https://github.com/labd/terraform-azure-mach-shared
Module to provision a 'shared' resource group in Azure to use in a MACH stack
https://github.com/labd/terraform-azure-mach-shared
mach terraform
Last synced: 11 months ago
JSON representation
Module to provision a 'shared' resource group in Azure to use in a MACH stack
- Host: GitHub
- URL: https://github.com/labd/terraform-azure-mach-shared
- Owner: labd
- License: mit
- Created: 2020-10-21T09:15:02.000Z (over 5 years ago)
- Default Branch: master
- Last Pushed: 2022-03-28T07:43:04.000Z (about 4 years ago)
- Last Synced: 2025-05-25T02:44:34.101Z (about 1 year ago)
- Topics: mach, terraform
- Language: HCL
- Homepage:
- Size: 11.7 KB
- Stars: 0
- Watchers: 9
- Forks: 1
- Open Issues: 2
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# Azure Shared Infra module
To provision a 'shared' resource group in Azure.
[More information](https://docs.machcomposer.io/tutorial/azure/step-3-setup-azure.html) on how to setup your Azure environment for MACH.
### Resources created
- 'shared' resource group
- storage account for Terraform state files
- storage account for Components
When `dns_zone_name` is given:
- DNS zone
- Domain certificates + KeyVault to store them
## Usage
```
module "shared_infra" {
source = "git::https://github.com/labd/terraform-azure-mach-shared.git"
name_prefix = "mach-we"
region = "westeurope"
dns_zone_name = your-projects-services.net
}
```
### Variables
| name | required | description |
| ---------------------------------- | -------- | --------------------------------------------------------------------------- |
| `region` | * | Which region to create the shared resources in |
| `name_prefix` | | Prefix to be used when naming resources |
| `tags` | | Tags to apply to the shared resources |
| `storage_account_replication_type` | | Replication type of the 'components' storage account |
| `dns_zone_name` | | The custom DNS zone to create |
| `certificate_access_object_ids` | | Object IDs of all users/groups to should be able to access the certificates |