Merge pull request #7776 from willie-yao/capz-monitoring

Add terraform for capz monitoring cluster

Author: k8s-ci-robot

infra/azure/terraform/capz/capz-monitoring/main.tf

@@ -0,0 +1,79 @@
+/*
+Copyright 2024 The Kubernetes Authors.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+variable "resource_group_name" {
+  type = string
+}
+
+variable "location" {
+  type = string
+}
+
+variable "subscription_id" {
+  type = string
+}
+
+# Create the "capz-monitoring" resource group
+resource "azurerm_resource_group" "capz-monitoring" {
+  location = var.location
+  name     = var.resource_group_name
+  tags = {
+    DO-NOT-DELETE     = "contact capz"
+    creationTimestamp = timestamp()
+  }
+}
+
+resource "azurerm_user_assigned_identity" "capz_monitoring_user_identity" {
+  name                = "capz-monitoring-user-identity"
+  location            = azurerm_resource_group.capz-monitoring.location
+  resource_group_name = azurerm_resource_group.capz-monitoring.name
+}
+
+resource "azurerm_role_assignment" "monitoring_reader" {
+  principal_id         = azurerm_user_assigned_identity.capz_monitoring_user_identity.principal_id
+  role_definition_name = "Monitoring Reader"
+  scope                = "/subscriptions/${var.subscription_id}"
+  depends_on = [ azurerm_user_assigned_identity.capz_monitoring_user_identity ]
+}
+
+resource "azurerm_kubernetes_cluster" "capz-monitoring" {
+  dns_prefix            = var.resource_group_name
+  location              = var.location
+  name                  = var.resource_group_name
+  resource_group_name   = var.resource_group_name
+  tags = {
+    DO-NOT-DELETE     = "contact capz"
+    creationTimestamp = timestamp()
+  }
+  depends_on = [
+    azurerm_resource_group.capz-monitoring,
+    azurerm_user_assigned_identity.capz_monitoring_user_identity,
+  ]
+  kubelet_identity {
+    user_assigned_identity_id = azurerm_user_assigned_identity.capz_monitoring_user_identity.id
+  }
+  identity {
+    type                     = "UserAssigned"
+    identity_ids = [
+      azurerm_user_assigned_identity.capz_monitoring_user_identity.id
+    ]
+  }
+  default_node_pool {
+    name       = "default"
+    node_count = 1
+    vm_size    = "Standard_Ds2_v2"
+  }
+}

infra/azure/terraform/capz/main.tf

@@ -133,3 +133,11 @@ module "cluster_api_gallery" {
   location            = var.location
   depends_on          = module.role_assignments
 }
+
+# Import CAPZ monitoring module
+module "capz_monitoring" {
+  source              = "./capz-monitoring"
+  resource_group_name = var.resource_group_name
+  location            = var.location
+  subscription_id     = data.azurerm_client_config.current.subscription_id
+}