oidc_issuer_enabled must be set to true to enable Azure AD Worklo…

…ad Identity (#377)
Azure · May 31, 2023 · 17639f0 · 17639f0
1 parent 1fca004
commit 17639f0
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/main.tf b/main.tf
@@ -451,6 +451,10 @@ resource "azurerm_kubernetes_cluster" "main" {
       condition     = !(var.kms_enabled && var.identity_type != "UserAssigned")
       error_message = "KMS etcd encryption doesn't work with system-assigned managed identity."
     }
+    precondition {
+      condition     = !var.workload_identity_enabled || var.oidc_issuer_enabled
+      error_message = "`oidc_issuer_enabled` must be set to `true` to enable Azure AD Workload Identity"
+    }
   }
 }