Skip to content

customer-managed/azure: consume terraform-azure-redpanda-byovnet as a module#89

Open
sbocinec wants to merge 1 commit into
mainfrom
st/azure-customer-managed-module
Open

customer-managed/azure: consume terraform-azure-redpanda-byovnet as a module#89
sbocinec wants to merge 1 commit into
mainfrom
st/azure-customer-managed-module

Conversation

@sbocinec
Copy link
Copy Markdown
Contributor

@sbocinec sbocinec commented May 15, 2026

Stop maintaining customer-managed/azure/terraform/ as a hand-copied duplicate of the published redpanda-data/redpanda-byovnet/azure module — consume the module instead. The local copy was pinned at v1.0.0 and had drifted (missing storage account hardening, management container soft-delete, and the grant_caller_management_storage_access variable); switching to ~> 1.1 picks all of that up.

Changes

  • Delete 10 duplicated .tf files; replace with one module "byovnet" call pinned to ~> 1.1 from the registry.
  • Add 51 moved {} blocks so existing deployments migrate in place (terraform plan should be a no-op).
  • Forward every prior output from module.byovnet.* (43 outputs, 1:1 name match).
  • Relax provider pin azurerm = "=3.98.0""~> 3.98"; lockfile refreshed to azurerm 3.117.1.
  • Drop the stale terraform-docs-generated terraform/README.md; variable docs now live in the module's registry page.
  • README points at the module repo for resource-level review + adds migration note for existing customers.

Net: +394 / −1082 across 16 files.

Test plan

  • terraform fmt -check, init -upgrade, validate clean (one pre-existing deprecation warning is internal to the module)
  • moved {} count matches module resource count (51 = 51)
  • Output names match the module's outputs 1:1 (empty diff)
  • Critical: terraform plan against pre-refactor state reports no changes

Refs

This directory was a line-identical copy of v1.0.0 of the published
terraform-azure-redpanda-byovnet module, which has since gained storage
account hardening, soft-delete on the management container, and the
`grant_caller_management_storage_access` variable.

Replace the duplicated .tf files with a single `module "byovnet"`
invocation against the registry (`redpanda-data/redpanda-byovnet/azure`,
~> 1.1). main.tf also carries `moved {}` blocks for every relocated
resource so existing deployments migrate in place with zero recreation.

Provider pin relaxed from azurerm = "=3.98.0" to "~> 3.98" so module
updates that require newer provider features keep working. Drops the
stale terraform-docs-generated terraform/README.md; variable docs now
live in the module's registry page.

Mirrors the AWS twin in #88.
@sbocinec sbocinec changed the title Consume terraform-azure-redpanda-byovnet as a module customer-managed/azure: consume terraform-azure-redpanda-byovnet as a module May 15, 2026
@sbocinec sbocinec requested a review from a team May 18, 2026 07:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant