generated from Azure/terraform-azurerm-avm-template
-
Notifications
You must be signed in to change notification settings - Fork 13
/
Copy pathmain.tf
175 lines (139 loc) · 5.57 KB
/
main.tf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
resource "azurerm_private_dns_zone" "this" {
name = var.domain_name
resource_group_name = var.resource_group_name
tags = var.tags
# create the soa_record block only if the var.soa_record is not empty
dynamic "soa_record" {
for_each = var.soa_record != null ? [1] : []
content {
email = var.soa_record.email
expire_time = var.soa_record.expire_time
minimum_ttl = var.soa_record.minimum_ttl
refresh_time = var.soa_record.refresh_time
retry_time = var.soa_record.retry_time
ttl = var.soa_record.ttl
}
}
timeouts {
create = var.timeouts.dns_zones.create
delete = var.timeouts.dns_zones.delete
read = var.timeouts.dns_zones.read
update = var.timeouts.dns_zones.update
}
}
resource "azurerm_private_dns_zone_virtual_network_link" "this" {
for_each = var.virtual_network_links
name = each.value.vnetlinkname
private_dns_zone_name = azurerm_private_dns_zone.this.name
resource_group_name = var.resource_group_name
virtual_network_id = each.value.vnetid
registration_enabled = lookup(each.value, "autoregistration", false)
tags = lookup(each.value, "tags", null)
timeouts {
create = var.timeouts.vnet_links.create
delete = var.timeouts.vnet_links.delete
read = var.timeouts.vnet_links.read
update = var.timeouts.vnet_links.update
}
}
resource "azurerm_private_dns_a_record" "this" {
for_each = var.a_records
name = each.value.name
records = each.value.records
resource_group_name = each.value.resource_group_name
ttl = each.value.ttl
zone_name = each.value.zone_name
tags = lookup(each.value, "tags", null)
depends_on = [azurerm_private_dns_zone.this]
}
resource "azurerm_private_dns_aaaa_record" "this" {
for_each = var.aaaa_records
name = each.value.name
records = each.value.records
resource_group_name = each.value.resource_group_name
ttl = each.value.ttl
zone_name = each.value.zone_name
tags = lookup(each.value, "tags", null)
depends_on = [azurerm_private_dns_zone.this]
}
resource "azurerm_private_dns_cname_record" "this" {
for_each = var.cname_records
name = each.value.name
record = each.value.record
resource_group_name = each.value.resource_group_name
ttl = each.value.ttl
zone_name = each.value.zone_name
tags = lookup(each.value, "tags", null)
depends_on = [azurerm_private_dns_zone.this]
}
resource "azurerm_private_dns_mx_record" "this" {
for_each = var.mx_records
resource_group_name = each.value.resource_group_name
ttl = each.value.ttl
zone_name = each.value.zone_name
name = each.value.name
tags = lookup(each.value, "tags", null)
dynamic "record" {
for_each = each.value.records
content {
exchange = record.value.exchange
preference = record.value.preference
}
}
depends_on = [azurerm_private_dns_zone.this]
}
resource "azurerm_private_dns_ptr_record" "this" {
for_each = var.ptr_records
name = each.value.name
records = each.value.records
resource_group_name = each.value.resource_group_name
ttl = each.value.ttl
zone_name = each.value.zone_name
tags = lookup(each.value, "tags", null)
depends_on = [azurerm_private_dns_zone.this]
}
resource "azurerm_private_dns_srv_record" "this" {
for_each = var.srv_records
name = each.value.name
resource_group_name = each.value.resource_group_name
ttl = each.value.ttl
zone_name = each.value.zone_name
tags = lookup(each.value, "tags", null)
dynamic "record" {
for_each = each.value.records
content {
port = record.value.port
priority = record.value.priority
target = record.value.target
weight = record.value.weight
}
}
depends_on = [azurerm_private_dns_zone.this]
}
resource "azurerm_private_dns_txt_record" "this" {
for_each = var.txt_records
name = each.value.name
resource_group_name = each.value.resource_group_name
ttl = each.value.ttl
zone_name = each.value.zone_name
tags = lookup(each.value, "tags", null)
dynamic "record" {
for_each = each.value.records
content {
value = record.value.value
}
}
depends_on = [azurerm_private_dns_zone.this]
}
resource "azurerm_role_assignment" "this" {
for_each = var.role_assignments
principal_id = each.value.principal_id
scope = azurerm_private_dns_zone.this.id
condition = each.value.condition
condition_version = each.value.condition_version
delegated_managed_identity_resource_id = each.value.delegated_managed_identity_resource_id
principal_type = each.value.principal_type
role_definition_id = strcontains(lower(each.value.role_definition_id_or_name), lower(local.role_definition_resource_substring)) ? each.value.role_definition_id_or_name : null
role_definition_name = strcontains(lower(each.value.role_definition_id_or_name), lower(local.role_definition_resource_substring)) ? null : each.value.role_definition_id_or_name
skip_service_principal_aad_check = each.value.skip_service_principal_aad_check
}