[LI-Custom-CAF] During the tests will be used this branch

examples/README.md

@@ -0,0 +1,6 @@
+All the examples for CAF modules.
+##
+Missing examples:
+    - aks.tfvars
+    - public_ips.tfvars
+    - virtual_network_gateway_connections.tfvars

examples/application_insights_workbooks.tfvars

@@ -0,0 +1,51 @@
+application_insights_workbooks = {
+  test_workbook1 = {
+    resource_group_ref = "rg_test"
+    display_name       = "workbook1"
+    data_json = {
+      "version" = "Notebook/1.0",
+      "items" = [
+        {
+          "type" = "1",
+          "content" = {
+            "json" = "Test2024"
+          },
+          "name" = "text - 0"
+        }
+      ],
+      "isLocked" = false,
+      "fallbackResourceIds" = [
+        "Azure Monitor"
+      ]
+    }
+  }
+
+  test_workbook2 = {
+    resource_group_ref = "rg_test"
+    display_name       = "workbook2"
+    data_json = {
+      "version" = "Notebook/1.0",
+      "items" = [
+        {
+          "type" = "2",
+          "content" = {
+            "json" = "Test2025"
+          },
+          "name" = "text - 0"
+        }
+      ],
+      "isLocked" = false,
+      "fallbackResourceIds" = [
+        "Azure Monitor"
+      ]
+    }
+  }
+}
+
+# pre-requisites
+resource_groups = {
+  rg_test = {
+    name     = "rg-test-dv-ne-01"
+    location = "northeurope"
+  }
+}

examples/azuread_applications.tfvars

@@ -0,0 +1,120 @@
+azuread_applications = {
+  test_app1 = {
+    display_name     = "example-ad-app"
+    identifier_uris  = ["api://example-app"]
+    sign_in_audience = "AzureADMultipleOrgs"
+
+    api = {
+      mapped_claims_enabled          = "true"
+      requested_access_token_version = "2"
+      oauth2_permission_scopes = {
+        perm_scope1 = {
+          admin_consent_description  = "Allow the application to access example on behalf of the signed-in user."
+          admin_consent_display_name = "Access example"
+          enabled                    = "true"
+          id                         = "96183846-204b-4b43-82e1-5d2222eb4b9b"
+          type                       = "User"
+          user_consent_description   = "Allow the application to access example on your behalf."
+          user_consent_display_name  = "Access example"
+          value                      = "user_impersonation"
+        }
+        perm_scope2 = {
+          admin_consent_description  = "Administer the example application"
+          admin_consent_display_name = "Administer"
+          enabled                    = "true"
+          id                         = "be98fa3e-ab5b-4b11-83d9-04ba2b7946bc"
+          type                       = "Admin"
+          value                      = "administer"
+        }
+      }
+    }
+
+    app_roles = {
+      app_role1 = {
+        allowed_member_types = ["User", "Application"]
+        description          = "Admins can manage roles and perform all task actions"
+        display_name         = "Admin"
+        enabled              = "true"
+        id                   = "1b19509b-32b1-4e9f-b71d-4992aa991967"
+        value                = "admin"
+      }
+      app_role1 = {
+        allowed_member_types = ["User"]
+        description          = "ReadOnly roles have limited query access"
+        display_name         = "ReadOnly"
+        enabled              = "true"
+        id                   = "497406e4-012a-4267-bf18-45a1cb148a01"
+        value                = "User"
+      }
+    }
+
+    feature_tags = {
+      enterprise = "true"
+      gallery    = "true"
+    }
+
+    optional_claims = {
+      access_tokens = {
+        token1 = {
+          name = "myclaim"
+        }
+
+        token2 = {
+          name = "otherclaim"
+        }
+      }
+
+      id_tokens = {
+        id_token1 = {
+          name                  = "userclaim"
+          source                = "user"
+          essential             = "true"
+          additional_properties = ["emit_as_roles"]
+        }
+      }
+
+      saml2_tokens = {
+        saml2_token1 = {
+          name = "samlexample"
+        }
+      }
+    }
+
+    required_resource_access = {
+      test_access1 = {
+        resource_app_id = "00000003-0000-0000-c000-000000000000" # Microsoft Graph
+        resource_access = {
+          test_res_access1 = {
+            id   = "df021288-bdef-4463-88db-98f22de89214" # User.Read.All
+            type = "Role"
+          }
+          test_res_access2 = {
+            id   = "b4e74841-8e56-480b-be8b-910348b18b4c" # User.ReadWrite
+            type = "Scope"
+          }
+        }
+      }
+
+      test_access2 = {
+        resource_app_id = "c5393580-f805-4401-95e8-94b7a6ef2fc2" # Office 365 Management
+        resource_access = {
+          test_res_access3 = {
+            id   = "594c1fb6-4f81-4475-ae41-0c394909246c" # ActivityFeed.Read
+            type = "Role"
+          }
+        }
+      }
+    }
+
+    web = {
+      homepage_url  = "https://app.example.net"
+      logout_url    = "https://app.example.net/logout"
+      redirect_uris = ["https://app.example.net/account"]
+
+      implicit_grant = {
+        access_token_issuance_enabled = true
+        id_token_issuance_enabled     = true
+      }
+    }
+  }
+}

