add role

pagopa · Jan 27, 2025 · 3517f5d · 3517f5d
1 parent e4d89ae
commit 3517f5d
Show file tree

Hide file tree

Showing 6 changed files with 28 additions and 16 deletions.
diff --git a/src/common/_modules/apim/data.tf b/src/common/_modules/apim/data.tf
@@ -36,4 +36,11 @@ data "azurerm_private_dns_zone" "scm_azure_api_net" {
 
   name                = "scm.azure-api.net"
   resource_group_name = "io-p-rg-common"
-}
+}
+
+data "azurerm_linux_web_app" "cgn_pe_backend_app_01" {
+  provider = azurerm.prod-cgn
+
+  name                = "io-p-itn-cgn-pe-backend-app-01"
+  resource_group_name = "io-p-itn-cgn-pe-rg-01"
+}
diff --git a/src/common/_modules/apim/provider.tf b/src/common/_modules/apim/provider.tf
@@ -0,0 +1,6 @@
+provider "azurerm" {
+  alias           = "prod-cgn"
+  subscription_id = "74da48a3-b0e7-489d-8172-da79801086ed"
+
+  features {}
+}
diff --git a/src/common/_modules/apim/rbac.tf b/src/common/_modules/apim/rbac.tf
@@ -89,3 +89,17 @@ module "iam_adgroup_bonus_admins" {
     }
   ]
 }
+
+module "iam_cgn_pe_backend_app_01" {
+  source = "github.com/pagopa/dx//infra/modules/azure_role_assignments?ref=main"
+
+  principal_id = data.azurerm_linux_web_app.cgn_pe_backend_app_01.identity[0].principal_id
+
+  apim = [
+    {
+      name                = module.apim_v2.name
+      resource_group_name = module.apim_v2.resource_group_name
+      role                = "owner"
+    }
+  ]
+}
diff --git a/src/common/_modules/private_endpoint/data.tf b/src/common/_modules/private_endpoint/data.tf
diff --git a/src/common/_modules/private_endpoint/locals.tf b/src/common/_modules/private_endpoint/locals.tf
@@ -1,12 +1,5 @@
 locals {
   private_endpoints = {
-    "cgn-psql" = {
-      "01" = {
-        resource_id         = data.azurerm_postgresql_server.cgn_psql.id
-        subresource_names   = ["postgresqlServer"]
-        private_dns_zone_id = var.dns_zones.postgres.id
-      }
-    }
     "selc-evhns" = {
       "01" = {
         resource_id         = "/subscriptions/813119d7-0943-46ed-8ebe-cebe24f9106c/resourceGroups/selc-p-event-rg/providers/Microsoft.EventHub/namespaces/selc-p-eventhub-ns"

diff --git a/src/common/prod/data.tf b/src/common/prod/data.tf
@@ -123,4 +123,3 @@ data "azurerm_subnet" "itn_msgs_sending_func_snet" {
   resource_group_name  = local.core.networking.itn.vnet_common.resource_group_name
   virtual_network_name = local.core.networking.itn.vnet_common.name
 }
-
Original file line number	Diff line number	Diff line change
Expand Up		@@ -123,4 +123,3 @@ data "azurerm_subnet" "itn_msgs_sending_func_snet" {
		resource_group_name = local.core.networking.itn.vnet_common.resource_group_name
		virtual_network_name = local.core.networking.itn.vnet_common.name
		}