Merge pull request #9 from data-platform-hq/support_nat_gw_association

feat: support nat gw association

Author: owlleg6

README.md

@@ -26,6 +26,7 @@ No modules.
 | Name | Type |
 |------|------|
 | [azurerm_subnet.this](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/subnet) | resource |
+| [azurerm_subnet_nat_gateway_association.this](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/subnet_nat_gateway_association) | resource |
 | [azurerm_subnet_network_security_group_association.this](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/subnet_network_security_group_association) | resource |
 
 ## Inputs
@@ -34,13 +35,16 @@ No modules.
 |------|-------------|------|---------|:--------:|
 | <a name="input_cidr"></a> [cidr](#input\_cidr) | The address prefixes to use for the subnet | `string` | n/a | yes |
 | <a name="input_delegations"></a> [delegations](#input\_delegations) | (optional) subnet delegation | <pre>list(object({<br>    name    = string<br>    actions = list(string)<br>  }))</pre> | `[]` | no |
+| <a name="input_export_subnet_id"></a> [export\_subnet\_id](#input\_export\_subnet\_id) | ID of already existing subnet. Provide this value to associate existing subnet with given Network Security Group | `string` | `null` | no |
 | <a name="input_name"></a> [name](#input\_name) | The name of the subnet | `string` | n/a | yes |
+| <a name="input_nat_gateway_association_enabled"></a> [nat\_gateway\_association\_enabled](#input\_nat\_gateway\_association\_enabled) | Boolean flag that determines if NAT Gateway association would be created | `bool` | `false` | no |
+| <a name="input_nat_gateway_id"></a> [nat\_gateway\_id](#input\_nat\_gateway\_id) | ID of the NAT Gateway which would be assigned to subnet | `string` | `null` | no |
 | <a name="input_network"></a> [network](#input\_network) | The name of the virtual network in which the subnet is created in | `string` | n/a | yes |
-| <a name="input_nsg_id"></a> [nsg\_id](#input\_nsg\_id) | The ID of the Network Security Group which should be associated with the Subnet | `map(string)` | {} | no |
+| <a name="input_nsg_association_enabled"></a> [nsg\_association\_enabled](#input\_nsg\_association\_enabled) | Boolean flag that determines if NSG association would be created | `bool` | `false` | no |
+| <a name="input_nsg_id"></a> [nsg\_id](#input\_nsg\_id) | The ID of the Network Security Group which should be associated with the Subnet | `string` | `null` | no |
 | <a name="input_private_endpoint_network_policies_enabled"></a> [private\_endpoint\_network\_policies\_enabled](#input\_private\_endpoint\_network\_policies\_enabled) | Enable or Disable network policies for the private link endpoint on the subnet. Setting this to true will Disable the policy and setting this to false will Enable the policy: [true\|false] | `bool` | `true` | no |
 | <a name="input_resource_group"></a> [resource\_group](#input\_resource\_group) | The name of the resource group in which to create the storage account | `string` | n/a | yes |
-| <a name="input_service_endpoints"></a> [service\_endpoints](#input\_service\_endpoints) | The list of Service endpoints to associate with the subnet: Microsoft.AzureActiveDirectory, Microsoft.AzureCosmosDB, Microsoft.ContainerRegistry, Microsoft.EventHub, Microsoft.KeyVault, Microsoft.ServiceBus, Microsoft.Sql, Microsoft.Storage, Microsoft.Web | `list(string)` | <pre>[<br>  "Microsoft.Storage",<br>  "Microsoft.KeyVault",<br>  "Microsoft.Sql"<br>]</pre> | no |
-| <a name="input_export_subnet_id"></a> [export\_subnet\_id](#input\_export\_subnet\_id) | ID of already existing subnet. Provide this value to associate existing subnet with given Network Security Group | `string` | null | no |
+| <a name="input_service_endpoints"></a> [service\_endpoints](#input\_service\_endpoints) | The list of Service endpoints to associate with the subnet: Microsoft.AzureActiveDirectory, Microsoft.AzureCosmosDB, Microsoft.ContainerRegistry, Microsoft.EventHub, Microsoft.KeyVault, Microsoft.ServiceBus, Microsoft.Sql, Microsoft.Storage, Microsoft.Web | `list(string)` | <pre>[<br>  "Microsoft.Storage",<br>  "Microsoft.KeyVault",<br>  "Microsoft.Sql",<br>  "Microsoft.Web"<br>]</pre> | no |
 
 ## Outputs
 
@@ -49,8 +53,9 @@ No modules.
 | <a name="output_address_prefixes"></a> [address\_prefixes](#output\_address\_prefixes) | The address prefixes to use for the subnet |
 | <a name="output_id"></a> [id](#output\_id) | The ID of the subnet |
 | <a name="output_name"></a> [name](#output\_name) | The name of the subnet |
+| <a name="output_name_to_id_map"></a> [name\_to\_id\_map](#output\_name\_to\_id\_map) | Map of Subnet Name to Id |
+| <a name="output_nat_gateway_association_id"></a> [nat\_gateway\_association\_id](#output\_nat\_gateway\_association\_id) | The ID of the NAT Gateway Association |
 | <a name="output_nsg_association_id"></a> [nsg\_association\_id](#output\_nsg\_association\_id) | The ID of the Network Security Group Association |
-| <a name="name_to_id_map"></a> [id](#output\_name\_to\_id\_map) | Map of Subnet Name to Id |
 <!-- END_TF_DOCS -->
 
 ## License

main.tf

@@ -26,3 +26,10 @@ resource "azurerm_subnet_network_security_group_association" "this" {
   subnet_id                 = var.export_subnet_id == null ? azurerm_subnet.this[0].id : var.export_subnet_id
   network_security_group_id = var.nsg_id
 }
+
+resource "azurerm_subnet_nat_gateway_association" "this" {
+  count = var.nat_gateway_association_enabled ? 1 : 0
+
+  subnet_id      = var.export_subnet_id == null ? azurerm_subnet.this[0].id : var.export_subnet_id
+  nat_gateway_id = var.nat_gateway_id
+}

outputs.tf

@@ -18,6 +18,11 @@ output "nsg_association_id" {
   description = "The ID of the Network Security Group Association"
 }
 
+output "nat_gateway_association_id" {
+  value       = try(azurerm_subnet_nat_gateway_association.this[0].id, null)
+  description = "The ID of the NAT Gateway Association"
+}
+
 output "name_to_id_map" {
   value       = var.export_subnet_id == null ? { (azurerm_subnet.this[0].name) = azurerm_subnet.this[0].id } : null
   description = "Map of Subnet Name to Id"

variables.tf

@@ -61,3 +61,15 @@ variable "export_subnet_id" {
   description = "ID of already existing subnet. Provide this value to associate existing subnet with given Network Security Group"
   default     = null
 }
+
+variable "nat_gateway_association_enabled" {
+  type        = bool
+  description = "Boolean flag that determines if NAT Gateway association would be created"
+  default     = false
+}
+
+variable "nat_gateway_id" {
+  type        = string
+  description = "ID of the NAT Gateway which would be assigned to subnet"
+  default     = null
+}