add oidc discovery oiption

brokedba · Nov 30, 2024 · b5a36f2 · b5a36f2
1 parent bc5b26a
commit b5a36f2
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 3 deletions.
diff --git a/terraform-provider-oci/oke-quickstartz/modules/oke/main.tf b/terraform-provider-oci/oke-quickstartz/modules/oke/main.tf
@@ -40,6 +40,9 @@ resource "oci_containerengine_cluster" "oke_cluster" {
       freeform_tags = var.load_balancers_tags.freeformTags
       # defined_tags  = var.load_balancers_tags.definedTags
     }
+    open_id_connect_discovery {
+      is_open_id_connect_discovery_enabled = var.oke_cluster_oidc_discovery
+   }
   }
   image_policy_config {
     is_policy_enabled = false
@@ -51,9 +54,6 @@ resource "oci_containerengine_cluster" "oke_cluster" {
     cni_type = var.cni_type
   }
 
-# open_id_connect_discovery {
-#   is_open_id_connect_discovery_enabled =false
-# } 
   lifecycle {
     ignore_changes = [freeform_tags, defined_tags, kubernetes_version, id]
   }

diff --git a/terraform-provider-oci/oke-quickstartz/modules/oke/variables.tf b/terraform-provider-oci/oke-quickstartz/modules/oke/variables.tf
@@ -126,6 +126,11 @@ locals {
 locals {
   oke_compartment_ocid = var.compartment_ocid
 }
+# OIDC
+variable "oke_cluster_oidc_discovery" {
+  default       = false
+  description = "Enable OpenID Connect discovery in the cluster"
+}
 
 # Deployment Details + Freeform Tags
 variable "cluster_tags" {