main.tf

locals {
  name_prefix = var.cluster_name
}

resource "azurerm_resource_group" "main" {
  name     = "${local.name_prefix}-rg"
  location = var.location
}

## Network resources
resource "azurerm_virtual_network" "main" {
  name                = "${local.name_prefix}-vnet"
  location            = azurerm_resource_group.main.location
  resource_group_name = azurerm_resource_group.main.name
  address_space       = [var.aro_virtual_network_cidr_block]
  tags                = var.tags
}

resource "azurerm_subnet" "control_plane_subnet" {
  name                                           = "${local.name_prefix}-cp-subnet"
  resource_group_name                            = azurerm_resource_group.main.name
  virtual_network_name                           = azurerm_virtual_network.main.name
  address_prefixes                               = [var.aro_control_subnet_cidr_block]
  service_endpoints                              = ["Microsoft.Storage", "Microsoft.ContainerRegistry"]
  enforce_private_link_service_network_policies  = true
  enforce_private_link_endpoint_network_policies = true
}

resource "azurerm_subnet" "machine_subnet" {
  name                 = "${local.name_prefix}-machine-subnet"
  resource_group_name  = azurerm_resource_group.main.name
  virtual_network_name = azurerm_virtual_network.main.name
  address_prefixes     = [var.aro_machine_subnet_cidr_block]
  service_endpoints    = ["Microsoft.Storage", "Microsoft.ContainerRegistry"]
}

## ARO Cluster

resource "azureopenshift_redhatopenshift_cluster" "cluster" {
  name                = var.cluster_name
  location            = azurerm_resource_group.main.location
  resource_group_name = azurerm_resource_group.main.name
  tags                = var.tags

  master_profile {
    subnet_id = azurerm_subnet.control_plane_subnet.id
  }

  worker_profile {
    subnet_id = azurerm_subnet.machine_subnet.id
  }

  service_principal {
    client_id     = azuread_application.cluster.application_id
    client_secret = azuread_application_password.cluster.value
  }


  cluster_profile {
    pull_secret = file(var.pull_secret_path)
  }

  depends_on = [
    azurerm_subnet.machine_subnet,
    azurerm_subnet.control_plane_subnet,
    azurerm_role_assignment.vnet
  ]
}

resource "shell_script" "day2ops" {

  lifecycle_commands {
    create = templatefile(
      "${path.module}/templates/e2e.tftpl",
      {
        cluster_name        = var.cluster_name,
        resource_group_name = azurerm_resource_group.main.name
    })
    delete = templatefile(
      "${path.module}/templates/e2e.tftpl",
      {
        cluster_name        = var.cluster_name,
        resource_group_name = azurerm_resource_group.main.name
    })
    read = templatefile(
      "${path.module}/templates/e2e.tftpl",
      {
        cluster_name        = var.cluster_name,
        resource_group_name = azurerm_resource_group.main.name
    })
  }

  depends_on = [
    azureopenshift_redhatopenshift_cluster.cluster
  ]
}