modules/azurerm_kusto_database_principal_assignment/variables.tf

variable "database_name" {
  type        = string
  description = "(Required) The name of the database in which to create the resource. Changing this forces a new resource to be created."
}

variable "cluster_name" {
  type        = string
  description = "(Required) The name of the cluster in which to create the resource. Changing this forces a new resource to be created."
}

variable "name" {
  type        = string
  description = "(Required) The name of the Kusto cluster principal assignment. Changing this forces a new resource to be created."
}

variable "principal_id" {
  type        = string
  description = "(Required) The object id of the principal. Changing this forces a new resource to be created."

  validation {
    condition     = can(regex("^[0-9a-fA-F]{8}-(?:[0-9a-fA-F]{4}-){3}[0-9a-fA-F]{12}$", var.principal_id))
    error_message = "The value you have set is not a valid GUID."
  }
}

variable "principal_type" {
  type        = string
  description = "(Required) The type of the principal. Valid values include App, Group, User. Changing this forces a new resource to be created."

  validation {
    condition = contains(["App", "Group", "User"], var.principal_type)
    error_message = format("Only the following values are authorised: 'App', 'Group' and 'User'. Fix the value you have set to: [%s]", join(", ",
      setsubtract([var.principal_type], ["App", "Group", "User"]))
    )
  }
}

variable "resource_group_name" {
  type        = string
  description = "(Required) The name of the resource group in which to create the resource. Changing this forces a new resource to be created."
}

variable "role" {
  type        = string
  description = "(Required) The database role assigned to the principal. Valid values include Admin, Ingestor, Monitor, UnrestrictedViewer, User and Viewer. Changing this forces a new resource to be created."

  validation {
    condition = contains(["Admin", "Ingestor", "Monitor", "UnrestrictedViewer", "User", "Viewer"], var.role)
    error_message = format("Only the following values are authorised: 'Admin', 'Ingestor', 'Monitor', 'UnrestrictedViewer', 'User' or 'Viewer'. Fix the value you have set to: [%s]", join(", ",
      setsubtract([var.role], ["Admin", "Ingestor", "Monitor", "UnrestrictedViewer", "User", "Viewer"]))
    )
  }
}

variable "tenant_id" {
  type        = string
  description = "(Required) The tenant id in which the principal resides. Changing this forces a new resource to be created."

  validation {
    condition     = can(regex("^[0-9a-fA-F]{8}-(?:[0-9a-fA-F]{4}-){3}[0-9a-fA-F]{12}$", var.tenant_id))
    error_message = "The value you have set is not a valid GUID."
  }
}