-
Notifications
You must be signed in to change notification settings - Fork 3
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Update Postgres DB and Add DB Variables to Middleware-Api #476
Update Postgres DB and Add DB Variables to Middleware-Api #476
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
resource_group_name = var.resource_group | ||
subnet_id = azurerm_subnet.db-subnet.id | ||
|
||
private_service_connection { |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I removed the azurerm_private_endpoint
resource, which can be an optional architectural design if we want a higher level security. To unblock the engineers and continue with e2e testing it is best to remove it. However, the communication of the network for the middleware and database respective delegations and app_settings allow it to communicate privately in the vnet.
5fdafa9
…all_rule for app_service
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LG
Description
Update database module to include the server id and fqdn and ensure that the credentials of the database can be accessible to the middleware-api module.
azurerm_postgresql_flexible_server_firewall_rule
resource for added protection of the communication of the database and middleware app_service.azurerm_key_vault
resource and removing it from theazurerm
provider features section.Related Issues
#478
Checklist