|
| 1 | +resource "azurerm_resource_group" "docs_jenkins_io" { |
| 2 | + name = "docs-jenkins-io" |
| 3 | + location = var.location |
| 4 | + tags = local.default_tags |
| 5 | +} |
| 6 | + |
| 7 | +resource "azurerm_storage_account" "docs_jenkins_io" { |
| 8 | + name = "docsjenkinsio" |
| 9 | + resource_group_name = azurerm_resource_group.docs_jenkins_io.name |
| 10 | + location = azurerm_resource_group.docs_jenkins_io.location |
| 11 | + account_tier = "Standard" |
| 12 | + account_replication_type = "ZRS" |
| 13 | + account_kind = "StorageV2" |
| 14 | + enable_https_traffic_only = true |
| 15 | + min_tls_version = "TLS1_2" |
| 16 | + |
| 17 | + network_rules { |
| 18 | + default_action = "Deny" |
| 19 | + ip_rules = flatten(concat( |
| 20 | + [for key, value in module.jenkins_infra_shared_data.admin_public_ips : value] |
| 21 | + )) |
| 22 | + virtual_network_subnet_ids = [ |
| 23 | + data.azurerm_subnet.publick8s_tier.id, |
| 24 | + data.azurerm_subnet.privatek8s_tier.id, # required for management from infra.ci (terraform) |
| 25 | + data.azurerm_subnet.infra_ci_jenkins_io_sponsorship_ephemeral_agents.id, # infra.ci Azure VM agents |
| 26 | + ] |
| 27 | + bypass = ["AzureServices"] |
| 28 | + } |
| 29 | + |
| 30 | + tags = local.default_tags |
| 31 | +} |
| 32 | + |
| 33 | +resource "azurerm_storage_share" "docs_jenkins_io" { |
| 34 | + name = "docs-jenkins-io" |
| 35 | + storage_account_name = azurerm_storage_account.docs_jenkins_io.name |
| 36 | + quota = 5 |
| 37 | +} |
0 commit comments