[CES-477] Create Private DNS Zone for KeyVaults (#1291)

src/common/_modules/global/modules/dns/outputs.tf

@@ -45,4 +45,4 @@ output "external_domain" {
 
 output "dns_default_ttl_sec" {
   value = var.dns_default_ttl_sec
-}
+}

src/common/_modules/global/modules/dns/private_dns_zone_links.tf

@@ -153,6 +153,17 @@ resource "azurerm_private_dns_zone_virtual_network_link" "srch_private_vnet_comm
   tags = var.tags
 }
 
+resource "azurerm_private_dns_zone_virtual_network_link" "vault_private_vnet_common" {
+  for_each              = { for name, vnet in var.vnets : name => vnet if contains(["weu", "itn"], name) }
+  name                  = each.value.name
+  resource_group_name   = var.resource_groups.common
+  private_dns_zone_name = azurerm_private_dns_zone.privatelink_vault.name
+  virtual_network_id    = each.value.id
+  registration_enabled  = false
+
+  tags = var.tags
+}
+
 resource "azurerm_private_dns_zone_virtual_network_link" "azure_api_net_vnet_common" {
   for_each              = { for name, vnet in var.vnets : name => vnet if contains(["weu", "itn"], name) }
   name                  = each.value.name
@@ -184,4 +195,4 @@ resource "azurerm_private_dns_zone_virtual_network_link" "scm_azure_api_net_vnet
   registration_enabled  = false
 
   tags = var.tags
-}
+}

src/common/_modules/global/modules/dns/private_dns_zones.tf

@@ -106,6 +106,11 @@ resource "azurerm_private_dns_zone" "privatelink_srch" {
   resource_group_name = var.resource_groups.common
 }
 
+resource "azurerm_private_dns_zone" "privatelink_vault" {
+  name                = "privatelink.vaultcore.azure.net"
+  resource_group_name = var.resource_groups.common
+}
+
 resource "azurerm_private_dns_zone" "azure_api_net" {
   name                = "azure-api.net"
   resource_group_name = var.resource_groups.common
@@ -125,4 +130,4 @@ resource "azurerm_private_dns_zone" "scm_azure_api_net" {
   resource_group_name = var.resource_groups.common
 
   tags = var.tags
-}
+}