fix: Add variable to manage network access to durable function app st…

…orage account (#194) Co-authored-by: Andrea Grillo <[email protected]>
pagopa · Dec 6, 2023 · 4cc51a4 · 4cc51a4
1 parent 9b310ad
commit 4cc51a4
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 14 deletions.
diff --git a/function_app/main.tf b/function_app/main.tf
@@ -30,19 +30,6 @@ module "storage_account_durable_function" {
   advanced_threat_protection    = false
   public_network_access_enabled = false
 
-  network_rules = {
-    default_action = "Deny"
-    ip_rules       = []
-    bypass = [
-      "Logging",
-      "Metrics",
-      "AzureServices",
-    ]
-    virtual_network_subnet_ids = [
-      var.subnet_id
-    ]
-  }
-
   tags = var.tags
 }
 
@@ -338,7 +325,10 @@ resource "azurerm_linux_function_app" "this" {
   lifecycle {
     ignore_changes = [
       virtual_network_subnet_id,
-      app_settings["WEBSITE_HEALTHCHECK_MAXPINGFAILURES"]
+      app_settings["WEBSITE_HEALTHCHECK_MAXPINGFAILURES"],
+      tags["hidden-link: /app-insights-conn-string"],
+      tags["hidden-link: /app-insights-instrumentation-key"],
+      tags["hidden-link: /app-insights-resource-id"]
     ]
   }
 

diff --git a/function_app_slot/main.tf b/function_app_slot/main.tf
@@ -98,6 +98,9 @@ resource "azurerm_linux_function_app_slot" "this" {
     ignore_changes = [
       virtual_network_subnet_id,
       app_settings["WEBSITE_HEALTHCHECK_MAXPINGFAILURES"],
+      tags["hidden-link: /app-insights-conn-string"],
+      tags["hidden-link: /app-insights-instrumentation-key"],
+      tags["hidden-link: /app-insights-resource-id"]
     ]
   }