Frontdoor Origin Args
Manages a Front Door (standard/premium) Origin. !>IMPORTANT: If you are attempting to implement an Origin that uses its own Private Link Service with a Load Balancer the Profile resource in your configuration file must have a depends_on
meta-argument which references the azure.privatedns.LinkService
, see Example Usage With Private Link Service
below.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as azure from "@pulumi/azure";
const example = new azure.core.ResourceGroup("example", {
name: "example-resources",
location: "West Europe",
});
const exampleFrontdoorProfile = new azure.cdn.FrontdoorProfile("example", {
name: "example-profile",
resourceGroupName: example.name,
skuName: "Premium_AzureFrontDoor",
});
const exampleFrontdoorOriginGroup = new azure.cdn.FrontdoorOriginGroup("example", {
name: "example-origingroup",
cdnFrontdoorProfileId: exampleFrontdoorProfile.id,
loadBalancing: {},
});
const exampleFrontdoorOrigin = new azure.cdn.FrontdoorOrigin("example", {
name: "example-origin",
cdnFrontdoorOriginGroupId: exampleFrontdoorOriginGroup.id,
enabled: true,
certificateNameCheckEnabled: false,
hostName: "contoso.com",
httpPort: 80,
httpsPort: 443,
originHostHeader: "www.contoso.com",
priority: 1,
weight: 1,
});
import pulumi
import pulumi_azure as azure
example = azure.core.ResourceGroup("example",
name="example-resources",
location="West Europe")
example_frontdoor_profile = azure.cdn.FrontdoorProfile("example",
name="example-profile",
resource_group_name=example.name,
sku_name="Premium_AzureFrontDoor")
example_frontdoor_origin_group = azure.cdn.FrontdoorOriginGroup("example",
name="example-origingroup",
cdn_frontdoor_profile_id=example_frontdoor_profile.id,
load_balancing={})
example_frontdoor_origin = azure.cdn.FrontdoorOrigin("example",
name="example-origin",
cdn_frontdoor_origin_group_id=example_frontdoor_origin_group.id,
enabled=True,
certificate_name_check_enabled=False,
host_name="contoso.com",
http_port=80,
https_port=443,
origin_host_header="www.contoso.com",
priority=1,
weight=1)
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Azure = Pulumi.Azure;
return await Deployment.RunAsync(() =>
{
var example = new Azure.Core.ResourceGroup("example", new()
{
Name = "example-resources",
Location = "West Europe",
});
var exampleFrontdoorProfile = new Azure.Cdn.FrontdoorProfile("example", new()
{
Name = "example-profile",
ResourceGroupName = example.Name,
SkuName = "Premium_AzureFrontDoor",
});
var exampleFrontdoorOriginGroup = new Azure.Cdn.FrontdoorOriginGroup("example", new()
{
Name = "example-origingroup",
CdnFrontdoorProfileId = exampleFrontdoorProfile.Id,
LoadBalancing = null,
});
var exampleFrontdoorOrigin = new Azure.Cdn.FrontdoorOrigin("example", new()
{
Name = "example-origin",
CdnFrontdoorOriginGroupId = exampleFrontdoorOriginGroup.Id,
Enabled = true,
CertificateNameCheckEnabled = false,
HostName = "contoso.com",
HttpPort = 80,
HttpsPort = 443,
OriginHostHeader = "www.contoso.com",
Priority = 1,
Weight = 1,
});
});
package main
import (
"github.com/pulumi/pulumi-azure/sdk/v6/go/azure/cdn"
"github.com/pulumi/pulumi-azure/sdk/v6/go/azure/core"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
example, err := core.NewResourceGroup(ctx, "example", &core.ResourceGroupArgs{
