Skip to content

Commit 3a471d8

Browse files
kumarvnakumarvna
committed
adding terraform v0.15 support
1 parent e97bb43 commit 3a471d8

File tree

14 files changed

+742
-571
lines changed

14 files changed

+742
-571
lines changed

‎README.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -285,9 +285,9 @@ Name | Description
285285
`sql_failover_group_id`|A failover group of databases on a collection of Azure SQL servers
286286
`primary_sql_server_private_endpoint`|id of the Primary SQL server Private Endpoint
287287
`secondary_sql_server_private_endpoint`|id of the Primary SQL server Private Endpoint
288-
`sql_server_private_dns_zone_domain`|DNS zone name of SQL server Private endpoints dns name records
289-
`primary_sql_server_private_endpoint_ip`|Priamary SQL server private endpoint IPv4 Addresses
290-
`primary_sql_server_private_endpoint_fqdn`|Priamary SQL server private endpoint IPv4 Addresses
288+
`sql_server_private_dns_zone_domain`|DNS zone name of SQL server Private endpoints DNS name records
289+
`primary_sql_server_private_endpoint_ip`|Primary SQL server private endpoint IPv4 Addresses
290+
`primary_sql_server_private_endpoint_fqdn`|Primary SQL server private endpoint IPv4 Addresses
291291
`secondary_sql_server_private_endpoint_ip`|Secondary SQL server private endpoint IPv4 Addresses
292292
`secondary_sql_server_private_endpoint_fqdn`|Secondary SQL server private endpoint IPv4 Addresses
293293

‎examples/README.md

Lines changed: 268 additions & 221 deletions
Large diffs are not rendered by default.

‎examples/SQL_DB_Using_Geo-replication_with_Auto-Failover_Groups/README.md

Lines changed: 69 additions & 55 deletions
Original file line numberDiff line numberDiff line change
@@ -1,60 +1,74 @@
1-
# Azure SQL Database Using Failover Groups with Private endpoints
1+
# Azure SQL database creation using geo-replication with auto-failover groups
22

3-
Terraform module for Azure to create a SQL server with initial database, Azure AD login, Firewall rules for SQL, Failover Group, Private endpoint, and corresponding private DNS zone for privatelink A records. It also allows creating an SQL server database with a SQL script initialization.
3+
Terraform module to create a SQL server with initial database, Azure AD login, Firewall rules for SQL, optional azure monitoring, vulnerability assessment and Geo-replication with auto-failover groups. It also allows creating an SQL server database with a SQL script initialization.
44

