Skip to content

README.md

Latest commit

 

History

History
32 lines (21 loc) · 1.73 KB

README.md

File metadata and controls

32 lines (21 loc) · 1.73 KB

cdn-frontdoor-profile

A Terraform module to create the parent resource for up to 25 Front Door Endpoint configurations.

The Premium SKU (required for private networking) attracts a considerable standing charge, so it is preferable to deploy as shared infrastructure (e.g. using a Live/Non-live pattern, with environments cohabiting). This is why the profile has been separated into its own module, since it is likely to be deployed separately from the individual endpoint configurations.

⚠️ All Front Door configuration from the Profile downwards must reside within the same Azure subscription.

Features

  • Customer managed certificates are supported by this module. Certificates using elliptic curve cryptography are not yet supported by Front Door. The Key Vault storing the certificate must also reside in the same Azure subscription as Front Door. You may use the acme-certificate module to create a compliant certificate (key_type = 4096).

Example Usage

module "frontdoor_profile" {
  source = "../../dtos-devops-templates/infrastructure/modules/cdn-frontdoor-profile"

  log_analytics_workspace_id = module.log_analytics_workspace_hub[local.primary_region].id

  certificate_secrets = {
    mycert = data.azurerm_key_vault_certificate["mycert"].versionless_id
  }

  name                = "afd-nonlive-myproject-myapp"
  resource_group_name = "my-project-non-live"

  tags = var.tags
}

Terraform documentation

For the list of inputs, outputs, resources... check the terraform module documentation.