Name: pulumi.String("example-resources"),
Location: pulumi.String("West Europe"),
})
if err != nil {
return err
}
exampleFrontdoorProfile, err := cdn.NewFrontdoorProfile(ctx, "example", &cdn.FrontdoorProfileArgs{
Name: pulumi.String("example-profile"),
ResourceGroupName: example.Name,
SkuName: pulumi.String("Premium_AzureFrontDoor"),
})
if err != nil {
return err
}
exampleFrontdoorOriginGroup, err := cdn.NewFrontdoorOriginGroup(ctx, "example", &cdn.FrontdoorOriginGroupArgs{
Name: pulumi.String("example-origingroup"),
CdnFrontdoorProfileId: exampleFrontdoorProfile.ID(),
LoadBalancing: &cdn.FrontdoorOriginGroupLoadBalancingArgs{},
})
if err != nil {
return err
}
_, err = cdn.NewFrontdoorOrigin(ctx, "example", &cdn.FrontdoorOriginArgs{
Name: pulumi.String("example-origin"),
CdnFrontdoorOriginGroupId: exampleFrontdoorOriginGroup.ID(),
Enabled: pulumi.Bool(true),
CertificateNameCheckEnabled: pulumi.Bool(false),
HostName: pulumi.String("contoso.com"),
HttpPort: pulumi.Int(80),
HttpsPort: pulumi.Int(443),
OriginHostHeader: pulumi.String("www.contoso.com"),
Priority: pulumi.Int(1),
Weight: pulumi.Int(1),
})
if err != nil {
return err
}
return nil
})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azure.core.ResourceGroup;
import com.pulumi.azure.core.ResourceGroupArgs;
import com.pulumi.azure.cdn.FrontdoorProfile;
import com.pulumi.azure.cdn.FrontdoorProfileArgs;
import com.pulumi.azure.cdn.FrontdoorOriginGroup;
import com.pulumi.azure.cdn.FrontdoorOriginGroupArgs;
import com.pulumi.azure.cdn.inputs.FrontdoorOriginGroupLoadBalancingArgs;
import com.pulumi.azure.cdn.FrontdoorOrigin;
import com.pulumi.azure.cdn.FrontdoorOriginArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var example = new ResourceGroup("example", ResourceGroupArgs.builder()
.name("example-resources")
.location("West Europe")
.build());
var exampleFrontdoorProfile = new FrontdoorProfile("exampleFrontdoorProfile", FrontdoorProfileArgs.builder()
.name("example-profile")
.resourceGroupName(example.name())
.skuName("Premium_AzureFrontDoor")
.build());
var exampleFrontdoorOriginGroup = new FrontdoorOriginGroup("exampleFrontdoorOriginGroup", FrontdoorOriginGroupArgs.builder()
.name("example-origingroup")
.cdnFrontdoorProfileId(exampleFrontdoorProfile.id())
.loadBalancing()
.build());
var exampleFrontdoorOrigin = new FrontdoorOrigin("exampleFrontdoorOrigin", FrontdoorOriginArgs.builder()
.name("example-origin")
.cdnFrontdoorOriginGroupId(exampleFrontdoorOriginGroup.id())
.enabled(true)
.certificateNameCheckEnabled(false)
.hostName("contoso.com")
.httpPort(80)
.httpsPort(443)
.originHostHeader("www.contoso.com")
.priority(1)
.weight(1)
.build());
}
}
resources:
example:
type: azure:core:ResourceGroup
properties:
name: example-resources
location: West Europe
exampleFrontdoorProfile:
type: azure:cdn:FrontdoorProfile
name: example
properties:
name: example-profile
resourceGroupName: ${example.name}
skuName: Premium_AzureFrontDoor
exampleFrontdoorOriginGroup:
type: azure:cdn:FrontdoorOriginGroup
name: example
properties:
name: example-origingroup
cdnFrontdoorProfileId: ${exampleFrontdoorProfile.id}
loadBalancing: {}
exampleFrontdoorOrigin:
type: azure:cdn:FrontdoorOrigin
name: example
properties:
name: example-origin
cdnFrontdoorOriginGroupId: ${exampleFrontdoorOriginGroup.id}
enabled: true