examples/azuread_service_principals.tfvars

@@ -0,0 +1,127 @@
+azuread_service_principals = {
+  sp1-test = {
+    client_id_ref = "test_app1"
+  }
+}
+
+# pre-requisites if azuread_applications is referenced
+azuread_applications = {
+  test_app1 = {
+    display_name     = "example-ad-app"
+    identifier_uris  = ["api://example-app"]
+    sign_in_audience = "AzureADMultipleOrgs"
+
+    api = {
+      mapped_claims_enabled          = "true"
+      requested_access_token_version = "2"
+      oauth2_permission_scopes = {
+        perm_scope1 = {
+          admin_consent_description  = "Allow the application to access example on behalf of the signed-in user."
+          admin_consent_display_name = "Access example"
+          enabled                    = "true"
+          id                         = "96183846-204b-4b43-82e1-5d2222eb4b9b"
+          type                       = "User"
+          user_consent_description   = "Allow the application to access example on your behalf."
+          user_consent_display_name  = "Access example"
+          value                      = "user_impersonation"
+        }
+        perm_scope2 = {
+          admin_consent_description  = "Administer the example application"
+          admin_consent_display_name = "Administer"
+          enabled                    = "true"
+          id                         = "be98fa3e-ab5b-4b11-83d9-04ba2b7946bc"
+          type                       = "Admin"
+          value                      = "administer"
+        }
+      }
+    }
+
+    app_roles = {
+      app_role1 = {
+        allowed_member_types = ["User", "Application"]
+        description          = "Admins can manage roles and perform all task actions"
+        display_name         = "Admin"
+        enabled              = "true"
+        id                   = "1b19509b-32b1-4e9f-b71d-4992aa991967"
+        value                = "admin"
+      }
+      app_role1 = {
+        allowed_member_types = ["User"]
+        description          = "ReadOnly roles have limited query access"
+        display_name         = "ReadOnly"
+        enabled              = "true"
+        id                   = "497406e4-012a-4267-bf18-45a1cb148a01"
+        value                = "User"
+      }
+    }
+
+    feature_tags = {
+      enterprise = "true"
+      gallery    = "true"
+    }
+
+    optional_claims = {
+      access_tokens = {
+        token1 = {
+          name = "myclaim"
+        }
+
+        token2 = {
+          name = "otherclaim"
+        }
+      }
+
+      id_tokens = {
+        id_token1 = {
+          name                  = "userclaim"
+          source                = "user"
+          essential             = "true"
+          additional_properties = ["emit_as_roles"]
+        }
+      }
+
+      saml2_tokens = {
+        saml2_token1 = {
+          name = "samlexample"
+        }
+      }
+    }
+
+    required_resource_access = {
+      test_access1 = {
+        resource_app_id = "00000003-0000-0000-c000-000000000000" # Microsoft Graph
+        resource_access = {
+          test_res_access1 = {
+            id   = "df021288-bdef-4463-88db-98f22de89214" # User.Read.All
+            type = "Role"
+          }
+          test_res_access2 = {
+            id   = "b4e74841-8e56-480b-be8b-910348b18b4c" # User.ReadWrite
+            type = "Scope"
+          }
+        }
+      }
+
+      test_access2 = {
+        resource_app_id = "c5393580-f805-4401-95e8-94b7a6ef2fc2" # Office 365 Management
+        resource_access = {
+          test_res_access3 = {
+            id   = "594c1fb6-4f81-4475-ae41-0c394909246c" # ActivityFeed.Read
+            type = "Role"
+          }
+        }
+      }
+    }
+
+    web = {
+      homepage_url  = "https://app.example.net"
+      logout_url    = "https://app.example.net/logout"
+      redirect_uris = ["https://app.example.net/account"]
+
+      implicit_grant = {
+        access_token_issuance_enabled = true
+        id_token_issuance_enabled     = true
+      }
+    }
+  }
+}