terraform-azure-mcaf-container-group

Terraform module to generate a container group

Requirements

Name	Version
terraform	>= 1.8
azurerm	>= 4

Providers

Name	Version
azurerm	>= 4

Modules

No modules.

Resources

Name	Type
azurerm_container_group.this	resource
azurerm_resource_group.this	resource

Inputs

Name	Description	Type	Default	Required
aci	- image = (Required) - The image to use for the container. - cpu = (Optional) - The CPU to allocate to the container. Defaults to 1. - memory = (Optional) - The memory to allocate to the container. Defaults to 1. - ports = (Required) - A list of ports to expose on the container. - volumes = (Optional) - A map of volumes to mount to the container. - environment_variables = (Optional) - A map of environment variables to set in the container. - secure_environment_variables = (Optional) - A map of secure environment variables to set in the container. - commands = (Optional) - A list of commands to run in the container.	map(object({ image = string name = optional(string) cpu = optional(number, "1") memory = optional(number, "1") ports = list(object({ port = number protocol = string })) volumes = optional(map(object({ mount_path = string name = string read_only = optional(bool, false) empty_dir = optional(bool, false) secret = optional(map(string), null) storage_account_name = optional(string, null) storage_account_key = optional(string, null) share_name = optional(string, null) git_repo = optional(object({ url = optional(string, null) directory = optional(string, null) revision = optional(string, null) })) })), {}) environment_variables = optional(map(string), {}) secure_environment_variables = optional(map(string), {}) commands = optional(list(string), null) }))	n/a	yes
container_group	This object describes the configuration for an Azure Container Instance. - name = (Required) - The name of the container group. - location = (Optional) - The location of the container group. Defaults to the location of the resource group. - resource_group_name = (Optional) - The name of the resource group in which to create the container group. Defaults to the resource group of the resource. - os_type = (Optional) - The operating system type of the container group. Defaults to Linux. - subnet_ids = (Optional) - A list of subnet IDs to use for the container group. - restart_policy = (Optional) - The restart policy for the container group. Defaults to OnFailure. - priority = (Optional) - The priority for the container group. Defaults to Regular. - key_vault_key_id = (Optional) - The key vault key ID to use for the container group. - key_vault_user_assigned_identity_id = (Optional) - The user-assigned identity ID to use for the key vault. - dns_name_label = (Optional) - The DNS name label for the container group. - dns_name_label_reuse_policy = (Optional) - The DNS name label reuse policy for the container group. - role_assignments = (Optional) - A map of role assignments to assign to the container group. - managed_identities = (Optional) - The managed identities to assign to the container group. Example Inputs: hcl module "aci" { name = "mycontainergroup" subnet_ids = [ azurerm_subnet.this.id ] }	object({ name = string location = optional(string) resource_group_name = optional(string) os_type = optional(string, "Linux") subnet_ids = optional(list(string)) restart_policy = optional(string, "OnFailure") priority = optional(string, "Regular") key_vault_key_id = optional(string) key_vault_user_assigned_identity_id = optional(string) dns_name_label = optional(string) dns_name_label_reuse_policy = optional(string) role_assignments = optional(map(object({ principal_id = string role = string }))) managed_identities = optional(object({ system_assigned = optional(bool, false) user_assigned_resource_ids = optional(set(string), []) }), {}) zones = optional(list(string), []) })	n/a	yes
diagnostics_log_analytics	The Log Analytics workspace configuration for diagnostics.	object({ workspace_id = string workspace_key = string })	null	no
dns_name_label	The DNS name label for the container group.	string	null	no
dns_name_servers	A list of DNS name servers to use for the container group.	list(string)	[]	no
exposed_ports	A list of ports to expose on the container group. - port = (Required) - The port to expose. - protocol = (Required) - The protocol to use for the port. Valid options are TCP and UDP.	list(object({ port = number protocol = string }))	[]	no
image_registry_credential	The credentials for the image registry.	map(object({ user_assigned_identity_id = optional(string, null) server = string username = optional(string, null) password = optional(string, null) }))	{}	no
liveness_probe	- exec = (Optional) - The exec probe configuration. - period_seconds = (Required) - The period in seconds between probe checks. - failure_threshold = (Required) - The number of failures before the probe is considered failed. - success_threshold = (Required) - The number of successes before the probe is considered successful. - timeout_seconds = (Required) - The timeout in seconds for the probe. - initial_delay_seconds = (Required) - The initial delay in seconds before the first probe check. - http_get = (Optional) - The HTTP GET probe configuration. - tcp_socket = (Optional) - The TCP socket probe configuration.	object({ exec = object({ command = list(string) }) period_seconds = number failure_threshold = number success_threshold = number timeout_seconds = number initial_delay_seconds = number http_get = object({ path = string port = number http_headers = map(string) }) tcp_socket = object({ port = number }) })	null	no
location	Azure region where the resource should be deployed.	string	null	no
managed_identities	Controls the Managed Identity configuration on this resource. The following properties can be specified: - system_assigned - (Optional) Specifies if the System Assigned Managed Identity should be enabled. - user_assigned_resource_ids - (Optional) Specifies a list of User Assigned Managed Identity resource IDs to be assigned to this resource.	object({ system_assigned = optional(bool, false) user_assigned_resource_ids = optional(set(string), []) })	{}	no
readiness_probe	- exec = (Optional) - The exec probe configuration. - period_seconds = (Required) - The period in seconds between probe checks. - failure_threshold = (Required) - The number of failures before the probe is considered failed. - success_threshold = (Required) - The number of successes before the probe is considered successful. - timeout_seconds = (Required) - The timeout in seconds for the probe. - initial_delay_seconds = (Required) - The initial delay in seconds before the first probe check. - http_get = (Optional) - The HTTP GET probe configuration. - tcp_socket = (Optional) - The TCP socket probe configuration.	object({ exec = object({ command = list(string) }) period_seconds = number failure_threshold = number success_threshold = number timeout_seconds = number initial_delay_seconds = number http_get = object({ path = string port = number http_headers = map(string) }) tcp_socket = object({ port = number }) })	null	no
resource_group_name	The name of the resource group in which to create the Container Registry.	string	null	no
tags	A map of tags to assign to the resource.	map(string)	{}	no

Outputs

Name	Description
fqdn	The FQDN of the container group derived from dns_name_label
ip_address	The IP address allocated to the container group
name	Name of the container group
resource	The container group resource
resource_group_name	Name of the container group resource group
resource_id	Resource ID of Container Group Instance
system_assigned_mi_principal_id	The principal ID of the system assigned managed identity

License

Copyright: Schuberg Philis

Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.