certificateNameCheckEnabled: false
hostName: contoso.com
httpPort: 80
httpsPort: 443
originHostHeader: www.contoso.com
priority: 1
weight: 1
With Private Link
import * as pulumi from "@pulumi/pulumi";
import * as azure from "@pulumi/azure";
const example = new azure.core.ResourceGroup("example", {
name: "example-resources",
location: "West Europe",
});
const exampleAccount = new azure.storage.Account("example", {
name: "examplestoracc",
resourceGroupName: example.name,
location: example.location,
accountTier: "Premium",
accountReplicationType: "LRS",
allowNestedItemsToBePublic: false,
networkRules: {
defaultAction: "Deny",
},
tags: {
environment: "Example",
},
});
const exampleFrontdoorProfile = new azure.cdn.FrontdoorProfile("example", {
name: "example-profile",
resourceGroupName: example.name,
skuName: "Premium_AzureFrontDoor",
});
const exampleFrontdoorOriginGroup = new azure.cdn.FrontdoorOriginGroup("example", {
name: "example-origin-group",
cdnFrontdoorProfileId: exampleFrontdoorProfile.id,
loadBalancing: {},
});
const exampleFrontdoorOrigin = new azure.cdn.FrontdoorOrigin("example", {
name: "example-origin",
cdnFrontdoorOriginGroupId: exampleFrontdoorOriginGroup.id,
enabled: true,
certificateNameCheckEnabled: true,
hostName: exampleAccount.primaryBlobHost,
originHostHeader: exampleAccount.primaryBlobHost,
priority: 1,
weight: 500,
privateLink: {
requestMessage: "Request access for Private Link Origin CDN Frontdoor",
targetType: "blob",
location: exampleAccount.location,
privateLinkTargetId: exampleAccount.id,
},
});
import pulumi
import pulumi_azure as azure
example = azure.core.ResourceGroup("example",
name="example-resources",
location="West Europe")
example_account = azure.storage.Account("example",
name="examplestoracc",
resource_group_name=example.name,
location=example.location,
account_tier="Premium",
account_replication_type="LRS",
allow_nested_items_to_be_public=False,
network_rules={
"default_action": "Deny",
},
tags={
"environment": "Example",
})
example_frontdoor_profile = azure.cdn.FrontdoorProfile("example",
name="example-profile",
resource_group_name=example.name,
sku_name="Premium_AzureFrontDoor")
example_frontdoor_origin_group = azure.cdn.FrontdoorOriginGroup("example",
name="example-origin-group",
cdn_frontdoor_profile_id=example_frontdoor_profile.id,
load_balancing={})
example_frontdoor_origin = azure.cdn.FrontdoorOrigin("example",
name="example-origin",
cdn_frontdoor_origin_group_id=example_frontdoor_origin_group.id,
enabled=True,
certificate_name_check_enabled=True,
host_name=example_account.primary_blob_host,
origin_host_header=example_account.primary_blob_host,
priority=1,
weight=500,
private_link={
"request_message": "Request access for Private Link Origin CDN Frontdoor",
"target_type": "blob",
"location": example_account.location,
"private_link_target_id": example_account.id,
})
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Azure = Pulumi.Azure;
return await Deployment.RunAsync(() =>
{
var example = new Azure.Core.ResourceGroup("example", new()
{
Name = "example-resources",
Location = "West Europe",
});
var exampleAccount = new Azure.Storage.Account("example", new()
{
Name = "examplestoracc",
ResourceGroupName = example.Name,
Location = example.Location,
AccountTier = "Premium",
AccountReplicationType = "LRS",
