Tips-Of-Mine/terraform-cloudflare-tunnel-zone-org
2
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases Wiki Activity

test variable replacement by creation ID
Some checks failed
Terraform Apply / Terraform Apply (push) Failing after 1m16s
Details

Browse Source
This commit is contained in:
Hubert Cornet
2025-11-24 12:41:56 +01:00
parent b5b4b9ba35
commit 7849148f3c
6 changed files with 27 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
Access_Controls-Applications-Infrastructure.tf
View File

@@ -41,7 +41,9 @@ resource "cloudflare_zero_trust_access_application" "cloudflare_app_ssh_infra" {
name = "SSH GCP Infrastructure Policy" name = "SSH GCP Infrastructure Policy"
decision = "allow" decision = "allow"
allowed_idps = [var.cloudflare_okta_identity_provider_id] allowed_idps = [
cloudflare_zero_trust_access_identity_provider.authentik_oidc.id,
]
auto_redirect_to_identity = true auto_redirect_to_identity = true
allow_authenticate_via_warp = false allow_authenticate_via_warp = false

4
Access_Controls-Applications-rdp.tf
View File

@@ -44,7 +44,9 @@ resource "cloudflare_zero_trust_access_application" "cloudflare_app_rdp_domain"
}] }]
# Identity provider settings # Identity provider settings
allowed_idps = [var.cloudflare_okta_identity_provider_id] allowed_idps = [
cloudflare_zero_trust_access_identity_provider.authentik_oidc.id,
]
auto_redirect_to_identity = true auto_redirect_to_identity = true
enable_binding_cookie = false enable_binding_cookie = false
http_only_cookie_attribute = false http_only_cookie_attribute = false

8
Access_Controls-Applications-self_hosted.tf
View File

@@ -50,7 +50,9 @@ resource "cloudflare_zero_trust_access_application" "cloudflare_app_web_competit
uri = var.cloudflare_subdomain_web_sensitive uri = var.cloudflare_subdomain_web_sensitive
}] }]
allowed_idps = [var.cloudflare_okta_identity_provider_id] allowed_idps = [
cloudflare_zero_trust_access_identity_provider.authentik_oidc.id,
]
auto_redirect_to_identity = true auto_redirect_to_identity = true
allow_authenticate_via_warp = false allow_authenticate_via_warp = false
@@ -81,7 +83,9 @@ resource "cloudflare_zero_trust_access_application" "cloudflare_app_web_intranet
uri = var.cloudflare_subdomain_web uri = var.cloudflare_subdomain_web
}] }]
allowed_idps = [var.cloudflare_okta_identity_provider_id] allowed_idps = [
cloudflare_zero_trust_access_identity_provider.authentik_oidc.id,
]
auto_redirect_to_identity = true auto_redirect_to_identity = true
allow_authenticate_via_warp = false allow_authenticate_via_warp = false

5
Access_Controls-Applications-ssh.tf
View File

@@ -24,7 +24,10 @@ resource "cloudflare_zero_trust_access_application" "cloudflare_app_ssh_browser"
uri = var.cloudflare_subdomain_ssh uri = var.cloudflare_subdomain_ssh
}] }]
allowed_idps = [var.cloudflare_okta_identity_provider_id, var.cloudflare_otp_identity_provider_id] allowed_idps = [
cloudflare_zero_trust_access_identity_provider.gmail.id,
cloudflare_zero_trust_access_identity_provider.authentik_oidc.id,
]
auto_redirect_to_identity = false auto_redirect_to_identity = false
allow_authenticate_via_warp = false allow_authenticate_via_warp = false

5
Access_Controls-Applications-vnc.tf
View File

@@ -24,7 +24,10 @@ resource "cloudflare_zero_trust_access_application" "cloudflare_app_vnc_browser"
uri = var.cloudflare_subdomain_vnc uri = var.cloudflare_subdomain_vnc
}] }]
allowed_idps = [var.cloudflare_okta_identity_provider_id, var.cloudflare_otp_identity_provider_id] allowed_idps = [
cloudflare_zero_trust_access_identity_provider.gmail.id,
cloudflare_zero_trust_access_identity_provider.authentik_oidc.id,
]
auto_redirect_to_identity = false auto_redirect_to_identity = false
allow_authenticate_via_warp = false allow_authenticate_via_warp = false

7
Integrations-Identity_providers.tf
View File

@@ -34,3 +34,10 @@ resource "cloudflare_zero_trust_access_identity_provider" "authentik_oidc" {
token_url = "https://authentik.${var.cloudflare_authentik_domain}/application/o/token/" token_url = "https://authentik.${var.cloudflare_authentik_domain}/application/o/token/"
} }
} }
data "cloudflare_zero_trust_access_identity_provider" "gmail" {
account_id = local.cloudflare_account_id
identity_provider_id = "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
zone_id = "zone_id"
}