add storage, update backend

Author: MalteSchwitters

.gitignore

@@ -31,4 +31,6 @@ override.tf.json
 
 # Ignore CLI configuration files
 .terraformrc
-terraform.rc
+terraform.rc
+
+.vscode

backend

@@ -1,15 +1,15 @@
-resource "azurerm_container_app_environment" "lissi_eventplanner" {
+resource "azurerm_container_app_environment" "eventplanner" {
   name                       = "cae-${local.stack}"
-  location                   = azurerm_resource_group.lissi_eventplanner.location
-  resource_group_name        = azurerm_resource_group.lissi_eventplanner.name
-  log_analytics_workspace_id = azurerm_log_analytics_workspace.lissi_eventplanner.id
+  location                   = azurerm_resource_group.eventplanner.location
+  resource_group_name        = azurerm_resource_group.eventplanner.name
+  log_analytics_workspace_id = azurerm_log_analytics_workspace.eventplanner.id
   tags                       = local.default_tags
 }
 
-resource "azurerm_container_app" "lissi_eventplanner" {
+resource "azurerm_container_app" "eventplanner" {
   name                         = "ca-${local.stack}"
-  container_app_environment_id = azurerm_container_app_environment.lissi_eventplanner.id
-  resource_group_name          = azurerm_resource_group.lissi_eventplanner.name
+  container_app_environment_id = azurerm_container_app_environment.eventplanner.id
+  resource_group_name          = azurerm_resource_group.eventplanner.name
   revision_mode                = "Single"
   tags                         = local.default_tags
 
@@ -33,18 +33,32 @@ resource "azurerm_container_app" "lissi_eventplanner" {
   lifecycle {
     // Required to not delete the manually created custom domain since it is not possible to create a managed certificate for a custom domain with terraform
     // https://github.com/hashicorp/terraform-provider-azurerm/issues/21866
-    ignore_changes = ["ingress"]
+    ignore_changes = [
+      #ingress
+    ]
   }
 
   template {
     min_replicas = 1
     max_replicas = 1
 
+    volume {
+      name         = "vol-eventplanner"
+      storage_name = azurerm_container_app_environment_storage.eventplanner.name
+      storage_type = "AzureFile"
+    }
+
     container {
       name   = "eventplanner"
       image  = "ghcr.io/grossherzogin-elisabeth/eventplanner:main"
-      cpu    = 0.5
-      memory = "1Gi"
+      cpu    = 1.0
+      memory = "2Gi"
+
+      volume_mounts {
+        name = "vol-eventplanner"
+        path = "/app/data"
+      }
+
       env {
         name  = "AUTH_ISSUER_URI"
         value = "https://login.microsoftonline.com/63384ddf-6496-44bd-b22c-93e944e6ed88/v2.0"

terraform/container_app.tf

@@ -7,16 +7,16 @@ locals {
   }
 }
 
-resource "azurerm_resource_group" "lissi_eventplanner" {
+resource "azurerm_resource_group" "eventplanner" {
   name     = "rg-${local.stack}"
   location = var.region
   tags     = local.default_tags
 }
 
-resource "azurerm_log_analytics_workspace" "lissi_eventplanner" {
+resource "azurerm_log_analytics_workspace" "eventplanner" {
   name                = "log-${local.stack}"
-  location            = azurerm_resource_group.lissi_eventplanner.location
-  resource_group_name = azurerm_resource_group.lissi_eventplanner.name
+  location            = azurerm_resource_group.eventplanner.location
+  resource_group_name = azurerm_resource_group.eventplanner.name
   sku                 = "PerGB2018"
   retention_in_days   = 30
   tags                = local.default_tags

terraform/main.tf

@@ -1,3 +1,3 @@
 output "azurerm_container_app_url" {
-  value = azurerm_container_app.lissi_eventplanner.latest_revision_fqdn
+  value = azurerm_container_app.eventplanner.latest_revision_fqdn
 }

terraform/outputs.tf

@@ -10,4 +10,15 @@ terraform {
 
 provider "azurerm" {
   features {}
+  client_id = "5dbeb429-820d-4f7c-bb17-dc98eac149df"
+  #client_secret   = "**********************"
+  tenant_id       = "63384ddf-6496-44bd-b22c-93e944e6ed88"
+  subscription_id = "7cb8180c-c0ab-43e3-9088-7b1b359cc861"
 }
+
+# https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/guides/service_principal_client_secret
+# Expires 01/01/2025
+#export ARM_CLIENT_ID="5dbeb429-820d-4f7c-bb17-dc98eac149df"
+#export ARM_CLIENT_SECRET=""
+#export ARM_SUBSCRIPTION_ID="7cb8180c-c0ab-43e3-9088-7b1b359cc861"
+#export ARM_TENANT_ID="63384ddf-6496-44bd-b22c-93e944e6ed88"

terraform/provider.tf

@@ -1,19 +1,19 @@
-data "azurerm_key_vault" "lissi_eventplanner" {
+data "azurerm_key_vault" "eventplanner" {
   name                = "kv-lissi"
   resource_group_name = "rg-lissi"
 }
 
 data "azurerm_key_vault_secret" "client_id" {
   name         = "auth-client-id"
-  key_vault_id = data.azurerm_key_vault.lissi_eventplanner.id
+  key_vault_id = data.azurerm_key_vault.eventplanner.id
 }
 
 data "azurerm_key_vault_secret" "client_secret" {
   name         = "auth-client-secret"
-  key_vault_id = data.azurerm_key_vault.lissi_eventplanner.id
+  key_vault_id = data.azurerm_key_vault.eventplanner.id
 }
 
 data "azurerm_key_vault_certificate" "ssl_certificate" {
   name         = "cert-crew-grosses-meer-surf"
-  key_vault_id = data.azurerm_key_vault.lissi_eventplanner.id
+  key_vault_id = data.azurerm_key_vault.eventplanner.id
 }

terraform/secrets.tf

@@ -0,0 +1,23 @@
+resource "azurerm_storage_account" "eventplanner" {
+  name                     = "steventplanner"
+  resource_group_name      = azurerm_resource_group.eventplanner.name
+  location                 = azurerm_resource_group.eventplanner.location
+  account_tier             = "Standard"
+  account_replication_type = "LRS"
+  tags                     = local.default_tags
+}
+
+resource "azurerm_storage_share" "eventplanner" {
+  name                 = "share-eventplanner"
+  storage_account_name = azurerm_storage_account.eventplanner.name
+  quota                = 5
+}
+
+resource "azurerm_container_app_environment_storage" "eventplanner" {
+  name                         = "caes-eventplanner"
+  container_app_environment_id = azurerm_container_app_environment.eventplanner.id
+  account_name                 = azurerm_storage_account.eventplanner.name
+  share_name                   = azurerm_storage_share.eventplanner.name
+  access_key                   = azurerm_storage_account.eventplanner.primary_access_key
+  access_mode                  = "ReadWrite"
+}