55
## Module Usage
66

7-
### Azure SQL database creation using geo-replication with auto-failover groups
8-
9-
Following example to create a SQL database using geo-replication with auto-failover groups. This module also supports optional AD admin user for DB, Audit Policies, Firewall Rules, and creation of database schema using SQL script.
10-
11-
```
7+
```hcl
128
module "mssql-server" {
13-
source = "kumarvna/mssql-db/azurerm"
14-
version = "1.0.0"
15-
16-
# Resource Group, VNet and Subnet declarations
17-
create_resource_group = false
18-
resource_group_name = "rg-demo-westeurope-01"
19-
location = "westeurope"
20-
virtual_network_name = "vnet-demo-westeurope-001"
21-
private_subnet_address_prefix = "10.0.5.0/29"
22-
23-
# SQL Server and Database scaling options
24-
sqlserver_name = "sqldbserver-db01"
25-
database_name = "demomssqldb"
26-
sql_database_edition = "Standard"
27-
sqldb_service_objective_name = "S1"
28-
29-
# SQL Server and Database Audit policies
30-
enable_auditing_policy = true
31-
enable_threat_detection_policy = true
32-
log_retention_days = 30
33-
email_addresses_for_alerts = ["[email protected]"]
34-
35-
# AD administrator for an Azure SQL server
36-
enable_sql_ad_admin = true
37-
ad_admin_login_name = "[email protected]"
38-
39-
# Firewall Rules to allow azure and external clients
40-
enable_firewall_rules = true
9+
source = "kumarvna/mssql-db/azurerm"
10+
version = "1.1.0"
11+
12+
# By default, this module will not create a resource group
13+
# proivde a name to use an existing resource group, specify the existing resource group name,
14+
# and set the argument to `create_resource_group = false`. Location will be same as existing RG.
15+
resource_group_name = "rg-shared-westeurope-01"
16+
location = "westeurope"
17+
virtual_network_name = "vnet-shared-hub-westeurope-001"
18+
19+
# SQL Server and Database details
20+
# The valid service objective name for the database include S0, S1, S2, S3, P1, P2, P4, P6, P11
21+
sqlserver_name = "sqldbserver01"
22+
database_name = "demomssqldb"
23+
sql_database_edition = "Standard"
24+
sqldb_service_objective_name = "S1"
25+
26+
# SQL server extended auditing policy defaults to `true`. To turn off set enable_sql_server_extended_auditing_policy to `false`
27+
# DB extended auditing policy defaults to `false`. to tun on set the variable `enable_database_extended_auditing_policy` to `true`
28+
# To enable Azure Defender for Azure SQL database servers set `enable_threat_detection_policy` to true
29+
enable_threat_detection_policy = true
30+
log_retention_days = 30
31+
32+
# schedule scan notifications to the subscription administrators
33+
# Manages the Vulnerability Assessment for a MS SQL Server set `enable_vulnerability_assessment` to `true`
34+
enable_vulnerability_assessment = false
35+
sql_admin_email_addresses = ["[email protected]", "[email protected]"]
36+
37+
# AD administrator for an Azure SQL server
38+
# Allows you to set a user or group as the AD administrator for an Azure SQL server
39+
ad_admin_login_name = "[email protected]"
40+
41+
# (Optional) To enable Azure Monitoring for Azure SQL database including audit logs
42+
# log analytic workspace name required
43+
enable_log_monitoring = true
44+
log_analytics_workspace_name = "loganalytics-we-sharedtest2"
45+
46+
# Sql failover group creation. required secondary locaiton input.
47+
enable_failover_group = true
48+
secondary_sql_server_location = "northeurope"
49+
50+
# Firewall Rules to allow azure and external clients and specific Ip address/ranges.
51+
enable_firewall_rules = true
4152
firewall_rules = [
42-
{name = "access-to-azure"
43-
start_ip_address = "0.0.0.0"
44-
end_ip_address = "0.0.0.0"},
45-
{name = "desktop-ip"
46-
start_ip_address = "123.201.75.71"
47-
end_ip_address = "123.201.75.71"}]
48-
49-
# Sql failover group
50-
enable_failover_group = true
51-
secondary_sql_server_location = "northeurope"
52-
53-
# Create and initialize a database with SQL script
54-
initialize_sql_script_execution = false
55-
sqldb_init_script_file = "./artifacts/db-init-sample.sql"
56-
57-
# Tags for Azure Resources
53+
{
54+
name = "access-to-azure"
55+
start_ip_address = "0.0.0.0"
56+
end_ip_address = "0.0.0.0"
57+
},
58+
{
59+
name = "desktop-ip"
60+
start_ip_address = "49.204.225.134"
61+
end_ip_address = "49.204.225.134"
62+
}
63+
]
64+
65+
# Create and initialize a database with custom SQL script
66+
# need sqlcmd utility to run this command
67+
# your desktop public IP must be added firewall rules to run this command
68+
initialize_sql_script_execution = true
69+
sqldb_init_script_file = "../artifacts/db-init-sample.sql"
70+
71+
# Tags for Azure Resources
5872
tags = {
5973
Terraform = "true"
6074
Environment = "dev"
@@ -67,10 +81,10 @@ module "mssql-server" {
6781

