add event grid mqtt resource

Author: ks6088ts

infra/main.bicep

@@ -29,6 +29,12 @@ param storageAccountName string = '${prefix}sa'
 @description('Specifies the name of the Azure Event Grid resource.')
 param eventGridName string = '${prefix}eg'
 
+@description('Specifies the name of the Azure Event Grid MQTT resource.')
+param eventGridMqttName string = '${prefix}egmqtt'
+
+@description('Specifies the name of the encoded certificate.')
+param eventGridMqttEncodedCertificate string
+
 @description('Specifies the name of the Azure Cosmos DB resource.')
 param cosmosDbName string = '${prefix}cosmosdb'
 
@@ -87,6 +93,16 @@ module eventGrid './modules/eventGrid.bicep' = {
   }
 }
 
+module eventGridMqtt './modules/eventGridMqtt.bicep' = {
+  name: 'eventGridMqtt'
+  params: {
+    name: eventGridMqttName
+    location: location
+    tags: tags
+    encodedCertificate: eventGridMqttEncodedCertificate
+  }
+}
+
 module cosmosDb './modules/cosmosDb.bicep' = {
   name: 'cosmosDb'
   params: {

infra/main.parameters.bicepparam

@@ -18,6 +18,11 @@ param openAiDeployments = [
   }
 ]
 
+// To create certificate, overwrite the default value of the parameter by the output from the following command:
+// $ cat ~/.step/certs/intermediate_ca.crt | tr -d "\n"
+// ref. https://github.com/ks6088ts-labs/azure-iot-scenarios/tree/main/scenarios/3_event-grid-mqtt-messaging
+param eventGridMqttEncodedCertificate = ''
+
 param tags = {
   environment: 'dev'
 }

infra/modules/eventGridMqtt.bicep

@@ -0,0 +1,100 @@
+// Parameters
+@description('Specifies the name prefix.')
+param prefix string = uniqueString(resourceGroup().id)
+
+@description('Specifies the primary location of Azure resources.')
+param location string = resourceGroup().location
+
+@description('Specifies the resource tags.')
+param tags object = {}
+
+@description('Specifies the name of the Event Grid Namespace.')
+param name string = '${prefix}egn'
+
+@description('Specifies the name of the Event Grid Namespace Topic Space.')
+param eventGridNamesapceTopicSpaceName string = 'samples'
+
+@description('Specifies the name of the encoded certificate.')
+param encodedCertificate string
+
+resource eventGridNamesapce 'Microsoft.EventGrid/namespaces@2024-06-01-preview' = {
+  name: name
+  location: location
+  tags: tags
+  sku: {
+    name: 'Standard'
+    capacity: 1
+  }
+  identity: {
+    type: 'SystemAssigned'
+  }
+  properties: {
+    isZoneRedundant: true
+    topicsConfiguration: {}
+    topicSpacesConfiguration: {
+      state: 'Enabled'
+    }
+  }
+}
+
+resource eventGridCaCertificate 'Microsoft.EventGrid/namespaces/caCertificates@2024-06-01-preview' = if (encodedCertificate != '') {
+  parent: eventGridNamesapce
+  name: 'Intermediate01'
+  properties: {
+    encodedCertificate: encodedCertificate
+  }
+}
+
+resource eventGridClient 'Microsoft.EventGrid/namespaces/clients@2024-06-01-preview' = {
+  parent: eventGridNamesapce
+  name: 'sample_client'
+  properties: {
+    authenticationName: 'sample_client'
+    state: 'Enabled'
+    clientCertificateAuthentication: {
+      validationScheme: 'SubjectMatchesAuthenticationName'
+    }
+    attributes: {
+      room: '345'
+      floor: 12
+      deviceTypes: [
+        'Fan'
+        'Light'
+      ]
+    }
+    description: 'This is a sample client'
+  }
+}
+
+resource eventGridNamesapceTopicSpace 'Microsoft.EventGrid/namespaces/topicSpaces@2024-06-01-preview' = {
+  parent: eventGridNamesapce
+  name: eventGridNamesapceTopicSpaceName
+  properties: {
+    description: 'This is a sample topic-space for Event Grid namespace'
+    topicTemplates: [
+      'sample/#'
+    ]
+  }
+}
+
+resource permissionBindingForPublisher 'Microsoft.EventGrid/namespaces/permissionBindings@2024-06-01-preview' = {
+  name: 'samplesPub'
+  parent: eventGridNamesapce
+  properties: {
+    clientGroupName: '$all'
+    description: 'A publisher permission binding for the namespace'
+    permission: 'Publisher'
+    topicSpaceName: eventGridNamesapceTopicSpace.name
+  }
+}
+
+resource permissionBindingForSubscriber 'Microsoft.EventGrid/namespaces/permissionBindings@2024-06-01-preview' = {
+  name: 'samplesSub'
+  parent: eventGridNamesapce
+  properties: {
+    clientGroupName: '$all'
+    description: 'A subscriber permission binding for the namespace'
+    permission: 'Subscriber'
+    topicSpaceName: eventGridNamesapceTopicSpace.name
+  }
+}