Buildingblocks azure virtual network configuration
Source code & Installation
The source code of this kit module can be found here
Run the following command to install the kit module:
collie kit import azure/buildingblocks/standard-vnet-configuration
1
This module, will creates a new Service Principal and a Storage Account's Container which then will be leveraged for generating Terraform's Backend and Provider values.
How to use
- Take the "generated-backend.tf" and "generated-provider.tf" inside of "outputs" folder and drop them as encrypted inputs in your buildingblock definition.
Requirements
Name | Version |
---|---|
terraform | >= 1.0 |
azapi | ~>1.10.0 |
azuread | ~> 2.45.0 |
azurerm | >= 3.79.0 |
Modules
No modules.
Resources
Name | Type |
---|---|
azapi_resource.container | resource |
azuread_application.building_blocks | resource |
azuread_application_password.building_blocks_application_pw | resource |
azuread_service_principal.building_blocks_spn | resource |
azurerm_role_assignment.building_blocks | resource |
local_file.backend | resource |
local_file.provider | resource |
time_rotating.building_blocks_secret_rotation | resource |
azurerm_role_definition.builtin | data source |
azurerm_storage_account.tfstates | data source |
azurerm_subscription.current | data source |
azurerm_subscription.sta_subscription | data source |
Inputs
Name | Description | Type | Default | Required |
---|---|---|---|---|
backend_tf_config_path | n/a | string | n/a | yes |
deployment_scope | The scope where this service principal have access on. Usually in the format of '/providers/Microsoft.Management/managementGroups/0000-0000-0000' | string | n/a | yes |
provider_tf_config_path | n/a | string | n/a | yes |
storage_account_resource_id | This is the ID of the storage account resource and it retrievable via panel. It is in the format of '/subscription/<sub_id>/resourcegroups/<rg_name>/... | string | n/a | yes |
Outputs
Name | Description |
---|---|
backend_tf | Generates a config.tf that can be dropped into meshStack's BuildingBlock Definition as an encrypted file input to configure this building block. |
provider_tf | Generates a config.tf that can be dropped into meshStack's BuildingBlockDefinition as an encrypted file input to configure this building block. |