Merge pull request #8 from quantum-sec/feature/EN-975

EN-975: update RBAC configuration

modules/azure-kubernetes-cluster/main.tf

@@ -6,7 +6,7 @@ terraform {
   required_version = ">= 0.12"
 }
 
-resource "azurerm_kubernetes_cluster" "cluster" {
+resource "azurerm_kubernetes_cluster" "cluster" { # tfsec:ignore:AZU007
   name                              = var.name
   location                          = var.location
   resource_group_name               = var.resource_group_name
@@ -15,17 +15,12 @@ resource "azurerm_kubernetes_cluster" "cluster" {
   kubernetes_version                = var.kubernetes_version
   private_cluster_enabled           = var.private_cluster_enabled
   dns_prefix                        = var.dns_prefix
-  role_based_access_control_enabled = var.rbac_enabled
+  role_based_access_control_enabled = var.role_based_access_control_enabled
 
   identity {
     type = var.identity_type
   }
 
-  azure_active_directory_role_based_access_control { # tfsec:ignore:AZU007
-    admin_group_object_ids = var.rbac_aad_admin_group_object_ids
-    azure_rbac_enabled     = var.rbac_aad_azure_rbac_enabled
-    managed                = true
-  }
 
   network_profile {
     network_plugin    = var.network_plugin

modules/azure-kubernetes-cluster/vars.tf

@@ -42,7 +42,7 @@ variable "identity_type" {
   default     = "SystemAssigned"
 }
 
-variable "rbac_enabled" {
+variable "role_based_access_control_enabled" {
   description = "Whether or not RBAC is enabled for this cluster."
   type        = bool
   default     = true
@@ -128,15 +128,3 @@ variable "api_server_authorized_ip_ranges" {
   type        = list(string)
   default     = ["0.0.0.0/0"]
 }
-
-variable "rbac_aad_admin_group_object_ids" {
-  description = "value"
-  type        = list(string)
-  default     = []
-}
-
-variable "rbac_aad_azure_rbac_enabled" {
-  description = "value"
-  type        = bool
-  default     = true
-}