feat(privatek8s): add `managed-csi-premium-retain` storage class (#223)

privatek8s.tf

@@ -122,6 +122,18 @@ resource "azurerm_role_assignment" "privatek8s_networkcontributor" {
   skip_service_principal_aad_check = true
 }
 
+resource "kubernetes_storage_class" "managed_csi_premium_retain" {
+  metadata {
+    name = "managed-csi-premium-retain"
+  }
+  storage_provisioner = "disk.csi.azure.com"
+  reclaim_policy      = "Retain"
+  parameters = {
+    skuname = "Premium_LRS"
+  }
+  provider = kubernetes.privatek8s
+}
+
 output "privatek8s_kube_config" {
   value     = azurerm_kubernetes_cluster.privatek8s.kube_config_raw
   sensitive = true

providers.tf

@@ -3,6 +3,14 @@ provider "azurerm" {
   features {}
 }
 
+provider "kubernetes" {
+  alias                  = "privatek8s"
+  host                   = azurerm_kubernetes_cluster.privatek8s.kube_config.0.host
+  client_certificate     = base64decode(azurerm_kubernetes_cluster.privatek8s.kube_config.0.client_certificate)
+  client_key             = base64decode(azurerm_kubernetes_cluster.privatek8s.kube_config.0.client_key)
+  cluster_ca_certificate = base64decode(azurerm_kubernetes_cluster.privatek8s.kube_config.0.cluster_ca_certificate)
+}
+
 provider "postgresql" {
   /**
   Important: terraform must be allowed to reach this instance through the network. Check the followings:

versions.tf

@@ -5,6 +5,9 @@ terraform {
     azurerm = {
       source = "hashicorp/azurerm"
     }
+    kubernetes = {
+      source = "hashicorp/kubernetes"
+    }
     local = {
       source = "hashicorp/local"
     }