reliable-web-app-pattern-java/infra/terraform/application.tf at ca304324dd18b7e101c8ceaad751290eef17da38 · Azure/reliable-web-app-pattern-java · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
// ---------------------------------------------------------------------------
//  Production
// ---------------------------------------------------------------------------

# ---------------------
#  Primary App Service
# ---------------------

module "application" {
  count                          = var.environment == "prod" ? 1 : 0
  source                         = "../shared/terraform/modules/app-service"
  resource_group                 = azurerm_resource_group.spoke[0].name
  application_name               = var.application_name
  environment                    = var.environment
  location                       = var.location
  private_dns_resource_group     = azurerm_resource_group.hub[0].name
  appsvc_subnet_id               = module.spoke_vnet[0].subnets[local.app_service_subnet_name].id
  private_endpoint_subnet_id     = module.spoke_vnet[0].subnets[local.private_link_subnet_name].id
  app_insights_connection_string = module.hub_app_insights[0].connection_string
  log_analytics_workspace_id     = module.hub_app_insights[0].log_analytics_workspace_id
  frontdoor_host_name            = module.frontdoor[0].host_name
  frontdoor_profile_uuid         = module.frontdoor[0].resource_guid
  public_network_access_enabled  = false

  identity = {
    type         = "SystemAssigned, UserAssigned"
    identity_ids = [
        azurerm_user_assigned_identity.primary_app_service_identity[0].id
    ]
  }

  contoso_webapp_options = {
    contoso_active_directory_tenant_id      = "@Microsoft.KeyVault(SecretUri=${azurerm_key_vault_secret.contoso_application_tenant_id[0].id})"
    contoso_active_directory_client_id      = "@Microsoft.KeyVault(SecretUri=${azurerm_key_vault_secret.contoso_application_client_id[0].id})"
    contoso_active_directory_client_secret  = "@Microsoft.KeyVault(SecretUri=${azurerm_key_vault_secret.contoso_application_client_secret[0].id})"
    postgresql_database_url                 = "@Microsoft.KeyVault(SecretUri=${azurerm_key_vault_secret.contoso_database_url[0].id})"
    postgresql_database_user                = "@Microsoft.KeyVault(SecretUri=${azurerm_key_vault_secret.contoso_database_admin[0].id})"
    postgresql_database_password            = "@Microsoft.KeyVault(SecretUri=${azurerm_key_vault_secret.contoso_database_admin_password[0].id})"
    redis_host_name                         = module.cache[0].cache_hostname
    redis_port                              = module.cache[0].cache_ssl_port
    redis_user_client_id                    = "@Microsoft.KeyVault(SecretUri=${azurerm_key_vault_secret.primary_redis_user_secret[0].id})"
  }
}

# -----------------------
#  Secondary App Service
# -----------------------

module "secondary_application" {
  count                          = var.environment == "prod" ? 1 : 0
  source                         = "../shared/terraform/modules/app-service"
  resource_group                 = azurerm_resource_group.secondary_spoke[0].name
  application_name               = var.application_name
  environment                    = var.environment
  location                       = var.secondary_location
  private_dns_resource_group     = azurerm_resource_group.hub[0].name
  appsvc_subnet_id               = module.secondary_spoke_vnet[0].subnets[local.app_service_subnet_name].id
  private_endpoint_subnet_id     = module.secondary_spoke_vnet[0].subnets[local.private_link_subnet_name].id
  app_insights_connection_string = module.hub_app_insights[0].connection_string
  log_analytics_workspace_id     = module.hub_app_insights[0].log_analytics_workspace_id
  frontdoor_host_name            = module.frontdoor[0].host_name
  frontdoor_profile_uuid         = module.frontdoor[0].resource_guid
  public_network_access_enabled  = false

  identity = {
    type         = "SystemAssigned, UserAssigned"
    identity_ids = [
        azurerm_user_assigned_identity.secondary_app_service_identity[0].id
    ]
  }

  contoso_webapp_options = {
    contoso_active_directory_tenant_id      = "@Microsoft.KeyVault(SecretUri=${azurerm_key_vault_secret.contoso_application_tenant_id[0].id})"
    contoso_active_directory_client_id      = "@Microsoft.KeyVault(SecretUri=${azurerm_key_vault_secret.contoso_application_client_id[0].id})"
    contoso_active_directory_client_secret  = "@Microsoft.KeyVault(SecretUri=${azurerm_key_vault_secret.contoso_application_client_secret[0].id})"
    postgresql_database_url                 = "@Microsoft.KeyVault(SecretUri=${azurerm_key_vault_secret.secondary_contoso_database_url[0].id})"
    postgresql_database_user                = "@Microsoft.KeyVault(SecretUri=${azurerm_key_vault_secret.contoso_database_admin[0].id})"
    postgresql_database_password            = "@Microsoft.KeyVault(SecretUri=${azurerm_key_vault_secret.contoso_database_admin_password[0].id})"
    redis_host_name                         = module.secondary_cache[0].cache_hostname
    redis_port                              = module.secondary_cache[0].cache_ssl_port
    redis_user_client_id                    = "@Microsoft.KeyVault(SecretUri=${azurerm_key_vault_secret.secondary_redis_user_secret[0].id})"
  }
}

// ---------------------------------------------------------------------------
//  Development
// ---------------------------------------------------------------------------

# -------------------
#  Dev - App Service
# -------------------

module "dev_application" {
  count                          = var.environment == "dev" ? 1 : 0
  source                         = "../shared/terraform/modules/app-service"
  resource_group                 = azurerm_resource_group.dev[0].name
  application_name               = var.application_name
  environment                    = var.environment
  location                       = var.location
  private_dns_resource_group     = null
  appsvc_subnet_id               = null
  private_endpoint_subnet_id     = null
  app_insights_connection_string = module.dev_app_insights[0].connection_string
  log_analytics_workspace_id     = module.dev_app_insights[0].log_analytics_workspace_id
  frontdoor_host_name            = module.dev_frontdoor[0].host_name
  frontdoor_profile_uuid         = module.dev_frontdoor[0].resource_guid
  public_network_access_enabled  = true

  identity = {
    type         = "SystemAssigned, UserAssigned"
    identity_ids = [
        azurerm_user_assigned_identity.dev_app_service_identity[0].id
    ]
  }

  contoso_webapp_options = {
    contoso_active_directory_tenant_id     = "@Microsoft.KeyVault(SecretUri=${azurerm_key_vault_secret.dev_contoso_application_tenant_id[0].id})"
    contoso_active_directory_client_id     = "@Microsoft.KeyVault(SecretUri=${azurerm_key_vault_secret.dev_contoso_application_client_id[0].id})"
    contoso_active_directory_client_secret = "@Microsoft.KeyVault(SecretUri=${azurerm_key_vault_secret.dev_contoso_application_client_secret[0].id})"
    postgresql_database_url                = "@Microsoft.KeyVault(SecretUri=${azurerm_key_vault_secret.dev_contoso_database_url[0].id})"
    postgresql_database_user               = "@Microsoft.KeyVault(SecretUri=${azurerm_key_vault_secret.dev_contoso_database_admin[0].id})"
    postgresql_database_password           = "@Microsoft.KeyVault(SecretUri=${azurerm_key_vault_secret.dev_contoso_database_admin_password[0].id})"
    redis_host_name                        = module.dev-cache[0].cache_hostname
    redis_port                             = module.dev-cache[0].cache_ssl_port
    redis_user_client_id                   = "@Microsoft.KeyVault(SecretUri=${azurerm_key_vault_secret.dev_redis_user_secret[0].id})"
  }
}