Skip to content

Commit 57ef77c

Browse files
committed
shared_image_version_resource - add uefi_settings - docs
1 parent b890da1 commit 57ef77c

File tree

1 file changed

+51
-0
lines changed

1 file changed

+51
-0
lines changed

website/docs/r/shared_image_version.html.markdown

Lines changed: 51 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -83,6 +83,8 @@ The following arguments are supported:
8383

8484
* `storage_account_id` - (Optional) The ID of the Storage Account where the Blob exists. Changing this forces a new resource to be created.
8585

86+
* `uefi_settings` - (Optional) A `uefi_settings` block as defined below. Changing this forces a new Shared Image Version to be created.
87+
8688
-> **NOTE:** `blob_uri` and `storage_account_id` must be specified together
8789

8890
* `tags` - (Optional) A collection of tags which should be applied to this resource.
@@ -101,6 +103,55 @@ The `target_region` block supports the following:
101103

102104
* `storage_account_type` - (Optional) The storage account type for the image version. Possible values are `Standard_LRS`, `Premium_LRS` and `Standard_ZRS`. Defaults to `Standard_LRS`. You can store all of your image version replicas in Zone Redundant Storage by specifying `Standard_ZRS`.
103105

106+
---
107+
108+
The `uefi_settings` block supports the following:
109+
110+
* `signature_template_names` - (Required) A list of UEFI signature template names to include in the UEFI settings. Possible values are `MicrosoftUefiCertificateAuthorityTemplate`, `MicrosoftWindowsTemplate` and `NoSignatureTemplate`
111+
112+
* `additional_signatures` - (Optional) An `additional_signatures` block as defined below.
113+
114+
115+
The `additional_signatures` block supports the following:
116+
117+
* `db` - (Optional) One or more `db` blocks as defined below.
118+
119+
* `dbx` - (Optional) One or more `dbx` blocks as defined below.
120+
121+
* `kek` - (Optional) One or more `kek` blocks as defined below.
122+
123+
* `pk` - (Optional) A `pk` block as defined below.
124+
125+
126+
A `db` block supports the following:
127+
128+
* `certificate_data` - (Required) A list of Base64-encoded certificates.
129+
130+
* `type` - (Required) The type of key signature. Possible values are `sha256` and `x509`.
131+
132+
133+
A `dbx` block supports the following:
134+
135+
* `certificate_data` - (Required) A list of Base64-encoded certificates.
136+
137+
* `type` - (Required) The type of key signature. Possible values are `sha256` and `x509`.
138+
139+
140+
A `kek` block supports the following:
141+
142+
* `certificate_data` - (Required) A list of Base64-encoded certificates.
143+
144+
* `type` - (Required) The type of key signature. Possible values are `sha256` and `x509`.
145+
146+
147+
The `pk` block supports the following:
148+
149+
* `certificate_data` - (Required) A list of Base64-encoded certificates.
150+
151+
* `type` - (Required) The type of key signature. Possible values are `sha256` and `x509`.
152+
153+
154+
104155
## Attributes Reference
105156

106157
In addition to the Arguments listed above - the following Attributes are exported:

0 commit comments

Comments
 (0)