Add storage account key to module ca_aihub

Azure · Mar 6, 2024 · 9de403c · 9de403c
1 parent 7458352
commit 9de403c
Show file tree

Hide file tree

Showing 5 changed files with 38 additions and 1 deletion.
diff --git a/infra/main.tf b/infra/main.tf
@@ -202,6 +202,7 @@ module "ca_aihub" {
   embeddings_deployment      = module.openai.embedding_deployment_name
   embeddings_model           = module.openai.embedding_deployment_name
   storage_account_name       = module.st.storage_account_name
+  storage_account_key        = module.st.key
   storage_container_name     = module.st.storage_container_name
   search_service_name        = module.search.search_service_name
   search_index_name          = module.search.search_index_name

diff --git a/infra/modules/ca-aihub/main.tf b/infra/modules/ca-aihub/main.tf
@@ -211,14 +211,36 @@ resource "azapi_resource" "ca_back" {
                 value = "Development"
               }
             ],
+            volumeMounts = [
+              {
+                volumeName = "customization-volume"
+                mountPath  = "/wwwroot/images/customer"
+              }
+            ]
           },
         ]
         scale = {
           minReplicas = 1
           maxReplicas = 1
-        }
+        },
+        volumes = [
+          {
+            name        = "customization-volume"
+            storageName = "${azurerm_container_app_environment_storage.data.name}"
+            storageType = "AzureFile"
+          }
+        ]
       }
     }
   })
   response_export_values = ["properties.configuration.ingress.fqdn"]
 }
+
+resource "azurerm_container_app_environment_storage" "data" {
+  name                         = "customizationstorage"
+  container_app_environment_id = var.cae_id
+  account_name                 = var.storage_account_name
+  share_name                   = "customization"
+  access_key                   = var.storage_account_key
+  access_mode                  = "ReadWrite"
+}
diff --git a/infra/modules/ca-aihub/variables.tf b/infra/modules/ca-aihub/variables.tf
@@ -7,6 +7,7 @@ variable "managed_identity_client_id" {}
 variable "tenant_id" {}
 variable "image_name" {}
 variable "storage_account_name" {}
+variable "storage_account_key" {}
 variable "storage_container_name" {}
 variable "search_service_name" {}
 variable "search_index_name" {}

diff --git a/infra/modules/st/customization/customer/customer-logo.png b/infra/modules/st/customization/customer/customer-logo.png
diff --git a/infra/modules/st/main.tf b/infra/modules/st/main.tf
@@ -53,13 +53,26 @@ resource "azurerm_storage_share" "share" {
   quota                = 5
 }
 
+resource "azurerm_storage_share" "customization" {
+  name                 = "customization"
+  storage_account_name = azurerm_storage_account.sa.name
+  quota                = 5
+}
+
 resource "azurerm_storage_share_file" "docs" {
   for_each         = fileset("${path.module}/../../../azure-search-openai-demo/data", "*")
   name             = each.value
   storage_share_id = azurerm_storage_share.share.id
   source           = "${path.module}/../../../azure-search-openai-demo/data/${each.value}"
 }
 
+resource "azurerm_storage_share_file" "customization" {
+  for_each         = fileset("${path.module}/customization/customer", "*")
+  name             = each.value
+  storage_share_id = azurerm_storage_share.customization.id
+  source           = "${path.module}/customization/customer/${each.value}"
+}
+
 resource "azurerm_role_assignment" "storage_contributor" {
   scope                = azurerm_storage_account.sa.id
   role_definition_name = "Storage Blob Data Contributor"