Replace dedicated endpoint module with standardized one

Azure · Nov 14, 2024 · d9bd6c2 · d9bd6c2
1 parent 3bf5906
commit d9bd6c2
Show file tree

Hide file tree

Showing 3 changed files with 10 additions and 81 deletions.
diff --git a/dev-infrastructure/modules/keyvault/keyvault-private-endpoint.bicep b/dev-infrastructure/modules/keyvault/keyvault-private-endpoint.bicep
diff --git a/dev-infrastructure/modules/private-endpoint.bicep b/dev-infrastructure/modules/private-endpoint.bicep
@@ -3,12 +3,14 @@ param location string
 @description('The service type the private endpoint is created for')
 @allowed([
   'eventgrid'
+  'keyvault'
 ])
 param serviceType string
 
 @description('The group id of the private endpoint service')
 @allowed([
   'topicspace'
+  'vault'
 ])
 param groupId string
 
@@ -25,6 +27,9 @@ var endpointConfig = {
   eventgrid: {
     topicspace: 'privatelink.ts.eventgrid.azure.net'
   }
+  keyvault: {
+    vault: 'privatelink.vaultcore.azure.net'
+  }
 }
 
 resource eventGridPrivateEndpointDnsZone 'Microsoft.Network/privateDnsZones@2020-06-01' = {

diff --git a/dev-infrastructure/templates/svc-cluster.bicep b/dev-infrastructure/templates/svc-cluster.bicep
@@ -257,14 +257,15 @@ module serviceKeyVault '../modules/keyvault/keyvault.bicep' = {
 
 output svcKeyVaultName string = serviceKeyVault.outputs.kvName
 
-module serviceKeyVaultPrivateEndpoint '../modules/keyvault/keyvault-private-endpoint.bicep' = {
+module serviceKeyVaultPrivateEndpoint '../modules/private-endpoint.bicep' = {
   name: '${deployment().name}-svcs-kv-pe'
   params: {
     location: location
-    keyVaultName: serviceKeyVaultName
-    subnetId: svcCluster.outputs.aksNodeSubnetId
+    subnetIds: [svcCluster.outputs.aksNodeSubnetId]
     vnetId: svcCluster.outputs.aksVnetId
-    keyVaultId: serviceKeyVault.outputs.kvId
+    privateLinkServiceId: serviceKeyVault.outputs.kvId
+    serviceType: 'keyvault'
+    groupId: 'vault'
   }
 }