Add quickstart
This commit is contained in:
John Downs
166
quickstart/101-front-door-standard-premium/readme.md
Normal file
166
quickstart/101-front-door-standard-premium/readme.md
Normal file
@ -0,0 +1,166 @@
|
||||
# Azure Front Door Standard/Premium
|
||||
|
||||
This template deploys an [Azure Front Door Standard/Premium profile](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/cdn_frontdoor_profile) with classic application and network rules.
|
||||
|
||||
## Resources
|
||||
|
||||
| Terraform Resource Type | Description |
|
||||
| - | - |
|
||||
| `azurerm_resource_group` | The resource group for all the deployed resources.|
|
||||
| `azurerm_cdn_frontdoor_profile` | The Front Door profile. |
|
||||
| `azurerm_cdn_frontdoor_endpoint` | The Front Door endpoint. |
|
||||
| `azurerm_cdn_frontdoor_origin_group` | The Front Door origin group. |
|
||||
| `azurerm_cdn_frontdoor_origin` | The Front Door origin, which refers to the App Service app. |
|
||||
| `azurerm_cdn_frontdoor_route` | The Front Door route. |
|
||||
| `azurerm_service_plan` | The App Service plan. |
|
||||
| `azurerm_windows_web_app` | The App Service app. |
|
||||
|
||||
## Variables
|
||||
|
||||
| Name | Description |
|
||||
|-|-|
|
||||
| `location` | The location for all the deployed resources. |
|
||||
| `resource_group_name` | The name of the resource group. |
|
||||
| `app_service_plan_sku_name` | The SKU for the App Service plan. |
|
||||
| `app_service_plan_sku_tier_name` | The name of the tier that the App Service plan SKU is in. |
|
||||
| `app_service_plan_capacity` | The capacity (number of worker instances) for the App Service plan. |
|
||||
| `front_door_sku_name` | The name of the SKU for the Front Door profile. |
|
||||
|
||||
## Example
|
||||
|
||||
```bash
|
||||
$ terraform plan -out main.tfplan
|
||||
|
||||
Terraform used the selected providers to generate the following execution plan. Resource actions are indicated with the following symbols:
|
||||
+ create
|
||||
|
||||
Terraform will perform the following actions:
|
||||
|
||||
# azurerm_firewall.fw will be created
|
||||
+ resource "azurerm_firewall" "fw" {
|
||||
+ id = (known after apply)
|
||||
+ location = "eastus"
|
||||
+ name = "testfirewall"
|
||||
+ resource_group_name = "test-resources"
|
||||
+ sku_name = (known after apply)
|
||||
+ sku_tier = (known after apply)
|
||||
+ threat_intel_mode = "Alert"
|
||||
|
||||
+ ip_configuration {
|
||||
+ name = "configuration"
|
||||
+ private_ip_address = (known after apply)
|
||||
+ public_ip_address_id = (known after apply)
|
||||
+ subnet_id = (known after apply)
|
||||
}
|
||||
}
|
||||
|
||||
# azurerm_firewall_application_rule_collection.app-rc will be created
|
||||
+ resource "azurerm_firewall_application_rule_collection" "app-rc" {
|
||||
+ action = "Allow"
|
||||
+ azure_firewall_name = "testfirewall"
|
||||
+ id = (known after apply)
|
||||
+ name = "apptestcollection"
|
||||
+ priority = 100
|
||||
+ resource_group_name = "test-resources"
|
||||
|
||||
+ rule {
|
||||
+ name = "testrule"
|
||||
+ source_addresses = [
|
||||
+ "10.0.0.0/16",
|
||||
]
|
||||
+ target_fqdns = [
|
||||
+ "*.google.com",
|
||||
]
|
||||
|
||||
+ protocol {
|
||||
+ port = 443
|
||||
+ type = "Https"
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
# azurerm_firewall_network_rule_collection.net-rc will be created
|
||||
+ resource "azurerm_firewall_network_rule_collection" "net-rc" {
|
||||
+ action = "Allow"
|
||||
+ azure_firewall_name = "testfirewall"
|
||||
+ id = (known after apply)
|
||||
+ name = "apptestcollection"
|
||||
+ priority = 100
|
||||
+ resource_group_name = "test-resources"
|
||||
|
||||
+ rule {
|
||||
+ destination_addresses = [
|
||||
+ "8.8.4.4",
|
||||
+ "8.8.8.8",
|
||||
]
|
||||
+ destination_fqdns = []
|
||||
+ destination_ip_groups = []
|
||||
+ destination_ports = [
|
||||
+ "53",
|
||||
]
|
||||
+ name = "dnsrule"
|
||||
+ protocols = [
|
||||
+ "TCP",
|
||||
+ "UDP",
|
||||
]
|
||||
+ source_addresses = [
|
||||
+ "10.0.0.0/16",
|
||||
]
|
||||
+ source_ip_groups = []
|
||||
}
|
||||
}
|
||||
|
||||
# azurerm_public_ip.pip will be created
|
||||
+ resource "azurerm_public_ip" "pip" {
|
||||
+ allocation_method = "Static"
|
||||
+ availability_zone = (known after apply)
|
||||
+ fqdn = (known after apply)
|
||||
+ id = (known after apply)
|
||||
+ idle_timeout_in_minutes = 4
|
||||
+ ip_address = (known after apply)
|
||||
+ ip_version = "IPv4"
|
||||
+ location = "eastus"
|
||||
+ name = "testpip"
|
||||
+ resource_group_name = "test-resources"
|
||||
+ sku = "Standard"
|
||||
+ zones = (known after apply)
|
||||
}
|
||||
|
||||
# azurerm_resource_group.rg will be created
|
||||
+ resource "azurerm_resource_group" "rg" {
|
||||
+ id = (known after apply)
|
||||
+ location = "eastus"
|
||||
+ name = "test-resources"
|
||||
}
|
||||
|
||||
# azurerm_subnet.subnet will be created
|
||||
+ resource "azurerm_subnet" "subnet" {
|
||||
+ address_prefix = (known after apply)
|
||||
+ address_prefixes = [
|
||||
+ "10.0.1.0/24",
|
||||
]
|
||||
+ enforce_private_link_endpoint_network_policies = false
|
||||
+ enforce_private_link_service_network_policies = false
|
||||
+ id = (known after apply)
|
||||
+ name = "AzureFirewallSubnet"
|
||||
+ resource_group_name = "test-resources"
|
||||
+ virtual_network_name = "testvnet"
|
||||
}
|
||||
|
||||
# azurerm_virtual_network.vnet will be created
|
||||
+ resource "azurerm_virtual_network" "vnet" {
|
||||
+ address_space = [
|
||||
+ "10.0.0.0/16",
|
||||
]
|
||||
+ dns_servers = (known after apply)
|
||||
+ guid = (known after apply)
|
||||
+ id = (known after apply)
|
||||
+ location = "eastus"
|
||||
+ name = "testvnet"
|
||||
+ resource_group_name = "test-resources"
|
||||
+ subnet = (known after apply)
|
||||
+ vm_protection_enabled = false
|
||||
}
|
||||
|
||||
Plan: 7 to add, 0 to change, 0 to destroy.
|
||||
```
|
||||
Reference in New Issue
Block a user