use witness_type to control whether create witness_storage_key (#23)

* use witness_type to control whether create witness_storage_key update * lower --------- Co-authored-by: Hangyu Xu <[email protected]>
Azure · Oct 12, 2024 · 9316d57 · 9316d57
1 parent 084d09f
commit 9316d57
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/keyvault.tf b/keyvault.tf
@@ -69,6 +69,8 @@ resource "azurerm_key_vault_secret" "default_arb_application" {
 }
 
 resource "azurerm_key_vault_secret" "witness_storage_key" {
+  count = lower(var.witness_type) == "cloud" ? 1 : 0
+
   key_vault_id    = local.key_vault.id
   name            = local.keyvault_secret_names["WitnessStorageKey"]
   value           = base64encode(var.create_witness_storage_account ? azurerm_storage_account.witness[0].primary_access_key : data.azurerm_storage_account.witness[0].primary_access_key)