feat: add container registry configuration

Author: kharkevich

main.tf

@@ -80,11 +80,14 @@ resource "azurerm_linux_web_app" "this" {
     identity_ids = var.identity_ids
   }
   site_config {
-    always_on          = true
-    ftps_state         = "Disabled"
-    http2_enabled      = true
-    websockets_enabled = var.websockets_enabled
-    use_32_bit_worker  = false
+    always_on                                     = var.site_config.always_on
+    container_registry_managed_identity_client_id = var.site_config.container_registry_managed_identity_client_id
+    container_registry_use_managed_identity       = var.site_config.container_registry_use_managed_identity
+    ftps_state                                    = var.site_config.ftps_state
+    http2_enabled                                 = var.site_config.http2_enabled
+    use_32_bit_worker                             = var.site_config.use_32_bit_worker
+    websockets_enabled                            = var.site_config.websockets_enabled
+    worker_count                                  = var.site_config.worker_count
     dynamic "ip_restriction" {
       for_each = var.ip_restriction
       content {
@@ -125,7 +128,6 @@ resource "azurerm_linux_web_app" "this" {
         }
       }
     }
-    worker_count = var.worker_count
     application_stack {
       docker_image        = local.application_stack["docker_image"]
       docker_image_tag    = local.application_stack["docker_image_tag"]

variables.tf

@@ -165,12 +165,6 @@ variable "storage_account" {
   description = "BYOS storage mount configuration"
 }
 
-variable "websockets_enabled" {
-  type        = bool
-  description = "Enable websockets"
-  default     = false
-}
-
 variable "enable_appinsights" {
   type        = bool
   description = "Enable application insights"
@@ -201,12 +195,6 @@ variable "client_affinity_enabled" {
   default     = false
 }
 
-variable "worker_count" {
-  type        = number
-  description = "Number of workers"
-  default     = null
-}
-
 variable "key_vault" {
   description = "Configure Linux Function App to Key Vault"
   type = object({
@@ -217,3 +205,18 @@ variable "key_vault" {
   })
   default = {}
 }
+
+variable "site_config" {
+  type = object({
+    always_on                                     = optional(bool, true)
+    ftps_state                                    = optional(string, "Disabled")
+    http2_enabled                                 = optional(bool, true)
+    websockets_enabled                            = optional(bool, false)
+    use_32_bit_worker                             = optional(bool, false)
+    container_registry_use_managed_identity       = optional(bool, false)
+    container_registry_managed_identity_client_id = optional(string, null)
+    worker_count                                  = optional(number, null)
+  })
+  default = {}
+  description = "Site configuration"
+}