Azure Container Registry Terraform Module

Opstree Solutions

Terraform module which creates Azure Container Registry.

Terraform versions

Terraform v1.1.7

Usage

module "res_group" {
  source                  = "git::https://github.com/OT-terraform-azure-modules/azure_resource_group.git"
  resource_group_name     = "_"
  resource_group_location = "_"
  lock_level_value        = "_"
  tag_map = {
    Name = "AzureResourceGroup"
  }
}

module "ACR" {
  source                     = "git::https://github.com/OT-terraform-azure-modules/ACR.git
  container_registry_name    = "_"
  resource_group_name        = "_"
  acr_location               = "_"
  sku                        = "_"
  admin_enabled              = "_"
  public_network_access      = "_"
  trust_policy               = "_"
  zone_redundancy_enabled    = "_"
  georeplications            = ["_", "_"]
  identity                   = "_"
  identity_id                = "_"
  retention                  = "_"
  encryption                 = "_"
  key_vault_key_id           = "_"
  identity_client_id         = "_"
  quarantine_policy_enabled  = "_"
  anonymous_pull_enabled     = "_"
  data_endpoint_enabled      = "_"
  enable_private_endpoint    = "_"
  existing_private_dns_zone  = "_"
  virtual_network_id         = "_"
  subnet_id                  = "_"
  network_rule_bypass_option = "_"
  lock_level_value           = "_"
  tag_map                    = {
      env = "_"
    }
}

Resources

Name	Type
azurerm_container_registry.ContainerRegistry	resource
azurerm_private_endpoint.acr_private_endpoint	resource
azurerm_private_dns_zone.dnszoneacr	resource
azurerm_private_dns_zone_virtual_network_link.vnet-link1	resource
azurerm_management_lock.primary_lock	resource

Inputs

Name	Description	Type	Default	Required
resource_group_name	Enter the Resource group name	string		yes
container_registry_name	Name of the Azure Container Registry	string		yes
acr_location	Location of Azure Container Registry	string		yes
sku	Map to define the sku of the Azure Container Registry: 'Basic', 'Standard', or 'Premium'	string	Basic	no
admin_enabled	To Enable Admin	bool	false	no
public_network_access	To enable Public Access in Connectivity Configurations	bool	true	no
zone_redundancy_enabled	To enable Zone Redundancy (Only Available for Premium)	bool	false	no
data_endpoint_enabled	To enable Data Endpoint (Only Available for Premium)	bool	false	no
anonymous_pull_enabled	To enable Anonymous Pull Access (Only Available for Premium)	bool	false	no
quarantine_policy_enabled	To enable quarantine policy (Only Available for Premium)	bool	false	no
network_rule_bypass_option	Whether to allow trusted Azure services to access a network restricted Container Registry? Possible values are "None" and "AzureServices"	string	AzureServices	no
retention	The number of days to retain an untagged manifest after which it gets purged. (Only Available for Premium)	map(object)	null	no
trust_policy	To enable Trust policy (Only Available for Premium)	bool	false	no
georeplications	A list of Azure locations where the container registry should be geo-replicated. Location is to be added here (Only Available for Premium)	list(string)		no
identity	Please mention the type of identity - 'UserAssigned' or 'SystemAssigned'	string	SystemAssigned	no
encryption	Please mention True (to enable) or False (to disable) Encryption	bool	null	no
key_vault_key_id	Please mention the Key Vault Key ID for Encryption	string	null	no
identity_client_id	Please mention the Managed Identity Client ID for Encryption	string	null	no
identity_id	Please mention the Managed Identity ID	string	null	no
enable_private_endpoint	Manages a Private Endpoint to Azure Container Registry	bool	false	no
existing_private_dns_zone	Name of the existing private DNS zone	any	null	no
virtual_network_id	The ID of the virtual network (virtual network Region and ACR location must be same)	string	null	no
subnet_id	The ID of the Subnet (Subnet Region and ACR location must be same)	string	null	no
lock_level_value	Please mention the level of lock that is to be applied in Azure Container Registry	string	null	no
tag_map	Please mention the tags here	map(string)		no

NOTE

The Geo-replication regions must be different from ACR location (this feature is available for Premium sku).

Output

Name	Description
acr_id	ID of the Azure Container Registry
acr_login	URL that can be used to log into the Azure Container Registry
container_registry_admin_username	(Only if Admin is enabled) The Username associated with the Container Registry Admin account
container_registry_admin_password	(Only if Admin is enabled) The Username associated with the Container Registry Admin account
container_registry_identity_tenant_id	The Tenant ID for the Service Principal associated with the Managed Service Identity of this Container Registry

Related Projects

Check out these related projects.

• Resource Group

Contributor

S Aishwarya