Skip to content

Latest commit

 

History

History
170 lines (148 loc) · 13.7 KB

README.md

File metadata and controls

170 lines (148 loc) · 13.7 KB
Raw
resource "azurerm_service_plan" "service_plan" {
  for_each                     = { for app in var.logic_apps : app.name => app if app.app_service_plan_name != null }
  name                         = each.value.app_service_plan_name != null ? each.value.app_service_plan_name : "asp-${each.value.name}"
  resource_group_name          = var.rg_name
  location                     = var.location
  os_type                      = each.value.os_type != null ? each.value.os_type : "Linux"
  sku_name                     = each.value.sku_name
  app_service_environment_id   = each.value.app_service_environment_id != null ? each.value.app_service_environment_id : null
  maximum_elastic_worker_count = each.value.maximum_elastic_worker_count != null ? each.value.maximum_elastic_worker_count : null
  worker_count                 = each.value.worker_count != null ? each.value.worker_count : null
  zone_balancing_enabled       = each.value.zone_balancing_enabled != null ? each.value.zone_balancing_enabled : null
  tags                         = var.tags
}

resource "azurerm_logic_app_standard" "logic_app" {
  depends_on = [azurerm_service_plan.service_plan]
  for_each   = { for app in var.logic_apps : app.name => app if app.app_service_plan_name != null }

  name                       = each.value.name
  location                   = var.location
  resource_group_name        = var.rg_name
  tags                       = var.tags
  app_service_plan_id        = azurerm_service_plan.service_plan[each.key].id
  storage_account_name       = each.value.storage_account_name
  storage_account_access_key = each.value.storage_account_access_key
  use_extension_bundle       = each.value.use_extension_bundle != null ? each.value.use_extension_bundle : null
  bundle_version             = each.value.use_extension_bundle != null ? each.value.bundle_version : null
  client_affinity_enabled    = each.value.client_affinity_enabled != null ? each.value.client_affinity_enabled : null
  client_certificate_mode    = each.value.client_certificate_mode != null ? each.value.client_certificate_mode : null
  enabled                    = each.value.enabled != null ? each.value.enabled : true
  https_only                 = each.value.https_only != null ? each.value.https_only : true
  version                    = each.value.version != null ? each.value.version : null
  virtual_network_subnet_id  = each.value.virtual_network_subnet_id != null ? each.value.virtual_network_subnet_id : null
  app_settings               = each.value.app_settings != null ? each.value.app_settings : null

  dynamic "connection_string" {
    for_each = each.value.connection_string != null ? [each.value.connection_string] : []
    content {
      name  = connection_string.value.name
      type  = connection_string.value.type
      value = connection_string.value.value
    }
  }

  dynamic "site_config" {
    for_each = each.value.site_config != null ? [each.value.site_config] : []
    content {
      always_on                 = site_config.value.always_on != null ? site_config.value.always_on : null
      app_scale_limit           = site_config.value.app_scale_limit != null ? site_config.value.app_scale_limit : null
      elastic_instance_minimum  = site_config.value.elastic_instance_minimum != null ? site_config.value.elastic_instance_minimum : null
      ftps_state                = site_config.value.ftps_state != null ? site_config.value.ftps_state : null
      health_check_path         = site_config.value.health_check_path != null ? site_config.value.health_check_path : null
      http2_enabled             = site_config.value.http2_enabled != null ? site_config.value.http2_enabled : null
      min_tls_version           = site_config.value.min_tls_version != null ? site_config.value.min_tls_version : null
      dotnet_framework_version  = site_config.value.dotnet_framework_version != null ? site_config.value.dotnet_framework_version : null
      scm_type                  = site_config.value.scm_type != null ? site_config.value.scm_type : null
      use_32_bit_worker_process = site_config.value.use_32_bit_worker_process != null ? site_config.value.use_32_bit_worker_process : null
      #      websockets_enabled        = site_config.value.websockets_enabled != null ? site_config.value.websockets_enabled : null

      ip_restriction = [for ipr in site_config.value.ip_restriction : {
        name                      = ipr.name
        ip_address                = ipr.ip_address
        virtual_network_subnet_id = ipr.virtual_network_subnet_id
        priority                  = ipr.priority
        action                    = ipr.action
        headers = [for hdr in ipr.headers : {
          x_azure_fdid      = hdr.x_azure_fdid
          x_fd_health_probe = hdr.x_fd_health_probe
          x_forwarded_for   = hdr.x_forwarded_for
          x_forwarded_host  = hdr.x_forwarded_host
        }]
      }]

      scm_ip_restriction = [for scmr in site_config.value.scm_ip_restriction : {
        name                      = scmr.name
        ip_address                = scmr.ip_address
        virtual_network_subnet_id = scmr.virtual_network_subnet_id
        priority                  = scmr.priority
        action                    = scmr.action
        headers = [for hdr in scmr.headers : {
          x_azure_fdid      = hdr.x_azure_fdid
          x_fd_health_probe = hdr.x_fd_health_probe
          x_forwarded_for   = hdr.x_forwarded_for
          x_forwarded_host  = hdr.x_forwarded_host
        }]
      }]

