diff --git a/src/identity/prod/README.md b/src/identity/prod/README.md index d9b5db15f..5aa34f20b 100644 --- a/src/identity/prod/README.md +++ b/src/identity/prod/README.md @@ -18,8 +18,11 @@ | Name | Type | |------|------| +| [azurerm_role_assignment.cd_cgn](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/role_assignment) | resource | | [azurerm_role_assignment.cd_trial_system](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/role_assignment) | resource | +| [azurerm_role_assignment.ci_cgn](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/role_assignment) | resource | | [azurerm_role_assignment.ci_trial_system](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/role_assignment) | resource | +| [azurerm_subscription.cgn](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/data-sources/subscription) | data source | | [azurerm_subscription.trial_system](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/data-sources/subscription) | data source | ## Inputs diff --git a/src/identity/prod/data.tf b/src/identity/prod/data.tf index be442aed9..567ebe647 100644 --- a/src/identity/prod/data.tf +++ b/src/identity/prod/data.tf @@ -1,3 +1,7 @@ data "azurerm_subscription" "trial_system" { provider = azurerm.prod-trial +} + +data "azurerm_subscription" "cgn" { + provider = azurerm.prod-cgn } \ No newline at end of file diff --git a/src/identity/prod/main.tf b/src/identity/prod/main.tf index 979f5fe12..ee4196076 100644 --- a/src/identity/prod/main.tf +++ b/src/identity/prod/main.tf @@ -26,6 +26,14 @@ provider "azurerm" { features {} } +provider "azurerm" { + alias = "prod-cgn" + subscription_id = "74da48a3-b0e7-489d-8172-da79801086ed" + + features {} +} + + module "federated_identities" { source = "github.com/pagopa/dx//infra/modules/azure_federated_identity_with_github?ref=main" @@ -91,3 +99,17 @@ resource "azurerm_role_assignment" "cd_trial_system" { principal_id = module.federated_identities.federated_cd_identity.id role_definition_name = "Reader" } + +resource "azurerm_role_assignment" "ci_cgn" { + provider = azurerm.prod-cgn + scope = data.azurerm_subscription.cgn.id + principal_id = module.federated_identities.federated_ci_identity.id + role_definition_name = "Reader" +} + +resource "azurerm_role_assignment" "cd_cgn" { + provider = azurerm.prod-cgn + scope = data.azurerm_subscription.cgn.id + principal_id = module.federated_identities.federated_ci_identity.id + role_definition_name = "Reader" +} \ No newline at end of file