|
| 1 | +provider "azurerm" { |
| 2 | + features {} |
| 3 | +} |
| 4 | + |
| 5 | +data "azurerm_subscription" "current" {} |
| 6 | + |
| 7 | +resource "azurerm_resource_group" "example" { |
| 8 | + name = "${var.prefix}-resources" |
| 9 | + location = "${var.location}" |
| 10 | +} |
| 11 | + |
| 12 | +resource "azurerm_virtual_network" "example" { |
| 13 | + name = "${var.prefix}-vnet" |
| 14 | + address_space = ["10.0.0.0/16"] |
| 15 | + location = azurerm_resource_group.example.location |
| 16 | + resource_group_name = azurerm_resource_group.example.name |
| 17 | +} |
| 18 | + |
| 19 | +resource "azurerm_subnet" "service" { |
| 20 | + name = "service" |
| 21 | + resource_group_name = azurerm_resource_group.example.name |
| 22 | + virtual_network_name = azurerm_virtual_network.example.name |
| 23 | + address_prefix = "10.0.1.0/24" |
| 24 | + |
| 25 | + enforce_private_link_service_network_policies = true |
| 26 | +} |
| 27 | + |
| 28 | +resource "azurerm_subnet" "endpoint" { |
| 29 | + name = "endpoint" |
| 30 | + resource_group_name = azurerm_resource_group.example.name |
| 31 | + virtual_network_name = azurerm_virtual_network.example.name |
| 32 | + address_prefix = "10.0.2.0/24" |
| 33 | + |
| 34 | + enforce_private_link_endpoint_network_policies = true |
| 35 | +} |
| 36 | + |
| 37 | +resource "azurerm_public_ip" "example" { |
| 38 | + name = "${var.prefix}-pip" |
| 39 | + sku = "Standard" |
| 40 | + location = azurerm_resource_group.example.location |
| 41 | + resource_group_name = azurerm_resource_group.example.name |
| 42 | + allocation_method = "Static" |
| 43 | +} |
| 44 | + |
| 45 | +resource "azurerm_lb" "example" { |
| 46 | + name = "${var.prefix}-lb" |
| 47 | + sku = "Standard" |
| 48 | + location = azurerm_resource_group.example.location |
| 49 | + resource_group_name = azurerm_resource_group.example.name |
| 50 | + |
| 51 | + frontend_ip_configuration { |
| 52 | + name = azurerm_public_ip.example.name |
| 53 | + public_ip_address_id = azurerm_public_ip.example.id |
| 54 | + } |
| 55 | +} |
| 56 | + |
| 57 | +resource "azurerm_private_link_service" "example" { |
| 58 | + name = "${var.prefix}-pls" |
| 59 | + location = azurerm_resource_group.example.location |
| 60 | + resource_group_name = azurerm_resource_group.example.name |
| 61 | + |
| 62 | + auto_approval_subscription_ids = [data.azurerm_subscription.current.subscription_id] |
| 63 | + visibility_subscription_ids = [data.azurerm_subscription.current.subscription_id] |
| 64 | + |
| 65 | + nat_ip_configuration { |
| 66 | + name = azurerm_public_ip.example.name |
| 67 | + subnet_id = azurerm_subnet.service.id |
| 68 | + primary = true |
| 69 | + } |
| 70 | + |
| 71 | + load_balancer_frontend_ip_configuration_ids = [azurerm_lb.example.frontend_ip_configuration.0.id] |
| 72 | +} |
| 73 | + |
| 74 | +resource "azurerm_private_endpoint" "example" { |
| 75 | + name = "${var.prefix}-pe" |
| 76 | + location = azurerm_resource_group.example.location |
| 77 | + resource_group_name = azurerm_resource_group.example.name |
| 78 | + subnet_id = azurerm_subnet.endpoint.id |
| 79 | + |
| 80 | + private_service_connection { |
| 81 | + name = "tfex-pls-connection" |
| 82 | + is_manual_connection = false |
| 83 | + private_connection_resource_id = azurerm_private_link_service.example.id |
| 84 | + } |
| 85 | +} |
0 commit comments