      dynamic "cors" {
        for_each = site_config.value.cors != null ? [site_config.value.cors] : []
        content {
          allowed_origins     = cors.value.allowed_origins
          support_credentials = cors.value.support_credentials != null ? cors.value.support_credentials : null
        }
      }
    }
  }

  dynamic "identity" {
    for_each = each.value.identity_type == "SystemAssigned" ? [each.value.identity_type] : []
    content {
      type = each.value.identity_type
    }
  }

  dynamic "identity" {
    for_each = each.value.identity_type == "SystemAssigned, UserAssigned" ? [each.value.identity_type] : []
    content {
      type         = each.value.identity_type
      identity_ids = try(each.value.identity_ids, [])
    }
  }


  dynamic "identity" {
    for_each = each.value.identity_type == "UserAssigned" ? [each.value.identity_type] : []
    content {
      type         = each.value.identity_type
      identity_ids = length(try(each.value.identity_ids, [])) > 0 ? each.value.identity_ids : []
    }
  }
}

Requirements

No requirements.

Providers

Name Version
azurerm n/a

Modules

No modules.

Resources

Name Type
azurerm_logic_app_standard.logic_app resource
azurerm_service_plan.service_plan resource

Inputs

Name Description Type Default Required
location The location for this resource to be put in string n/a yes
logic_apps The logic app blocks 
list(object({
    name                         = string
    app_service_plan_name        = optional(string)
    os_type                      = string
    sku_name                     = string
    app_service_environment_id   = optional(string, null)
    maximum_elastic_worker_count = optional(number, null)
    worker_count                 = optional(number, null)
    zone_balancing_enabled       = optional(bool, null)
    storage_account_name         = string
    storage_account_access_key   = optional(string)
    use_extension_bundle         = optional(bool)
    bundle_version               = optional(string)
    client_affinity_enabled      = optional(bool)
    client_certificate_mode      = optional(string)
    enabled                      = optional(bool)
    https_only                   = optional(bool, true)
    version                      = optional(string)
    virtual_network_subnet_id    = optional(string)
    identity_type                = optional(string)
    identity_ids                 = optional(list(string))
    app_settings                 = optional(map(string))

    connection_string = optional(object({
      name  = string
      type  = string
      value = string
    }))

    site_config = optional(object({
      always_on                        = optional(bool)
      app_scale_limit                  = optional(number)
      dotnet_framework_version         = optional(string)
      elastic_instance_minimum         = optional(number)
      ftps_state                       = optional(string)
      health_check_path                = optional(string)
      http2_enabled                    = optional(bool, false)
      scm_use_main_ip_restriction      = optional(bool, false)
      scm_min_tls_version              = optional(string, "1.2")
      scm_type                         = optional(string)
      linux_fx_version                 = optional(string)
      min_tls_version                  = optional(string, "1.2")
      pre_warmed_instance_count        = optional(number)
      public_network_enabled           = optional(bool, false)
      runtime_scale_monitoring_enabled = optional(bool, false)
      use_32_bit_worker_process        = optional(bool)
      vnet_route_all_enabled           = optional(bool)
      websocket_enabled                = optional(bool)

      ip_restriction = optional(list(object({
        name                      = optional(string)
        ip_address                = optional(string)
        service_tag               = optional(string)
        virtual_network_subnet_id = optional(string)
        priority                  = optional(number)
        action                    = optional(string)
        headers = optional(object({
          x_azure_fdid      = optional(string)
          x_fd_health_probe = optional(string)
          x_forwarded_for   = optional(string)
          x_forwarded_host  = optional(string)
        }))
      })), [])

      scm_ip_restriction = optional(list(object({
        name                      = optional(string)
        ip_address                = optional(string)
        service_tag               = optional(string)
        virtual_network_subnet_id = optional(string)
        priority                  = optional(number)
        action                    = optional(string)
        headers = optional(object({
          x_azure_fdid      = optional(string)
          x_fd_health_probe = optional(string)
          x_forwarded_for   = optional(string)
          x_forwarded_host  = optional(string)
        }))
      })), [])

      cors = optional(object({
        allowed_origins     = optional(set(string))
        support_credentials = optional(bool)
      }))
    }))
  }))
 null no
rg_name The name of the resource group, this module does not create a resource group, it is expecting the value of a resource group already exists string n/a yes
tags A map of the tags to use on the resources that are deployed with this module. map(string) n/a yes

Outputs

Name Description
logic_app_custom_domain_verification_ids Custom domain verification IDs for the Logic Apps
logic_app_default_hostnames The default hostnames of the Logic Apps
logic_app_identities Managed Service Identity information for the Logic Apps
logic_app_ids The IDs of the Logic Apps
logic_app_kinds The kinds of the Logic Apps
logic_app_outbound_ip_addresses Comma-separated list of outbound IP addresses for the Logic Apps
logic_app_possible_outbound_ip_addresses Comma-separated list of possible outbound IP addresses for the Logic Apps
logic_app_site_credentials Site-level credentials for publishing to the Logic Apps
logic_app_tenant_ids Tenant IDs for the Service Principal associated with the MSI of the Logic Apps
service_plan_ids The IDs of the service plans
service_plan_kinds The kinds of the service plans
service_plan_names The names of the service plans
service_plan_reserved The reserved property of the service plans