fix: add missing disable_iss_validation

Signed-off-by: Kevin Lefevre <[email protected]>
particuleio · Feb 17, 2022 · acdb325 · acdb325
1 parent ecc8e5f
commit acdb325
Showing 1 changed file with 6 additions and 5 deletions.
diff --git a/main.tf b/main.tf
@@ -53,11 +53,12 @@ resource "vault_audit" "audit" {
 }
 
 resource "vault_kubernetes_auth_backend_config" "kubernetes_configs" {
-  for_each           = { for k, v in var.auth_backends : k => v if v.type == "kubernetes" }
-  backend            = vault_auth_backend.auth_backends[each.key].path
-  kubernetes_host    = each.value.kubernetes_host
-  kubernetes_ca_cert = try(each.value.kubernetes_ca_cert, null)
-  token_reviewer_jwt = try(each.value.token_reviewer_jwt, null)
+  for_each               = { for k, v in var.auth_backends : k => v if v.type == "kubernetes" }
+  backend                = vault_auth_backend.auth_backends[each.key].path
+  kubernetes_host        = each.value.kubernetes_host
+  kubernetes_ca_cert     = try(each.value.kubernetes_ca_cert, null)
+  token_reviewer_jwt     = try(each.value.token_reviewer_jwt, null)
+  disable_iss_validation = try(each.value.disable_iss_validation, true)
 }
 
 resource "vault_kubernetes_auth_backend_role" "kubernetes" {