confluent_identity_pool Resource

General Availability

confluent_identity_pool provides an Identity Pool resource that enables creating, editing, and deleting identity pools on Confluent Cloud.

Example Usage

Example Identity Pool to be used with Azure AD

resource "confluent_identity_provider" "azure" {
  display_name = "My OIDC Provider: Azure AD"
  description  = "My description"
  issuer       = "https://login.microsoftonline.com/{tenant_id}/v2.0"
  jwks_uri     = "https://login.microsoftonline.com/common/discovery/v2.0/keys"
}

resource "confluent_identity_pool" "example" {
  identity_provider {
    id = confluent_identity_provider.azure.id
  }
  display_name    = "My Identity Pool"
  description     = "Prod Access to Kafka clusters to Release Engineering"
  identity_claim  = "claims.sub"
  filter          = "claims.aud==\"confluent\" && claims.group!=\"invalid_group\""
}

Example Identity Pool to be used with Okta

resource "confluent_identity_provider" "okta" {
  display_name = "My OIDC Provider: Okta"
  description  = "My description"
  issuer       = "https://mycompany.okta.com/oauth2/default"
  jwks_uri     = "https://mycompany.okta.com/oauth2/default/v1/keys"
}

resource "confluent_identity_pool" "example" {
  identity_provider {
    id = confluent_identity_provider.okta.id
  }
  display_name    = "My Identity Pool"
  description     = "Prod Access to Kafka clusters to Release Engineering"
  identity_claim  = "claims.sub"
  filter          = "claims.aud==\"confluent\" && claims.group!=\"invalid_group\""
}

Argument Reference

The following arguments are supported:

Attributes Reference

In addition to the preceding arguments, the following attributes are exported:

Import

You can import an Identity Pool by using Identity Provider ID and Identity Pool ID, in the format <Identity Provider ID>/<Identity Pool ID>. The following example shows how to import an Identity Pool:

$ export CONFLUENT_CLOUD_API_KEY="<cloud_api_key>"
$ export CONFLUENT_CLOUD_API_SECRET="<cloud_api_secret>"
$ terraform import confluent_identity_pool.example op-abc123/pool-xyz456

External Documentation