43 lines
1.2 KiB
HCL
43 lines
1.2 KiB
HCL
locals {
|
|
whitelist = values(var.whitelist)
|
|
}
|
|
|
|
resource "azurerm_resource_group" "acr" {
|
|
name = "${var.name}-${var.environment}-acr"
|
|
location = var.region
|
|
}
|
|
|
|
resource "azurerm_container_registry" "acr" {
|
|
name = "${var.name}${var.environment}registry" # Alpha Numeric Only
|
|
resource_group_name = azurerm_resource_group.acr.name
|
|
location = azurerm_resource_group.acr.location
|
|
sku = var.sku
|
|
admin_enabled = var.admin_enabled
|
|
#georeplication_locations = [azurerm_resource_group.acr.location, var.backup_region]
|
|
|
|
network_rule_set {
|
|
default_action = var.policy
|
|
|
|
ip_rule = [
|
|
for cidr in values(var.whitelist) : {
|
|
action = "Allow"
|
|
ip_range = cidr
|
|
}
|
|
]
|
|
# Dynamic rule should work, but doesn't - See https://github.com/hashicorp/terraform/issues/22340#issuecomment-518779733
|
|
#dynamic "ip_rule" {
|
|
# for_each = values(var.whitelist)
|
|
# content {
|
|
# action = "Allow"
|
|
# ip_range = ip_rule.value
|
|
# }
|
|
#}
|
|
|
|
virtual_network = [
|
|
for subnet in var.subnet_ids : {
|
|
action = "Allow"
|
|
subnet_id = subnet.value
|
|
}
|
|
]
|
|
}
|
|
} |