locals.private_endpoints.tf

locals {
  # if the private endpoint name is provided (var.private_endpoints.name), we use this as the suffix for the other resources
  custom_nic_computed_name = {
    for k, v in var.private_endpoints : k => v.name != null ? "nic-${v.subresource_name}-${v.name}" : "nic-${local.private_endpoint_computed_name[k]}"
  }
  private_dns_zone_group_type = "Microsoft.Network/privateEndpoints/privateDnsZoneGroups@2024-05-01"
  private_dns_zone_groups = {
    for k, v in var.private_endpoints : k => {
      type = local.private_dns_zone_group_type
      name = v.private_dns_zone_group_name
      body = {
        properties = {
          privateDnsZoneConfigs = [
            for private_dns_zone_resource_id in v.private_dns_zone_resource_ids : {
              name = lookup(v, "private_dns_zone_group_name", "default")
              properties = {
                privateDnsZoneId = private_dns_zone_resource_id
              }
            }
          ]
        }
      }
    }
    if var.private_endpoints_manage_dns_zone_group
  }
  # these computed names are used if the user does not provide their own for either the private endpoint, nic, or private service connection
  private_endpoint_computed_name = {
    for k, v in var.private_endpoints : k => "pep-${v.subresource_name}-${uuidv5("url", format("%s", var.private_endpoints_scope))}"
  }
  private_endpoints = {
    for k, v in var.private_endpoints : k => {
      type = local.private_endpoints_type
      name = v.name != null ? v.name : local.private_endpoint_computed_name[k]
      tags = v.tags
      body = {
        properties = {
          applicationSecurityGroups = v.application_security_group_associations != null ? [
            for application_security_group_resource_id in v.application_security_group_associations : {
              id = application_security_group_resource_id
            }
          ] : []
          customNetworkInterfaceName = v.network_interface_name != null ? v.network_interface_name : local.custom_nic_computed_name[k]
          ipConfigurations = v.ip_configurations != null ? [
            for ip_configuration in v.ip_configurations : {
              name = lookup(ip_configuration, "name", null)
              properties = {
                privateIPAddress = lookup(ip_configuration, "private_ip_address", null)
                groupId          = v.subresource_name
                memberName       = lookup(ip_configuration, "member_name", "default")
              }
            }
          ] : []
          privateLinkServiceConnections = [
            {
              name = v.private_service_connection_name != null ? v.private_service_connection_name : local.psc_computed_name[k]
              properties = {
                privateLinkServiceId = var.private_endpoints_scope
                groupIds             = v.subresource_name != null ? [v.subresource_name] : null
              }
            }
          ]
          subnet = {
            id = v.subnet_resource_id
          }
        }
      }
    }
  }
  private_endpoints_type = "Microsoft.Network/privateEndpoints@2024-05-01"
  psc_computed_name = {
    for k, v in var.private_endpoints : k => v.name != null ? "psc-${v.subresource_name}-${v.name}" : "pcon-${local.private_endpoint_computed_name[k]}"
  }
}