Azure Function App

This Terraform module creates an Azure Function App with its App Service Plan, a consumption plan by default. A Storage Account and an Application Insights are required and are created if not provided. This module allows to deploy a application from a local or remote ZIP file that will be stored on the associated storage account.

You can create an Azure Function without plan by using the submodule modules/functionapp.

Azure Functions v3 are now supported by this module and is the default one.

Limitations

Based on a current limitation, you cannot mix Windows and Linux apps in the same resource group.

Limitations documentation: docs.microsoft.com/en-us/azure/app-service/containers/app-service-linux-intro#limitations

Global versioning rule for Claranet Azure modules

Module version	Terraform version	AzureRM version
>= 5.x.x	0.15.x & 1.0.x	>= 2.0
>= 4.x.x	0.13.x	>= 2.0
>= 3.x.x	0.12.x	>= 2.0
>= 2.x.x	0.12.x	< 2.0
< 2.x.x	0.11.x	< 2.0

Usage

This module is optimized to work with the Claranet terraform-wrapper tool which set some terraform variables in the environment needed by this module. More details about variables set by the terraform-wrapper available in the documentation.

module "azure_region" {
  source  = "claranet/regions/azurerm"
  version = "x.x.x"

  azure_region = var.azure_region
}

module "rg" {
  source  = "claranet/rg/azurerm"
  version = "x.x.x"

  location    = module.azure_region.location
  client_name = var.client_name
  environment = var.environment
  stack       = var.stack
}

module "logs" {
  source  = "claranet/run-common/azurerm//modules/logs"
  version = "x.x.x"

  client_name         = var.client_name
  environment         = var.environment
  stack               = var.stack
  location            = module.azure_region.location
  location_short      = module.azure_region.location_short
  resource_group_name = module.rg.resource_group_name
}

### Windows
module "function_app_windows" {
  source  = "claranet/function-app/azurerm"
  version = "x.x.x"

  client_name         = var.client_name
  environment         = var.environment
  stack               = var.stack
  location            = module.azure_region.location
  location_short      = module.azure_region.location_short
  resource_group_name = module.rg.resource_group_name

  name_prefix = "hello"

  app_service_plan_os = "Windows"

  function_app_application_settings = {
    "tracker_id"      = "AJKGDFJKHFDS"
    "backend_api_url" = "https://backend.domain.tld/api"
  }

  logs_destinations_ids = [
    module.logs.logs_storage_account_id,
    module.logs.log_analytics_workspace_id
  ]

  extra_tags = {
    foo = "bar"
  }
}

### Linux
module "function_app_linux" {
  source  = "claranet/function-app/azurerm"
  version = "x.x.x"

  client_name         = var.client_name
  environment         = var.environment
  stack               = var.stack
  location            = module.azure_region.location
  location_short      = module.azure_region.location_short
  resource_group_name = module.rg.resource_group_name

  name_prefix = "hello"

  app_service_plan_os         = "Linux"
  function_language_for_linux = "python"
  function_app_version        = 3

  function_app_application_settings = {
    "tracker_id"      = "AJKGDFJKHFDS"
    "backend_api_url" = "https://backend.domain.tld/api"
  }

  logs_destinations_ids = [
    module.logs.logs_storage_account_id,
    module.logs.log_analytics_workspace_id
  ]

  extra_tags = {
    foo = "bar"
  }
}

Providers

No providers.

Modules

Name	Source	Version
app_service_plan	claranet/app-service-plan/azurerm	5.1.0
function_app	./modules/functionapp	n/a

Resources

No resources.

