Hello, I have inherited a terraform script that was originally designed by a 3rd party, although I understand most of the structure, some areas are still foreign and I have been attempting to clean up. My current issue is an attempt to implement a Private Endpoint for a resource in one environment tree and have the DNS dynamically update which is located in another environment tree. I am including a crude image attached to kind of show my tree structure.
So in this case, I need to see if its possible to have terraform reference a value that belongs to another branch that isnt under the same root.
Under my terraform_environments (“folder”)>modules>environment_resources>environment.tf> i have the following entry for my private endpoint:
resource “azurerm_private_endpoint” “pefunctionprint” {
name = “privatelink${azurerm_function_app.functionappprint.name}”
location = var.location
resource_group_name = data.azurerm_resource_group.rg.name
subnet_id = data.azurerm_subnet.snet_mgmt.id
tags = merge(var.tags, {created_by=var.created_by}, {owner=var.owner}, {role=“endpoint”})
private_dns_zone_group {
name = azurerm_private_dns_zone.dnsprivateazweb.name
private_dns_zone_ids = [/subscriptions/9508c080-c9f4-etcetcetc/resourceGroups/resourcegroupname/yadayada…]
}
private_service_connection {
name = “privateserviceconnection${azurerm_function_app.functionappprint.name}”
private_connection_resource_id = azurerm_function_app.functionappprin.id
is_manual_connection = false
subresource_names = [“sites”]
}
}
The DNS Zone i am trying to reference is under:
terraform_network_hub (“folder”)>modules>hub-resources>hub_resources.tf
here is the code for one of dns zones i am trying to reference:
resource “azurerm_private_dns_zone” “dnsprivateazweb” {
name = “privatelink.azurewebsites.net”
resource_group_name = data.azurerm_resource_group.rg.name
}
I have reviewed several documentation sites and forums but cant seem to piece this one together right. I recognize I am likely not including all the right information for you to easily assist me, but I am more than happy to provide as much information as I can in an effort to find a conclusion to this. A few additional details, this is for Azure, the branches and modules in question are in separate terraform root folders, but the resources in azure are at least referenceable between subscriptions. (I also apologize for any incorrect terms I have used. I’m willing to update my vernacular as we go)
Any assistance I am able to get would be greatly appreciated. I thank you in advance.