Add mgmt identity (#14)

main.tf

@@ -7,3 +7,21 @@ resource "azurerm_user_assigned_identity" "managed_identity" {
 
   tags = var.common_tags
 }
+
+locals {
+  mgmt_env = ( var.env == "sandbox") ? "cftsbox-intsvc" : "cftptl-intsvc"
+}
+
+resource "azurerm_user_assigned_identity" "mgmt_managed_identity" {
+
+  count = (var.env == "sandbox" || var.env == "prod" ) ? 1 : 0
+
+  provider = azurerm.mgmt
+
+  resource_group_name = "managed-identities-${local.mgmt_env}-rg"
+  location            = var.location
+
+  name = "${var.product}-${local.mgmt_env}-mi"
+
+  tags = var.common_tags
+}

state.tf

@@ -10,4 +10,11 @@ terraform {
 
 provider "azurerm" {
   features {}
+}
+
+provider "azurerm" {
+  alias                      = "mgmt"
+  subscription_id            = var.mgmt_subscription_id
+  skip_provider_registration = true
+  features {}
 }

variables.tf

@@ -14,4 +14,6 @@ variable "location" {
 
 variable "common_tags" {
   type = map(string)
-}
+}
+
+variable "mgmt_subscription_id" {}