reorganize, add scaffold folder
update readmes clean up tf provider add readme and initial templates add initial pass at readmes more readme updates update various quickstarts finish cleaning up 101s more updates lots fo template updates add remaining more updates
This commit is contained in:
Joey Lorich
11
quickstart/201-web-app-docker-acr/acr.tf
Normal file
11
quickstart/201-web-app-docker-acr/acr.tf
Normal file
@ -0,0 +1,11 @@
|
||||
locals {
|
||||
acr_name = "${replace(var.dns_prefix, "-", "")}${replace(var.name, "-", "")}acr"
|
||||
}
|
||||
|
||||
resource "azurerm_container_registry" "default" {
|
||||
name = "${local.acr_name}"
|
||||
resource_group_name = "${azurerm_resource_group.default.name}"
|
||||
location = "${azurerm_resource_group.default.location}"
|
||||
sku = "Standard"
|
||||
admin_enabled = false
|
||||
}
|
||||
27
quickstart/201-web-app-docker-acr/app_service.tf
Normal file
27
quickstart/201-web-app-docker-acr/app_service.tf
Normal file
@ -0,0 +1,27 @@
|
||||
|
||||
resource "azurerm_app_service_plan" "default" {
|
||||
name = "${var.name}-plan"
|
||||
location = "${azurerm_resource_group.default.location}"
|
||||
resource_group_name = "${azurerm_resource_group.default.name}"
|
||||
kind = "Linux"
|
||||
|
||||
# Reserved must be set to true for Linux App Service Plans
|
||||
reserved = true
|
||||
|
||||
sku {
|
||||
tier = "${var.plan_tier}"
|
||||
size = "${var.plan_sku}"
|
||||
}
|
||||
}
|
||||
|
||||
resource "azurerm_app_service" "default" {
|
||||
name = "${var.dns_prefix}-${var.name}-${var.environment}-app"
|
||||
location = "${azurerm_resource_group.default.location}"
|
||||
resource_group_name = "${azurerm_resource_group.default.name}"
|
||||
app_service_plan_id = "${azurerm_app_service_plan.default.id}"
|
||||
|
||||
site_config {
|
||||
always_on = true
|
||||
linux_fx_version = "DOCKER|nginxdemos/hello"
|
||||
}
|
||||
}
|
||||
@ -0,0 +1,5 @@
|
||||
resource "azurerm_role_assignment" "acr" {
|
||||
scope = "${data.azurerm_subscription.current.id}/resourceGroups/${azurerm_resource_group.default.name}/providers/Microsoft.Web/serverFarms/${azurerm_app_service.default.name}"
|
||||
role_definition_name = "Reader"
|
||||
principal_id = "${azurerm_app_service.default.identity[0].principal_id}"
|
||||
}
|
||||
11
quickstart/201-web-app-docker-acr/main.tf
Normal file
11
quickstart/201-web-app-docker-acr/main.tf
Normal file
@ -0,0 +1,11 @@
|
||||
provider "azurerm" {
|
||||
version = "=1.36.1"
|
||||
}
|
||||
|
||||
# Reference to the current subscription. Used when creating role assignments
|
||||
data "azurerm_subscription" "current" {}
|
||||
|
||||
resource "azurerm_resource_group" "default" {
|
||||
name = "${var.name}-${var.environment}-rg"
|
||||
location = "${var.location}"
|
||||
}
|
||||
237
quickstart/201-web-app-docker-acr/readme.md
Normal file
237
quickstart/201-web-app-docker-acr/readme.md
Normal file
@ -0,0 +1,237 @@
|
||||
# Containerized Web App with an Azure Container Registry
|
||||
|
||||
|
||||
This template deploys an [Azure App Service](https://www.terraform.io/docs/providers/azurerm/r/app_service.html) with a system-assigned identity running Linux configured for a containerized application. This template also deploys an Azure Container Registry and grants read access to the Web App.
|
||||
|
||||
## Resources
|
||||
|
||||
| Terraform Resource Type | Description |
|
||||
| - | - |
|
||||
| `azurerm_resource_group` | The resource group all resources are deployed into |
|
||||
| `azurerm_app_service_plan` | The underlying plan that the web app will run on |
|
||||
| `azurerm_app_service` | The Linux web app |
|
||||
| `azurerm_container_registry` | The Azure Container Registry instance |
|
||||
| `azurerm_role_assignment` | The role assignment between the container registry and the app service |
|
||||
|
||||
## Variables
|
||||
|
||||
| Name | Description |
|
||||
|-|-|
|
||||
| `name` | Name of the deployment |
|
||||
| `environment` | The depolyment environment name (used for postfixing resource names) |
|
||||
| `dns_prefix` | A prefix for globally-unique dns-based resources |
|
||||
| `location` | The Azure Region to deploy these resources in |
|
||||
| `plan_tier` | The App Service Plan tier to deploy |
|
||||
| `plan_sku` | The App Service Plan SKU to deploy|
|
||||
|
||||
|
||||
## Example
|
||||
|
||||
```bash
|
||||
> terraform plan
|
||||
Refreshing Terraform state in-memory prior to plan...
