[EC-318] Allowed GitHub Runner subnet for io-subscription-migration a…

…nd io-developer-portal-service-data (#1157)
pagopa · Sep 10, 2024 · 00fc528 · 00fc528
1 parent 2ca067f
commit 00fc528
Show file tree

Hide file tree

Showing 3 changed files with 18 additions and 0 deletions.
diff --git a/src/domains/selfcare/_modules/app_services/data.tf b/src/domains/selfcare/_modules/app_services/data.tf
@@ -16,6 +16,12 @@ data "azurerm_subnet" "services_cms_backoffice_snet_itn" {
   resource_group_name  = "${var.project}-itn-common-rg-01"
 }
 
+data "azurerm_subnet" "self_hosted_runner_snet" {
+  name                 = "io-p-github-runner-snet"
+  virtual_network_name = local.vnet_name_common
+  resource_group_name  = local.resource_group_name_common
+}
+
 data "azurerm_cosmosdb_account" "cosmos_api" {
   name                = "${var.project}-cosmos-api"
   resource_group_name = "${var.project}-rg-internal"

diff --git a/src/domains/selfcare/_modules/app_services/function_devportal_service_data.tf b/src/domains/selfcare/_modules/app_services/function_devportal_service_data.tf
@@ -44,6 +44,9 @@ module "function_devportalservicedata" {
   subnet_id   = var.subnet_id
   allowed_ips = var.app_insights_ips
   allowed_subnets = [
+    # self hosted runners subnet
+    data.azurerm_subnet.self_hosted_runner_snet.id,
+    #
     var.subnet_id,
   ]
 
@@ -90,6 +93,9 @@ module "function_devportalservicedata_staging_slot" {
     [],
   )
   allowed_subnets = [
+    # self hosted runners subnet
+    data.azurerm_subnet.self_hosted_runner_snet.id,
+    #
     data.azurerm_subnet.snet_azdoa.id
   ]
 

diff --git a/src/domains/selfcare/_modules/app_services/function_subscription_migrations.tf b/src/domains/selfcare/_modules/app_services/function_subscription_migrations.tf
@@ -30,6 +30,9 @@ module "function_subscriptionmigrations" {
   subnet_id   = var.subnet_id
   allowed_ips = var.app_insights_ips
   allowed_subnets = [
+    # self hosted runners subnet
+    data.azurerm_subnet.self_hosted_runner_snet.id,
+    #
     var.subnet_id,
     data.azurerm_subnet.services_cms_backoffice_snet_itn.id
   ]
@@ -87,6 +90,9 @@ module "function_subscriptionmigrations_staging_slot" {
     [],
   )
   allowed_subnets = [
+    # self hosted runners subnet
+    data.azurerm_subnet.self_hosted_runner_snet.id,
+    #
     data.azurerm_subnet.snet_azdoa.id
   ]