Private endpoint should actually be in the cluster RG

Azure · Nov 5, 2024 · 6322ba2 · 6322ba2
1 parent 033878e
commit 6322ba2
Show file tree

Hide file tree

Showing 2 changed files with 22 additions and 1 deletion.
diff --git a/dev-infrastructure/templates/mgmt-cluster.bicep b/dev-infrastructure/templates/mgmt-cluster.bicep
@@ -184,7 +184,6 @@ resource eventGridNamespace 'Microsoft.EventGrid/namespaces@2024-06-01-preview'
 
 module eventGrindPrivateEndpoint '../modules/private-endpoint.bicep' = {
   name: 'eventGridPrivateEndpoint'
-  scope: resourceGroup(regionalResourceGroup)
   params: {
     location: location
     serviceType: 'eventgrid'

diff --git a/dev-infrastructure/templates/svc-cluster.bicep b/dev-infrastructure/templates/svc-cluster.bicep
@@ -394,3 +394,25 @@ module oidc '../modules/oidc/main.bicep' = {
     svcCluster
   ]
 }
+
+//
+//  E V E N T   G R I D   P R I V A T E   E N D P O I N T   C O N N E C T I O N
+//
+
+resource eventGridNamespace 'Microsoft.EventGrid/namespaces@2024-06-01-preview' existing = {
+  name: maestroEventGridNamespacesName
+  scope: resourceGroup(regionalResourceGroup)
+}
+
+module eventGrindPrivateEndpoint '../modules/private-endpoint.bicep' = {
+  name: 'eventGridPrivateEndpoint'
+  params: {
+    location: location
+    serviceType: 'eventgrid'
+    subnetIds: [svcCluster.outputs.aksNodeSubnetId]
+    privateLinkServiceId: eventGridNamespace.id
+    groupIds: ['topicspace']
+    privateEndpointDnsZoneName: 'privatelink.ts.eventgrid.azure.net'
+    vnetId: svcCluster.outputs.aksVnetId
+  }
+}