run-common

claranet/run-common/azurerm

Terraform Module HCL AZURERM

Terraform module composition (feature) to setup Claranet MSP Azure common tools

Install

module "run-common" {

source = "claranet/run-common/azurerm"

version = "7.3.1"

}

plain text: /constructs/tfmod-claranet-run-common-azurerm/install.txt

⭐ Source on GitHub 📦 Registry page

README

DEPRECATED - Azure RUN Common feature ![Changelog](CHANGELOG.md) ![Notice](NOTICE) ![Apache V2 License](LICENSE) ![TF Registry](https://registry.terraform.io/modules/claranet/run-common/azurerm/) | ⚠ This module is deprecated, please use run module | |--| A Terraform modules composition (feature) which includes services needed for Claranet RUN/MSP. It includes: Log Management with following resources Log Analytics Workspace Storage Account with SAS Token to upload logs to Key Vault FAME monitoring function for additional metrics. Built-in metrics sent: fame.azure.application_gateway.instances: number of Application Gateway instances fame.azure.backup.file_share: number of successful file share backups fame.azure.backup.vm: number of successful virtual machines backups fame.azure.virtual_ne

Inputs (50)

Name	Type	Description	Default
environment	string	Environment name	required
resource_group_name	string	Resource Group the resources will belong to	required
monitoring_function_splunk_token	string	Access Token to send metrics to Splunk Observability	required
client_name	string	Client name	required
location	string	Azure location.	required
stack	string	Stack name	required
keyvault_admin_objects_ids	list(string)	Ids of the objects that can do all operations on all keys, secrets and certifica	`[]`
monitoring_function_zip_package_path	string	Zip package path for monitoring function	`"https://github.com/claranet/fame/releas`
use_caf_naming	bool	Use the Azure CAF naming provider to generate default resource name. `*custom_na	`true`
logs_storage_account_custom_name	string	Storage Account for logs custom name. Empty by default, using naming convention.	`""`
keyvault_sku	string	The Name of the SKU used for this Key Vault. Possible values are "standard" and	`"standard"`
monitoring_function_extra_application_settings	map(string)	Extra application settings to set on monitoring Function	`{}`
keyvault_enabled_for_deployment	bool	Boolean flag to specify whether Azure Virtual Machines are permitted to retrieve	`false`
keyvault_enabled_for_disk_encryption	bool	Boolean flag to specify whether Azure Disk Encryption is permitted to retrieve s	`false`
keyvault_logs_categories	list(string)	Log categories to send to destinations. All by default.	`null`
keyvault_logs_metrics_categories	list(string)	Metrics categories to send to destinations. All by default.	`null`
logs_tier_to_archive_after_days_since_modification_greater_than	number	Change blob tier to Archive after x days without modification	`90`
keyvault_reader_objects_ids	list(string)	Ids of the objects that can read all keys, secrets and certificates	`[]`
logs_storage_account_archived_logs_fileshare_quota	number	The maximum size in GB of the archived-logs file share, default is 5120	`null`
monitoring_function_app_service_plan_name	string	FAME App Service Plan custom name. Empty by default, using naming convention.	`null`
log_analytics_workspace_extra_tags	map(string)	Extra tags to add to the Log Analytics Workspace	`{}`
keyvault_resource_group_name	string	Resource Group the Key Vault will belong to. Will use `resource_group_name` if n	`""`
keyvault_enabled_for_template_deployment	bool	Boolean flag to specify whether Azure Resource Manager is permitted to retrieve	`false`
logs_storage_account_enable_archived_logs_fileshare	bool	Enable/disable archived-logs file share creation	`false`
logs_storage_account_archived_logs_fileshare_name	string	Name of the file share in which externalized logs are stored	`"archived-logs"`
monitoring_function_metrics_extra_dimensions	map(string)	Extra dimensions sent with metrics	`{}`
… and 10 more inputs

Outputs (40)

keyvault_name — Name of the Key Vault

monitoring_function_function_app_identity — Identity block output of the Function App

monitoring_function_storage_account_name — Name of the associated Storage Account, empty if connection string provided

monitoring_function_storage_queries_table_name — Name of the table in the Storage Account, empty if connection string provided

log_analytics_workspace_secondary_key — The Secondary shared key for the Log Analytics Workspace.

logs_storage_account_id — Id of the dedicated Storage Account

logs_storage_account_secondary_access_key — Secondary connection string of the logs Storage Account, empty if connection string provided

logs_storage_account_sas_token — SAS Token generated for logs access on Storage Account with full permissions on containers and objec

terraform_module — Information about this Terraform module

monitoring_function_storage_account_id — Id of the associated Storage Account, empty if connection string provided

monitoring_function_function_app_outbound_ip_addresses — Outbound IP adresses of the created Function App

log_analytics_workspace_id — The Log Analytics Workspace ID.

log_analytics_workspace_name — The Log Analytics Workspace name.

monitoring_function_application_insights_app_id — App id of the associated Application Insights

log_analytics_workspace_guid — The Log Analytics Workspace GUID.

logs_storage_account_secondary_connection_string — Secondary connection string of the logs Storage Account, empty if connection string provided

logs_storage_account_archived_logs_fileshare_name — Name of the file share in which externalized logs are stored

monitoring_function_app_service_plan_name — Name of the created App Service Plan

monitoring_function_storage_account_secondary_connection_string — Secondary connection string of the associated Storage Account, empty if connection string provided

monitoring_function_storage_account_secondary_access_key — Secondary connection string of the associated Storage Account, empty if connection string provided

monitoring_function_application_insights_instrumentation_key — Instrumentation key of the associated Application Insights

monitoring_function_application_insights_application_type — Application Type of the associated Application Insights

monitoring_function_storage_account_primary_access_key — Primary connection string of the associated Storage Account, empty if connection string provided

monitoring_function_application_insights_name — Name of the associated Application Insights

keyvault_resource_group_name — Resource Group the Key Vault belongs to

keyvault_id — Id of the Key Vault

log_analytics_workspace_primary_key — The Primary shared key for the Log Analytics Workspace.

logs_storage_account_primary_access_key — Primary connection string of the logs Storage Account, empty if connection string provided

monitoring_function_app_service_plan_id — Id of the created App Service Plan

monitoring_function_storage_account_primary_connection_string — Primary connection string of the associated Storage Account, empty if connection string provided

… and 10 more outputs

Resources (1)

azurerm_role_assignment

Topics & Tags

terraform module claranet azure

Details

FrameworkTerraform Module

LanguageHCL

Version7.3.1

Cloud AZURERM

★ Stars4

Forks8