|
||||
The refreshed state will be used to calculate this plan, but will not be
|
||||
persisted to local or remote state storage.
|
||||
|
||||
data.azurerm_subscription.current: Refreshing state...
|
||||
|
||||
------------------------------------------------------------------------
|
||||
|
||||
An execution plan has been generated and is shown below.
|
||||
Resource actions are indicated with the following symbols:
|
||||
+ create
|
||||
|
||||
Terraform will perform the following actions:
|
||||
|
||||
# azurerm_app_service.default will be created
|
||||
+ resource "azurerm_app_service" "default" {
|
||||
+ app_service_plan_id = (known after apply)
|
||||
+ app_settings = (known after apply)
|
||||
+ client_affinity_enabled = (known after apply)
|
||||
+ default_site_hostname = (known after apply)
|
||||
+ enabled = true
|
||||
+ https_only = false
|
||||
+ id = (known after apply)
|
||||
+ location = "westus2"
|
||||
+ name = "tfq-demo-tfquickstart-dev-app"
|
||||
+ outbound_ip_addresses = (known after apply)
|
||||
+ possible_outbound_ip_addresses = (known after apply)
|
||||
+ resource_group_name = "demo-tfquickstart-dev-rg"
|
||||
+ site_credential = (known after apply)
|
||||
+ source_control = (known after apply)
|
||||
+ tags = (known after apply)
|
||||
|
||||
+ auth_settings {
|
||||
+ additional_login_params = (known after apply)
|
||||
+ allowed_external_redirect_urls = (known after apply)
|
||||
+ default_provider = (known after apply)
|
||||
+ enabled = (known after apply)
|
||||
+ issuer = (known after apply)
|
||||
+ runtime_version = (known after apply)
|
||||
+ token_refresh_extension_hours = (known after apply)
|
||||
+ token_store_enabled = (known after apply)
|
||||
+ unauthenticated_client_action = (known after apply)
|
||||
|
||||
+ active_directory {
|
||||
+ allowed_audiences = (known after apply)
|
||||
+ client_id = (known after apply)
|
||||
+ client_secret = (sensitive value)
|
||||
}
|
||||
|
||||
+ facebook {
|
||||
+ app_id = (known after apply)
|
||||
+ app_secret = (sensitive value)
|
||||
+ oauth_scopes = (known after apply)
|
||||
}
|
||||
|
||||
+ google {
|
||||
+ client_id = (known after apply)
|
||||
+ client_secret = (sensitive value)
|
||||
+ oauth_scopes = (known after apply)
|
||||
}
|
||||
|
||||
+ microsoft {
|
||||
+ client_id = (known after apply)
|
||||
+ client_secret = (sensitive value)
|
||||
+ oauth_scopes = (known after apply)
|
||||
}
|
||||
|
||||
+ twitter {
|
||||
+ consumer_key = (known after apply)
|
||||
+ consumer_secret = (sensitive value)
|
||||
}
|
||||
}
|
||||
|
||||
+ connection_string {
|
||||
+ name = (known after apply)
|
||||
+ type = (known after apply)
|
||||
+ value = (sensitive value)
|
||||
}
|
||||
|
||||
+ identity {
|
||||
+ identity_ids = (known after apply)
|
||||
+ principal_id = (known after apply)
|
||||
+ tenant_id = (known after apply)
|
||||
+ type = (known after apply)
|
||||
}
|
||||
|
||||
+ logs {
|
||||
+ application_logs {
|
||||
+ azure_blob_storage {
|
||||
+ level = (known after apply)
|
||||
+ retention_in_days = (known after apply)
|
||||
+ sas_url = (sensitive value)
|
||||
}
|
||||
}
|
||||
|
||||
+ http_logs {
|
||||
+ azure_blob_storage {
|
||||
+ retention_in_days = (known after apply)
|
||||
+ sas_url = (sensitive value)
|
||||
}
|
||||
|
||||
+ file_system {
|
||||
+ retention_in_days = (known after apply)
|
||||
+ retention_in_mb = (known after apply)
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
+ site_config {
|
||||
+ always_on = true
|
||||
+ dotnet_framework_version = "v4.0"
|
||||
+ ftps_state = (known after apply)
|
||||
+ http2_enabled = false
|
||||
+ ip_restriction = (known after apply)
|
||||
+ linux_fx_version = "DOCKER|nginxdemos/hello"
|
||||
+ local_mysql_enabled = (known after apply)
|
||||
+ managed_pipeline_mode = (known after apply)
|
||||
+ min_tls_version = (known after apply)
|
||||
+ remote_debugging_enabled = false
|
||||
+ remote_debugging_version = (known after apply)
|
||||
+ scm_type = "None"
|
||||
+ websockets_enabled = (known after apply)
|
||||
