Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/imjoseangel/terraform-azurerm-applicationgateway

Terraform Module for deploying a Azure Application Gateway
https://github.com/imjoseangel/terraform-azurerm-applicationgateway

application-gateway azure cloud kubernetes networking terraform terraform-module waf

Last synced: 2 days ago
JSON representation

Terraform Module for deploying a Azure Application Gateway

Host: GitHub
URL: https://github.com/imjoseangel/terraform-azurerm-applicationgateway
Owner: imjoseangel
License: mit
Created: 2021-11-11T07:31:38.000Z (about 3 years ago)
Default Branch: devel
Last Pushed: 2024-05-13T04:41:27.000Z (8 months ago)
Last Synced: 2024-05-15T20:13:55.529Z (8 months ago)
Topics: application-gateway, azure, cloud, kubernetes, networking, terraform, terraform-module, waf
Language: HCL
Homepage:
Size: 211 KB
Stars: 2
Watchers: 3
Forks: 1
Open Issues: 1
Metadata Files:
- Readme: README.md
- License: LICENSE
- Codeowners: CODEOWNERS

Awesome Lists containing this project

README

# terraform-azurerm-applicationgateway

[![Terraform](https://github.com/imjoseangel/terraform-azurerm-applicationgateway/actions/workflows/terraform.yml/badge.svg)](https://github.com/imjoseangel/terraform-azurerm-applicationgateway/actions/workflows/terraform.yml)

## Deploys a Azure Application Gateway

This Terraform module deploys an Application Gateway on Azure

### NOTES

* Default SKU Tier is set to Standard_V2
* Default SKU Capacity is set to 1
* Only Standard_V2 and WAF_V2 SKU are available

## Usage in Terraform 1.0

```terraform
data "azurerm_resource_group" "appgwvnetrsg" {
name = "vnetrsg-aks"
}

data "azurerm_virtual_network" "appgwvnet" {
name = "vnet-aks"
resource_group_name = data.azurerm_resource_group.aksvnetrsg.name
}

resource "azurerm_subnet" "appgwsubnet" {
name = "subnet-agic"
resource_group_name = data.azurerm_resource_group.aksvnetrsg.name
virtual_network_name = data.azurerm_virtual_network.aksvnet.name
address_prefixes = ["10.100.1.0/24"]
}

resource "azurerm_subnet" "appgwsubnet" {
name = "subnet-agic"
resource_group_name = "rsg-network"
virtual_network_name = data.azurerm_virtual_network.aksvnet.name
address_prefixes = ["10.10.1.0/24"]
}

module "appgateway" {
source = "github.com/imjoseangel/terraform-azurerm-applicationgateway"
name = var.appgw_name
resource_group_name = var.appgw_rsg
location = var.location
create_resource_group = true
vnet_subnet_id = azurerm_subnet.appgwsubnet.id
}
```

To connect the Application Gateway with a Kubernetes Cluster (AKS) the following setup adds the required roles and routes to work with `kubenet`:

```terraform
data "azurerm_user_assigned_identity" "appgw" {
name = format("ingressapplicationgateway-%s", module.aks.cluster_name)
resource_group_name = module.aks.node_resource_group

depends_on = [
module.appgateway
]
}

resource "azurerm_role_assignment" "app_gw" {
scope = module.appgateway.id
role_definition_name = "Contributor"
principal_id = data.azurerm_user_assigned_identity.appgw.principal_id
}

resource "azurerm_role_assignment" "appgw_resource_group" {
scope = module.appgateway.resource_group_id
role_definition_name = "Reader"
principal_id = data.azurerm_user_assigned_identity.appgw.principal_id
}

data "azurerm_resources" "routetables" {
resource_group_name = module.aks.node_resource_group
type = "Microsoft.Network/routeTables"
}

resource "azurerm_subnet_route_table_association" "appgwroute" {
subnet_id = azurerm_subnet.appgwsubnet.id
route_table_id = data.azurerm_resources.routetables.resources[0].id
depends_on = [
data.azurerm_resources.routetables
]
}

```

The **Application Gateway** can be connected to Kubernetes (AKS) enabling the `create_ingress` and `gateway_id` options:

```terraform
module "aks" {
source = "github.com/imjoseangel/terraform-azurerm-kubernetes"
...
create_ingress = true
gateway_id = module.appgateway.id
}
```

WAF can be enabled adding `sku` and `waf_enabled` fields. In order to enable WAF, `sku` needs to be set to `WAF_2` and `waf_enabled` to `true`. If one of them does not fit the requirements, WAF will remain disabled by default.

```terraform
module "appgateway" {
source = "github.com/imjoseangel/terraform-azurerm-applicationgateway"
...
sku = "WAF_v2"
waf_enabled = true
}
```

## Authors

Originally created by [imjoseangel](http://github.com/imjoseangel)

## License

[MIT](LICENSE)