
-  required_version = ">= 1.3.0"
+  required_version = ">= 1.3.5"
 }
 
 

caf_solution/add-ons/aad-pod-identity/main.tf

@@ -13,5 +13,5 @@ terraform {
       version = "~> 0.5.0"
     }
   }
-  required_version = ">= 1.3.0"
+  required_version = ">= 1.3.5"
 }

caf_solution/add-ons/aks-secure-baseline/main.tf

@@ -13,5 +13,5 @@ terraform {
       version = ">= 0.5.0"
     }
   }
-  required_version = ">= 1.3.0"
+  required_version = ">= 1.3.5"
 }

caf_solution/add-ons/aks_applications/main.tf

@@ -17,5 +17,5 @@ terraform {
       version = "~> 0.5.0"
     }
   }
-  required_version = ">= 1.3.0"
+  required_version = ">= 1.3.5"
 }

caf_solution/add-ons/aks_applications_v2/cluster_role/cluster_role.tf

@@ -13,17 +13,17 @@ resource "kubernetes_cluster_role_v1" "cluster_role" {
   metadata {
     annotations = try(var.settings.annotations, null)
     labels      = try(var.settings.labels, null)
-    name = azurecaf_name.cluster_role.result
+    name        = azurecaf_name.cluster_role.result
   }
   dynamic "rule" {
     for_each = try(var.settings.rule, {})
-      content {
-        api_groups = try(rule.value.api_groups, null)
-        non_resource_urls = try(rule.value.non_resource_urls, null)
-        resource_names = try(rule.value.resource_names, null)
-        resources = try(rule.value.resources, null)
-        verbs = try(rule.value.verbs, null)
-      }
+    content {
+      api_groups        = try(rule.value.api_groups, null)
+      non_resource_urls = try(rule.value.non_resource_urls, null)
+      resource_names    = try(rule.value.resource_names, null)
+      resources         = try(rule.value.resources, null)
+      verbs             = try(rule.value.verbs, null)
+    }
   }
 
   dynamic "aggregation_rule" {
@@ -33,7 +33,7 @@ resource "kubernetes_cluster_role_v1" "cluster_role" {
         dynamic "match_expressions" {
           for_each = try(aggregation_rule.value.match_expressions, {})
           content {
-            key = try(match_expressions.value.key, null)
+            key      = try(match_expressions.value.key, null)
             operator = try(match_expressions.value.operator, null)
             values   = try(match_expressions.value.values, [])
           }

caf_solution/add-ons/aks_applications_v2/cluster_role_binding/cluster_role_binding.tf

@@ -1,5 +1,5 @@
 resource "azurecaf_name" "cluster_role_binding" {
-  name = var.settings.name
+  name          = var.settings.name
   resource_type = "azurerm_role_assignment"
   prefixes      = var.global_settings.prefixes
   random_length = var.global_settings.random_length
@@ -12,19 +12,19 @@ resource "kubernetes_cluster_role_binding_v1" "cluster_role_binding" {
   metadata {
     annotations = try(var.settings.annotations, null)
     labels      = try(var.settings.labels, null)
-    name = azurecaf_name.cluster_role_binding.result
+    name        = azurecaf_name.cluster_role_binding.result
   }
   role_ref {
-    name = try(var.cluster_role[var.settings.role_key].name, var.settings.role_name)
-    kind = "ClusterRole"
+    name      = try(var.cluster_role[var.settings.role_key].name, var.settings.role_name)
+    kind      = "ClusterRole"
     api_group = "rbac.authorization.k8s.io"
   }
   dynamic "subject" {
     for_each = try(var.settings.subjects, {})
     content {
-        name = coalesce(try(subject.value.name, null), try(var.managed_identities[subject.value.lz_key][subject.value.object_key].rbac_id, null), try(var.azuread_service_principals[subject.value.lz_key][subject.value.object_key].rbac_id, null), try(var.azuread_groups[subject.value.lz_key][subject.value.object_key].rbac_id, null))
-        kind = can(subject.value.kind) ?  subject.value.kind : can(try(var.managed_identities[subject.value.lz_key][subject.value.object_key].rbac_id, null)) ? "User" : can(try(var.azuread_service_principals[subject.value.lz_key][subject.value.object_key].rbac_id, null)) ? "User" : can(try(var.azuread_groups[subject.value.lz_key][subject.value.object_key].rbac_id, null)) ? "Group" : null
-        api_group = "rbac.authorization.k8s.io"
+      name      = coalesce(try(subject.value.name, null), try(var.managed_identities[subject.value.lz_key][subject.value.object_key].rbac_id, null), try(var.azuread_service_principals[subject.value.lz_key][subject.value.object_key].rbac_id, null), try(var.azuread_groups[subject.value.lz_key][subject.value.object_key].rbac_id, null))
+      kind      = can(subject.value.kind) ? subject.value.kind : can(try(var.managed_identities[subject.value.lz_key][subject.value.object_key].rbac_id, null)) ? "User" : can(try(var.azuread_service_principals[subject.value.lz_key][subject.value.object_key].rbac_id, null)) ? "User" : can(try(var.azuread_groups[subject.value.lz_key][subject.value.object_key].rbac_id, null)) ? "Group" : null
+      api_group = "rbac.authorization.k8s.io"
     }
   }
 }

caf_solution/add-ons/aks_applications_v2/examples/configuration.tfvars

@@ -21,7 +21,7 @@ namespaces = {
 kv_csi_driver = {
   workload_kv_reader = {
     aks_clusters = {
-      lz_key = "aks" 
+      lz_key = "aks"
       key    = "aks_cluster1"
     }
     keyvault = {
@@ -74,10 +74,10 @@ role_binding = {
     namespace_key = "default"
     role_name     = "admin"
     subjects = {
-			demouser = {
-				# user object id
-				name = "e74a2ee6-433c-46b3-b10f-9abac25b1ba8"
-			}
+      demouser = {
+        # user object id
+        name = "e74a2ee6-433c-46b3-b10f-9abac25b1ba8"
+      }
     }
   }
 }

caf_solution/add-ons/aks_applications_v2/main.tf

@@ -17,7 +17,7 @@ terraform {
       version = "~> 1.2.24"
     }
   }
-  required_version = ">= 1.3.0"
+  required_version = ">= 1.3.5"
 }
 
 data "azurerm_client_config" "current" {}