michi
michi
CCoder.com
Created by michi on 2/27/2025 in #help
Use Azure Entra Authentication provider in template
But the approach will most likely be that we have a principal that developers have to enroll to their subscription. Then we deploy via that principal. I'll let you know when I find time to set this up
39 replies
CCoder.com
Created by michi on 2/27/2025 in #help
Use Azure Entra Authentication provider in template
Unfortunately haven't had the time to invest more into this
39 replies
CCoder.com
Created by michi on 2/27/2025 in #help
Use Azure Entra Authentication provider in template
might of course also be the case that my entra app gives me a token that is not permitted to that, or I'm doing something really wrong in the provider config, I can't rule that out
39 replies
CCoder.com
Created by michi on 2/27/2025 in #help
Use Azure Entra Authentication provider in template
I also tried something like this with I token I created via powershell
Connect-AzAccount
Get-AzAccessToken -ResourceUrl "https://management.azure.com"
Connect-AzAccount
Get-AzAccessToken -ResourceUrl "https://management.azure.com"
provider "azurerm" {
use_oidc = true
client_id = "<clientid>"
oidc_token = "<token>"
tenant_id = "<tenantid>"
subscription_id = "<subscriptionid>"
features {}
}
provider "azurerm" {
use_oidc = true
client_id = "<clientid>"
oidc_token = "<token>"
tenant_id = "<tenantid>"
subscription_id = "<subscriptionid>"
features {}
}
39 replies
CCoder.com
Created by michi on 2/27/2025 in #help
Use Azure Entra Authentication provider in template
you mean for the subscription_id? in the parameter:
data "coder_parameter" "subscription_id" {
name = "Subscription ID"
description = "The Subscription ID of your Azure MPN Subscription. The subscription has to reside in the axinf tenant."
mutable = false
default = "<my-subscription-id>"
}
data "coder_parameter" "subscription_id" {
name = "Subscription ID"
description = "The Subscription ID of your Azure MPN Subscription. The subscription has to reside in the axinf tenant."
mutable = false
default = "<my-subscription-id>"
}
39 replies
CCoder.com
Created by michi on 2/27/2025 in #help
Use Azure Entra Authentication provider in template
Okay, thank you. I'll have to look somewhere else for this use case then. Coder itself is great though and saves us a lot of work in other cases
39 replies
CCoder.com
Created by michi on 2/27/2025 in #help
Use Azure Entra Authentication provider in template
ah I understand. so nothing to be used in the terraform code directly but on the data plane
39 replies
CCoder.com
Created by michi on 2/27/2025 in #help
Use Azure Entra Authentication provider in template
What is the intentional use of coder_external_auth? I don't quite get it from the documentation
39 replies
CCoder.com
Created by michi on 2/27/2025 in #help
Use Azure Entra Authentication provider in template
I just tried it with the locals, also comes to the same error
39 replies
CCoder.com
Created by michi on 2/27/2025 in #help
Use Azure Entra Authentication provider in template
I also tried it with hard coded values instead of the parameter and the token from the external auth, I've ran into the same issue there
39 replies
CCoder.com
Created by michi on 2/27/2025 in #help
Use Azure Entra Authentication provider in template
the main goal was to utilize the free azure budget each developer gets with their MSDN subscriptions. Sure I can also do it in one subscription but then I would have to pay the bill
39 replies
CCoder.com
Created by michi on 2/27/2025 in #help
Use Azure Entra Authentication provider in template
no worries
39 replies
CCoder.com
Created by michi on 2/27/2025 in #help
Use Azure Entra Authentication provider in template
I have a central azure tenant, but the devs have their own subscriptions
39 replies
CCoder.com
Created by michi on 2/27/2025 in #help
Use Azure Entra Authentication provider in template
But I'm doing this in some (non-coder) terraform repositories. It usually works fine unless the data does not have a value
39 replies
CCoder.com
Created by michi on 2/27/2025 in #help
Use Azure Entra Authentication provider in template
ah thats unfortunate. was hoping to avoid creating arm templates for this and instead use coder for the many features it provides. do you have an idea how I could reach this using coder?
39 replies