From cc09748daa7e87769e78d0699d2cbb57d98c4304 Mon Sep 17 00:00:00 2001
From: Jan-Hendrik Boll <jboll@redhat.com>
Date: Thu, 14 Nov 2024 10:37:55 +0100
Subject: [PATCH] Use endpoint module for cosmosdb

---
 .../modules/private-endpoint.bicep            |  5 ++
 dev-infrastructure/modules/rp-cosmos.bicep    | 62 +++----------------
 2 files changed, 14 insertions(+), 53 deletions(-)

diff --git a/dev-infrastructure/modules/private-endpoint.bicep b/dev-infrastructure/modules/private-endpoint.bicep
index 84acff45e..e446e52cb 100644
--- a/dev-infrastructure/modules/private-endpoint.bicep
+++ b/dev-infrastructure/modules/private-endpoint.bicep
@@ -3,12 +3,14 @@ param location string
 @description('The service type the private endpoint is created for')
 @allowed([
   'eventgrid'
+  'cosmosdb'
 ])
 param serviceType string
 
 @description('The group id of the private endpoint service')
 @allowed([
   'topicspace'
+  'Sql'
 ])
 param groupId string
 
@@ -25,6 +27,9 @@ var endpointConfig = {
   eventgrid: {
     topicspace: 'privatelink.ts.eventgrid.azure.net'
   }
+  cosmosdb: {
+    Sql: 'privatelink.documents.azure.com'
+  }
 }
 
 resource eventGridPrivateEndpointDnsZone 'Microsoft.Network/privateDnsZones@2020-06-01' = {
diff --git a/dev-infrastructure/modules/rp-cosmos.bicep b/dev-infrastructure/modules/rp-cosmos.bicep
index 9695aff95..c125de5f2 100644
--- a/dev-infrastructure/modules/rp-cosmos.bicep
+++ b/dev-infrastructure/modules/rp-cosmos.bicep
@@ -82,59 +82,15 @@ resource cosmosDbAccount 'Microsoft.DocumentDB/databaseAccounts@2023-11-15' = {
   }
 }
 
-resource cosmosDbPrivateEndpoint 'Microsoft.Network/privateEndpoints@2023-09-01' = {
-  name: '${name}-private-endpoint'
-  location: location
-  properties: {
-    privateLinkServiceConnections: [
-      {
-        name: '${name}-private-endpoint'
-        properties: {
-          privateLinkServiceId: cosmosDbAccount.id
-          groupIds: [
-            'Sql'
-          ]
-        }
-      }
-    ]
-    subnet: {
-      id: aksNodeSubnetId
-    }
-  }
-}
-
-resource cosmosPrivateEndpointDnsZone 'Microsoft.Network/privateDnsZones@2020-06-01' = {
-  // https://github.com/Azure/bicep/issues/12482
-  // There is no environments().suffixes constant for this
-  name: 'privatelink.documents.azure.com'
-  location: 'global'
-  properties: {}
-}
-
-resource cosmosPrivateEndpointDnsZoneLink 'Microsoft.Network/privateDnsZones/virtualNetworkLinks@2020-06-01' = {
-  parent: cosmosPrivateEndpointDnsZone
-  name: 'link'
-  location: 'global'
-  properties: {
-    registrationEnabled: false
-    virtualNetwork: {
-      id: vnetId
-    }
-  }
-}
-
-resource cosmosPrivateEndpointDnsGroup 'Microsoft.Network/privateEndpoints/privateDnsZoneGroups@2023-09-01' = {
-  parent: cosmosDbPrivateEndpoint
-  name: '${name}-dns-group'
-  properties: {
-    privateDnsZoneConfigs: [
-      {
-        name: 'config1'
-        properties: {
-          privateDnsZoneId: cosmosPrivateEndpointDnsZone.id
-        }
-      }
-    ]
+module serviceCosmosdbPrivateEndpoint '../modules/private-endpoint.bicep' = {
+  name: '${deployment().name}-svcs-kv-pe'
+  params: {
+    location: location
+    subnetIds: [aksNodeSubnetId]
+    vnetId: vnetId
+    privateLinkServiceId: cosmosDbAccount.id
+    serviceType: 'cosmosdb'
+    groupId: 'Sql'
   }
 }