chore: update keyvault module + suppress checkov warning in examples

padok-team · Aug 11, 2023 · 754d62a · 754d62a
1 parent 6006e3c
commit 754d62a
Show file tree

Hide file tree

Showing 3 changed files with 5 additions and 3 deletions.
diff --git a/examples/log-analytics-workspace-logger-logs-and-metrics/main.tf b/examples/log-analytics-workspace-logger-logs-and-metrics/main.tf
@@ -27,7 +27,8 @@ resource "random_pet" "random" {}
 data "azurerm_client_config" "this" {}
 
 module "key_vault" {
-  source = "[email protected]:padok-team/terraform-azurerm-keyvault.git?ref=v0.4.0"
+  # checkov:skip=CKV_TF_1:Do not want to use commit tags for source ref
+  source = "[email protected]:padok-team/terraform-azurerm-keyvault.git?ref=v0.5.0"
 
   name           = random_pet.random.id # KeyVault names are globally unique
   resource_group = azurerm_resource_group.this

diff --git a/examples/log-analytics-workspace-logger-metrics-only/main.tf b/examples/log-analytics-workspace-logger-metrics-only/main.tf
@@ -27,7 +27,8 @@ resource "random_pet" "random" {}
 data "azurerm_client_config" "this" {}
 
 module "key_vault" {
-  source = "[email protected]:padok-team/terraform-azurerm-keyvault.git?ref=v0.4.0"
+  # checkov:skip=CKV_TF_1:Do not want to use commit tags for source ref
+  source = "[email protected]:padok-team/terraform-azurerm-keyvault.git?ref=v0.5.0"
 
   name           = random_pet.random.id # KeyVault names are globally unique
   resource_group = azurerm_resource_group.this

diff --git a/main.tf b/main.tf
@@ -28,7 +28,7 @@ resource "azurerm_monitor_diagnostic_setting" "logs" {
   dynamic "enabled_log" {
     for_each = data.azurerm_monitor_diagnostic_categories.logs[count.index].logs
     content {
-      category = log.value
+      category = enabled_log.value
       retention_policy {
         enabled = false
         days    = 0