feat(AZ-1088): add AzureRM v4 provider major changes

claranet · Nov 6, 2024 · 90b68d5 · 90b68d5
1 parent 36cdb0a
commit 90b68d5
Show file tree

Hide file tree

Showing 3 changed files with 9 additions and 2 deletions.
diff --git a/README.md b/README.md
@@ -123,6 +123,7 @@ No modules.
 | name\_suffix | Optional suffix for the generated name. | `string` | `""` | no |
 | network\_security\_group\_name | The Network Security Group name to associate with the subnets. | `string` | `null` | no |
 | network\_security\_group\_rg | The Network Security Group RG to associate with the subnet. Default is the same RG than the subnet. | `string` | `null` | no |
+| private\_endpoint\_network\_policies | Enable or Disable network policies for the private endpoint on the subnet. Possible values are `Disabled`, `Enabled`, `NetworkSecurityGroupEnabled` and `RouteTableEnabled`. | `string` | `null` | no |
 | private\_link\_endpoint\_enabled | Enable or disable network policies for the Private Endpoint on the subnet. | `bool` | `null` | no |
 | private\_link\_service\_enabled | Enable or disable network policies for the Private Link Service on the subnet. | `bool` | `null` | no |
 | resource\_group\_name | Resource group name. | `string` | n/a | yes |

diff --git a/r-subnet.tf b/r-subnet.tf
@@ -1,5 +1,5 @@
 moved {
-  from = azurerm_subnet.main
+  from = azurerm_subnet.subnet
   to   = azurerm_subnet.main
 }
 
@@ -26,7 +26,7 @@ resource "azurerm_subnet" "main" {
     }
   }
 
-  private_endpoint_network_policies_enabled     = var.private_link_endpoint_enabled
+  private_endpoint_network_policies             = coalesce(var.private_endpoint_network_policies, var.private_link_endpoint_enabled ? "Enabled" : "Disabled")
   private_link_service_network_policies_enabled = var.private_link_service_enabled
 
   default_outbound_access_enabled = var.default_outbound_access_enabled

diff --git a/variables-subnet.tf b/variables-subnet.tf
@@ -50,6 +50,12 @@ variable "private_link_endpoint_enabled" {
   default     = null
 }
 
+variable "private_endpoint_network_policies" {
+  description = "Enable or Disable network policies for the private endpoint on the subnet. Possible values are `Disabled`, `Enabled`, `NetworkSecurityGroupEnabled` and `RouteTableEnabled`."
+  type        = string
+  default     = null
+}
+
 variable "private_link_service_enabled" {
   description = "Enable or disable network policies for the Private Link Service on the subnet."
   type        = bool