6882
To run this example you need to execute following Terraform commands
6983

70-
```
71-
$ terraform init
72-
$ terraform plan
73-
$ terraform apply
84+
```bash
85+
terraform init
86+
terraform plan
87+
terraform apply
7488
```
7589

7690
Run `terraform destroy` when you don't need these resources.

‎examples/SQL_DB_Using_Geo-replication_with_Auto-Failover_Groups/main.tf

Lines changed: 63 additions & 45 deletions
Original file line numberDiff line numberDiff line change
@@ -1,52 +1,70 @@
11
module "mssql-server" {
2-
source = "kumarvna/mssql-db/azurerm"
3-
version = "1.0.0"
4-
5-
# Resource Group, VNet and Subnet declarations
6-
create_resource_group = false
7-
resource_group_name = "rg-demo-westeurope-01"
8-
location = "westeurope"
9-
virtual_network_name = "vnet-demo-westeurope-001"
10-
private_subnet_address_prefix = "10.0.5.0/29"
11-
12-
# SQL Server and Database scaling options
13-
sqlserver_name = "sqldbserver-db01"
14-
database_name = "demomssqldb"
15-
sql_database_edition = "Standard"
16-
sqldb_service_objective_name = "S1"
17-
18-
# SQL Server and Database Audit policies
19-
enable_auditing_policy = true
20-
enable_threat_detection_policy = true
21-
log_retention_days = 30
22-
email_addresses_for_alerts = ["[email protected]"]
23-
24-
# AD administrator for an Azure SQL server
25-
enable_sql_ad_admin = true
26-
ad_admin_login_name = "[email protected]"
27-
28-
# Firewall Rules to allow azure and external clients
29-
enable_firewall_rules = true
2+
source = "kumarvna/mssql-db/azurerm"
3+
version = "1.1.0"
4+
5+
# By default, this module will not create a resource group
6+
# proivde a name to use an existing resource group, specify the existing resource group name,
7+
# and set the argument to `create_resource_group = false`. Location will be same as existing RG.
8+
resource_group_name = "rg-shared-westeurope-01"
9+
location = "westeurope"
10+
virtual_network_name = "vnet-shared-hub-westeurope-001"
11+
12+
# SQL Server and Database details
13+
# The valid service objective name for the database include S0, S1, S2, S3, P1, P2, P4, P6, P11
14+
sqlserver_name = "sqldbserver01"
15+
database_name = "demomssqldb"
16+
sql_database_edition = "Standard"
17+
sqldb_service_objective_name = "S1"
18+
19+
# SQL server extended auditing policy defaults to `true`. To turn off set enable_sql_server_extended_auditing_policy to `false`
20+
# DB extended auditing policy defaults to `false`. to tun on set the variable `enable_database_extended_auditing_policy` to `true`
21+
# To enable Azure Defender for Azure SQL database servers set `enable_threat_detection_policy` to true
22+
enable_threat_detection_policy = true
23+
log_retention_days = 30
24+
25+
# schedule scan notifications to the subscription administrators
26+
# Manages the Vulnerability Assessment for a MS SQL Server set `enable_vulnerability_assessment` to `true`
27+
enable_vulnerability_assessment = false
28+
sql_admin_email_addresses = ["[email protected]", "[email protected]"]
29+
30+
# AD administrator for an Azure SQL server
31+
# Allows you to set a user or group as the AD administrator for an Azure SQL server
32+
ad_admin_login_name = "[email protected]"
33+
34+
# (Optional) To enable Azure Monitoring for Azure SQL database including audit logs
35+
# log analytic workspace name required
36+
enable_log_monitoring = true
37+
log_analytics_workspace_name = "loganalytics-we-sharedtest2"
38+
39+
# Sql failover group creation. required secondary locaiton input.
40+
enable_failover_group = true
41+
secondary_sql_server_location = "northeurope"
42+
43+
# Firewall Rules to allow azure and external clients and specific Ip address/ranges.
44+
enable_firewall_rules = true
3045
firewall_rules = [
31-
{name = "access-to-azure"
32-
start_ip_address = "0.0.0.0"
33-
end_ip_address = "0.0.0.0"},
34-
{name = "desktop-ip"
35-
start_ip_address = "123.201.42.91"
36-
end_ip_address = "123.201.42.91"}]
37-
38-
# Sql failover group
39-
enable_failover_group = true
40-
secondary_sql_server_location = "northeurope"
41-
42-
# Create and initialize a database with SQL script
43-
initialize_sql_script_execution = false
44-
sqldb_init_script_file = "./artifacts/db-init-sample.sql"
45-
46-
# Tags for Azure Resources
46+
{
47+
name = "access-to-azure"
48+
start_ip_address = "0.0.0.0"
49+
end_ip_address = "0.0.0.0"
50+
},
51+
{
52+
name = "desktop-ip"
53+
start_ip_address = "49.204.225.134"
54+
end_ip_address = "49.204.225.134"
55+
}
56+
]
57+
58+
# Create and initialize a database with custom SQL script
59+
# need sqlcmd utility to run this command
60+
# your desktop public IP must be added firewall rules to run this command
61+
initialize_sql_script_execution = true
62+
sqldb_init_script_file = "../artifacts/db-init-sample.sql"
63+
64+
# Tags for Azure Resources
4765
tags = {
4866
Terraform = "true"
4967
Environment = "dev"
5068
Owner = "test-user"
5169
}
52-
}
70+
}

0 commit comments

Comments
 (0)