add azure front door

Author: afeld

ci/terraform/main.tf

@@ -13,12 +13,59 @@ resource "azurerm_storage_account" "storeacc" {
   location                 = azurerm_resource_group.site.location
   account_tier             = "Standard"
   account_replication_type = "ZRS"
+  allow_blob_public_access = true
 
   static_website {
     index_document = "index.html"
   }
 }
 
-output "container" {
-  value = azurerm_storage_account.storeacc.primary_web_host
+locals {
+  frontend_endpoint = "pandas-prs"
+  backend_pool      = "container"
+  load_balancing    = "pandas-prs"
+  health_probe      = "pandas-prs"
+}
+
+resource "azurerm_frontdoor" "prs" {
+  name                                         = "pandas-prs"
+  resource_group_name                          = azurerm_resource_group.site.name
+  enforce_backend_pools_certificate_name_check = false
+
+  routing_rule {
+    name               = "exampleRoutingRule1"
+    accepted_protocols = ["Http", "Https"]
+    patterns_to_match  = ["/*"]
+    frontend_endpoints = [local.frontend_endpoint]
+    forwarding_configuration {
+      forwarding_protocol = "MatchRequest"
+      backend_pool_name   = local.backend_pool
+    }
+  }
+
+  backend_pool_load_balancing {
+    name = local.load_balancing
+  }
+
+  backend_pool_health_probe {
+    name = local.health_probe
+  }
+
+  backend_pool {
+    name = local.backend_pool
+    backend {
+      host_header = azurerm_storage_account.storeacc.primary_web_host
+      address     = azurerm_storage_account.storeacc.primary_web_host
+      http_port   = 80
+      https_port  = 443
+    }
+
+    load_balancing_name = local.load_balancing
+    health_probe_name   = local.health_probe
+  }
+
+  frontend_endpoint {
+    name      = local.frontend_endpoint
+    host_name = "pandas-prs.azurefd.net"
+  }
 }

ci/terraform/outputs.tf

@@ -0,0 +1,7 @@
+output "container" {
+  value = azurerm_storage_account.storeacc.primary_web_host
+}
+
+output "front_door" {
+  value = azurerm_frontdoor.prs.frontend_endpoint[0].host_name
+}