try to set up a private service connection for vnet

pluralsh · Jan 5, 2024 · 611218c · 611218c
1 parent 81ce5e1
commit 611218c
Show file tree

Hide file tree

Showing 2 changed files with 14 additions and 1 deletion.
diff --git a/terraform/clouds/azure/aks.tf b/terraform/clouds/azure/aks.tf
@@ -8,7 +8,6 @@ module "aks" {
   prefix               = var.cluster_name
   os_disk_size_gb      = 60
   sku_tier             = "Standard"
-  rbac_aad             = true
   vnet_subnet_id       = azurerm_subnet.network.id
   node_pools           = {for name, pool in var.node_pools : name => merge({name = name}, pool)}
 

diff --git a/terraform/clouds/azure/postgres.tf b/terraform/clouds/azure/postgres.tf
@@ -32,4 +32,18 @@ module "postgresql" {
   vnet_rules = [
     { name = "subnet1", subnet_id = azurerm_subnet.network.id }
   ]
+}
+
+resource "azurerm_private_endpoint" "pg" {
+  name                = "${local.resource_group.name}-${local.db_name}"
+  location            = local.resource_group.location
+  resource_group_name = local.resource_group.name
+  subnet_id           = azurerm_subnet.network.id
+
+  private_service_connection {
+    name                           = "${local.resource_group.name}-${local.db_name}"
+    private_connection_resource_id = module.postgresql.server_id
+    subresource_names              = ["postgresqlServer"]
+    is_manual_connection           = false
+  }
 }