mirror of https://github.com/jenkins-infra/azure
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
38 lines
1.3 KiB
38 lines
1.3 KiB
resource "azurerm_resource_group" "archives" {
|
|
name = "archives"
|
|
location = var.location
|
|
tags = local.default_tags
|
|
}
|
|
|
|
resource "azurerm_storage_account" "archives" {
|
|
name = "jenkinsinfraarchives"
|
|
resource_group_name = azurerm_resource_group.archives.name
|
|
location = azurerm_resource_group.archives.location
|
|
account_tier = "Standard"
|
|
account_replication_type = "GRS" # recommended for backups
|
|
# https://learn.microsoft.com/en-gb/azure/storage/common/infrastructure-encryption-enable
|
|
infrastructure_encryption_enabled = true
|
|
min_tls_version = "TLS1_2" # default value, needed for tfsec
|
|
|
|
network_rules {
|
|
default_action = "Deny"
|
|
ip_rules = values(local.admin_allowed_ips)
|
|
virtual_network_subnet_ids = [data.azurerm_subnet.privatek8s_tier.id]
|
|
bypass = ["AzureServices"]
|
|
}
|
|
|
|
tags = local.default_tags
|
|
}
|
|
|
|
## Archived items
|
|
|
|
# Container for the dump of confluence databases
|
|
resource "azurerm_storage_container" "confluence_dumps" {
|
|
name = "confluence-databases-dump"
|
|
storage_account_name = azurerm_storage_account.archives.name
|
|
container_access_type = "private"
|
|
metadata = merge(local.default_tags, {
|
|
helpdesk = "https://github.com/jenkins-infra/helpdesk/issues/3249"
|
|
})
|
|
}
|