+ windows_fx_version = (known after apply)
|
||||
|
||||
+ cors {
|
||||
+ allowed_origins = (known after apply)
|
||||
+ support_credentials = (known after apply)
|
||||
}
|
||||
}
|
||||
|
||||
+ storage_account {
|
||||
+ access_key = (sensitive value)
|
||||
+ account_name = (known after apply)
|
||||
+ mount_path = (known after apply)
|
||||
+ name = (known after apply)
|
||||
+ share_name = (known after apply)
|
||||
+ type = (known after apply)
|
||||
}
|
||||
}
|
||||
|
||||
# azurerm_app_service_plan.default will be created
|
||||
+ resource "azurerm_app_service_plan" "default" {
|
||||
+ app_service_environment_id = (known after apply)
|
||||
+ id = (known after apply)
|
||||
+ kind = "Linux"
|
||||
+ location = "westus2"
|
||||
+ maximum_elastic_worker_count = (known after apply)
|
||||
+ maximum_number_of_workers = (known after apply)
|
||||
+ name = "demo-tfquickstart-plan"
|
||||
+ per_site_scaling = (known after apply)
|
||||
+ reserved = true
|
||||
+ resource_group_name = "demo-tfquickstart-dev-rg"
|
||||
+ tags = (known after apply)
|
||||
|
||||
+ properties {
|
||||
+ app_service_environment_id = (known after apply)
|
||||
+ per_site_scaling = (known after apply)
|
||||
+ reserved = (known after apply)
|
||||
}
|
||||
|
||||
+ sku {
|
||||
+ capacity = (known after apply)
|
||||
+ size = "S1"
|
||||
+ tier = "Standard"
|
||||
}
|
||||
}
|
||||
|
||||
# azurerm_container_registry.default will be created
|
||||
+ resource "azurerm_container_registry" "default" {
|
||||
+ admin_enabled = false
|
||||
+ admin_password = (sensitive value)
|
||||
+ admin_username = (known after apply)
|
||||
+ id = (known after apply)
|
||||
+ location = "westus2"
|
||||
+ login_server = (known after apply)
|
||||
+ name = "tfqdemotfquickstartacr"
|
||||
+ network_rule_set = (known after apply)
|
||||
+ resource_group_name = "demo-tfquickstart-dev-rg"
|
||||
+ sku = "Standard"
|
||||
+ tags = (known after apply)
|
||||
}
|
||||
|
||||
# azurerm_resource_group.default will be created
|
||||
+ resource "azurerm_resource_group" "default" {
|
||||
+ id = (known after apply)
|
||||
+ location = "westus2"
|
||||
+ name = "demo-tfquickstart-dev-rg"
|
||||
+ tags = (known after apply)
|
||||
}
|
||||
|
||||
# azurerm_role_assignment.acr will be created
|
||||
+ resource "azurerm_role_assignment" "acr" {
|
||||
+ id = (known after apply)
|
||||
+ name = (known after apply)
|
||||
+ principal_id = (known after apply)
|
||||
+ principal_type = (known after apply)
|
||||
+ role_definition_id = (known after apply)
|
||||
+ role_definition_name = "Reader"
|
||||
+ scope = "/subscriptions/b0e04a4a-a321-4b66-b8fd-13715262ba3c/resourceGroups/demo-tfquickstart-dev-rg/providers/Microsoft.Web/serverFarms/tfq-demo-tfquickstart-dev-app"
|
||||
+ skip_service_principal_aad_check = (known after apply)
|
||||
}
|
||||
|
||||
Plan: 5 to add, 0 to change, 0 to destroy.
|
||||
|
||||
------------------------------------------------------------------------
|
||||
```
|
||||
35
quickstart/201-web-app-docker-acr/variables.tf
Normal file
35
quickstart/201-web-app-docker-acr/variables.tf
Normal file
@ -0,0 +1,35 @@
|
||||
variable "name" {
|
||||
type = "string"
|
||||
description = "Location of the azure resource group."
|
||||
default = "demo-tfquickstart"
|
||||
}
|
||||
|
||||
variable "environment" {
|
||||
type = "string"
|
||||
description = "Name of the deployment environment"
|
||||
default = "dev"
|
||||
}
|
||||
|
||||
variable "location" {
|
||||
type = "string"
|
||||
description = "Location to deploy the resoruce group"
|
||||
default = "West US 2"
|
||||
}
|
||||
|
||||
variable "dns_prefix" {
|
||||
type = "string"
|
||||
description = "A prefix for any dns based resources"
|
||||
default = "tfq"
|
||||
}
|
||||
|
||||
variable "plan_tier" {
|
||||
type = "string"
|
||||
description = "The tier of app service plan to create"
|
||||
default = "Standard"
|
||||
}
|
||||
|
||||
variable "plan_sku" {
|
||||
type = "string"
|
||||
description = "The sku of app service plan to create"
|
||||
default = "S1"
|
||||
}
|
||||
Reference in New Issue
Block a user