Inputs

Name	Description	Type	Default	Required
app_service_plan_custom_name	Custom name for app service plan	string	""	no
app_service_plan_extra_tags	Extra tags to add to App Service Plan	map(string)	{}	no
app_service_plan_name_prefix	App Service Plan name prefix	string	""	no
app_service_plan_os	App Service Plan OS for dedicated plans, can be "Linux" or "Windows"	string	n/a	yes
app_service_plan_reserved	Flag indicating if dedicated App Service Plan should be reserved	string	"false"	no
app_service_plan_sku	App Service Plan sku if created, consumption plan by default	map(string)	{ "size": "Y1", "tier": "Dynamic" }	no
application_insights_custom_name	Custom name for application insights deployed with function app	string	""	no
application_insights_enabled	Enable or disable the Application Insights deployment	bool	true	no
application_insights_extra_tags	Extra tags to add to Application Insights	map(string)	{}	no
application_insights_id	ID of the existing Application Insights to use instead of deploying a new one.	string	null	no
application_insights_name_prefix	Application Insights name prefix	string	""	no
application_insights_type	Application Insights type if need to be generated	string	"web"	no
application_zip_package_path	Local or remote path of a zip package to deploy on the Function App	string	null	no
authorized_ips	IPs restriction for Function. See documentation https://www.terraform.io/docs/providers/azurerm/r/function_app.html#ip_restriction	list(string)	[]	no
authorized_service_tags	Service Tags restriction for Function. See documentation https://www.terraform.io/docs/providers/azurerm/r/function_app.html#ip_restriction	list(string)	[]	no
authorized_subnet_ids	Subnets restriction for Function. See documentation https://www.terraform.io/docs/providers/azurerm/r/function_app.html#ip_restriction	list(string)	[]	no
client_name	Client name/account used in naming	string	n/a	yes
custom_diagnostic_settings_name	Custom name of the diagnostics settings, name will be 'default' if not set.	string	"default"	no
default_tags_enabled	Option to enable or disable default tags	bool	true	no
environment	Project environment	string	n/a	yes
extra_tags	Extra tags to add	map(string)	{}	no
function_app_application_settings	Function App application settings	map(string)	{}	no
function_app_custom_name	Custom name for function app	string	""	no
function_app_extra_tags	Extra tags to add to Function App	map(string)	{}	no
function_app_name_prefix	Function App name prefix	string	""	no
function_app_site_config	Site config for Function App. See documentation https://www.terraform.io/docs/providers/azurerm/r/app_service.html#site_config. IP restriction attribute is not managed in this block.	any	{}	no
function_app_version	Version of the function app runtime to use (Allowed values 2 or 3)	number	3	no
function_app_vnet_integration_enabled	Enable VNET integration with the Function App. function_app_vnet_integration_subnet_id is mandatory if enabled	bool	false	no
function_app_vnet_integration_subnet_id	ID of the subnet to associate with the Function App (VNet integration)	string	null	no
function_language_for_linux	Language of the Function App on Linux hosting, can be "dotnet", "node" or "python"	string	"dotnet"	no
https_only	Disable http procotol and keep only https	bool	true	no
identity_ids	UserAssigned Identities ID to add to Function App. Mandatory if type is UserAssigned	list(string)	null	no
identity_type	Add an Identity (MSI) to the function app. Possible values are SystemAssigned or UserAssigned	string	"SystemAssigned"	no
ip_restriction_headers	IPs restriction headers for Function. See documentation https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/function_app#headers	map(list(string))	null	no
location	Azure location for Function App and related resources	string	n/a	yes
location_short	Short string for Azure location	string	n/a	yes
logs_categories	Log categories to send to destinations.	list(string)	null	no
logs_destinations_ids	List of destination resources Ids for logs diagnostics destination. Can be Storage Account, Log Analytics Workspace and Event Hub. No more than one of each can be set. Empty list to disable logging.	list(string)	n/a	yes
logs_metrics_categories	Metrics categories to send to destinations.	list(string)	null	no
logs_retention_days	Number of days to keep logs on storage account	number	30	no
name_prefix	Optional prefix for the generated name	string	""	no
name_suffix	Optional suffix for the generated name	string	""	no
resource_group_name	Resource group name	string	n/a	yes
scm_authorized_ips	SCM IPs restriction for Function. See documentation https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/function_app#scm_ip_restriction	list(string)	[]	no
scm_authorized_service_tags	SCM Service Tags restriction for Function. See documentation https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/function_app#scm_ip_restriction	list(string)	[]	no
scm_authorized_subnet_ids	SCM subnets restriction for Function. See documentation https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/function_app#scm_ip_restriction	list(string)	[]	no
scm_ip_restriction_headers	IPs restriction headers for Function. See documentation https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/function_app#scm_ip_restriction	map(list(string))	null	no
stack	Project stack name	string	n/a	yes
storage_account_access_key	Access key the storage account to use. If null a new storage account is created	string	null	no
storage_account_enable_advanced_threat_protection	Boolean flag which controls if advanced threat protection is enabled, see here for more information.	bool	false	no
storage_account_enable_https_traffic_only	Boolean flag which controls if https traffic only is enabled.	bool	true	no
storage_account_extra_tags	Extra tags to add to Storage Account	map(string)	{}	no
storage_account_kind	Storage Account Kind	string	"StorageV2"	no
storage_account_min_tls_version	Storage Account minimal TLS version	string	"TLS1_2"	no
storage_account_name	Name of the Storage account to attach to function	string	null	no
storage_account_name_prefix	Storage Account name prefix	string	""	no
use_caf_naming	Use the Azure CAF naming provider to generate default resource name. custom_name override this if set. Legacy default name is used if this is set to false.	bool	true	no

Outputs

Name	Description
app_service_plan_id	Id of the created App Service Plan
app_service_plan_name	Name of the created App Service Plan
application_insights_app_id	App id of the associated Application Insights
application_insights_application_type	Application Type of the associated Application Insights
application_insights_id	Id of the associated Application Insights
application_insights_instrumentation_key	Instrumentation key of the associated Application Insights
application_insights_name	Name of the associated Application Insights
function_app_connection_string	Connection string of the created Function App
function_app_id	Id of the created Function App
function_app_identity	Identity block output of the Function App
function_app_name	Name of the created Function App
function_app_outbound_ip_addresses	Outbound IP adresses of the created Function App
storage_account_id	Id of the associated Storage Account, empty if connection string provided
storage_account_name	Name of the associated Storage Account, empty if connection string provided
storage_account_primary_access_key	Primary connection string of the associated Storage Account, empty if connection string provided
storage_account_primary_connection_string	Primary connection string of the associated Storage Account, empty if connection string provided
storage_account_secondary_access_key	Secondary connection string of the associated Storage Account, empty if connection string provided
storage_account_secondary_connection_string	Secondary connection string of the associated Storage Account, empty if connection string provided

Related documentation

Microsoft Azure Functions documentation: github.com/Azure/Azure-Functions#documentation-1