diff --git a/main.tf b/main.tf index 6df3bf7..c37605b 100644 --- a/main.tf +++ b/main.tf @@ -82,6 +82,8 @@ resource "aws_elasticsearch_domain_saml_options" "opensearch" { subject_key = var.saml_subject_key roles_key = var.saml_roles_key session_timeout_minutes = var.saml_session_timeout + master_user_name = var.saml_master_user_name + master_backend_role = var.saml_master_backend_role idp { entity_id = var.saml_entity_id diff --git a/variables.tf b/variables.tf index 98ad870..4ef81d7 100644 --- a/variables.tf +++ b/variables.tf @@ -125,6 +125,18 @@ variable "saml_session_timeout" { default = 60 } +variable "saml_master_backend_role" { + description = "This backend role receives full permissions to the cluster, equivalent to a new master role, but can only use those permissions within Dashboards." + type = string + default = null +} + +variable "saml_master_user_name" { + description = "This username receives full permissions to the cluster, equivalent to a new master user, but can only use those permissions within Dashboards." + type = string + default = null +} + variable "index_templates" { description = "A map of all index templates to create." type = map(any)