AllowNestedItemsToBePublic = false,
NetworkRules = new Azure.Storage.Inputs.AccountNetworkRulesArgs
{
DefaultAction = "Deny",
},
Tags =
{
{ "environment", "Example" },
},
});
var exampleFrontdoorProfile = new Azure.Cdn.FrontdoorProfile("example", new()
{
Name = "example-profile",
ResourceGroupName = example.Name,
SkuName = "Premium_AzureFrontDoor",
});
var exampleFrontdoorOriginGroup = new Azure.Cdn.FrontdoorOriginGroup("example", new()
{
Name = "example-origin-group",
CdnFrontdoorProfileId = exampleFrontdoorProfile.Id,
LoadBalancing = null,
});
var exampleFrontdoorOrigin = new Azure.Cdn.FrontdoorOrigin("example", new()
{
Name = "example-origin",
CdnFrontdoorOriginGroupId = exampleFrontdoorOriginGroup.Id,
Enabled = true,
CertificateNameCheckEnabled = true,
HostName = exampleAccount.PrimaryBlobHost,
OriginHostHeader = exampleAccount.PrimaryBlobHost,
Priority = 1,
Weight = 500,
PrivateLink = new Azure.Cdn.Inputs.FrontdoorOriginPrivateLinkArgs
{
RequestMessage = "Request access for Private Link Origin CDN Frontdoor",
TargetType = "blob",
Location = exampleAccount.Location,
PrivateLinkTargetId = exampleAccount.Id,
},
});
});
package main
import (
"github.com/pulumi/pulumi-azure/sdk/v6/go/azure/cdn"
"github.com/pulumi/pulumi-azure/sdk/v6/go/azure/core"
"github.com/pulumi/pulumi-azure/sdk/v6/go/azure/storage"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
example, err := core.NewResourceGroup(ctx, "example", &core.ResourceGroupArgs{
Name: pulumi.String("example-resources"),
Location: pulumi.String("West Europe"),
})
if err != nil {
return err
}
exampleAccount, err := storage.NewAccount(ctx, "example", &storage.AccountArgs{
Name: pulumi.String("examplestoracc"),
ResourceGroupName: example.Name,
Location: example.Location,
AccountTier: pulumi.String("Premium"),
AccountReplicationType: pulumi.String("LRS"),
AllowNestedItemsToBePublic: pulumi.Bool(false),
NetworkRules: &storage.AccountNetworkRulesTypeArgs{
DefaultAction: pulumi.String("Deny"),
},
Tags: pulumi.StringMap{
"environment": pulumi.String("Example"),
},
})
if err != nil {
return err
}
exampleFrontdoorProfile, err := cdn.NewFrontdoorProfile(ctx, "example", &cdn.FrontdoorProfileArgs{
Name: pulumi.String("example-profile"),
ResourceGroupName: example.Name,
SkuName: pulumi.String("Premium_AzureFrontDoor"),
})
if err != nil {
return err
}
exampleFrontdoorOriginGroup, err := cdn.NewFrontdoorOriginGroup(ctx, "example", &cdn.FrontdoorOriginGroupArgs{
Name: pulumi.String("example-origin-group"),
CdnFrontdoorProfileId: exampleFrontdoorProfile.ID(),
LoadBalancing: &cdn.FrontdoorOriginGroupLoadBalancingArgs{},
})
if err != nil {
return err
}
_, err = cdn.NewFrontdoorOrigin(ctx, "example", &cdn.FrontdoorOriginArgs{
Name: pulumi.String("example-origin"),
CdnFrontdoorOriginGroupId: exampleFrontdoorOriginGroup.ID(),
Enabled: pulumi.Bool(true),
CertificateNameCheckEnabled: pulumi.Bool(true),
HostName: exampleAccount.PrimaryBlobHost,
OriginHostHeader: exampleAccount.PrimaryBlobHost,
Priority: pulumi.Int(1),
Weight: pulumi.Int(500),
PrivateLink: &cdn.FrontdoorOriginPrivateLinkArgs{
RequestMessage: pulumi.String("Request access for Private Link Origin CDN Frontdoor"),
TargetType: pulumi.String("blob"),
Location: exampleAccount.Location,
PrivateLinkTargetId: exampleAccount.ID(),
},
})
if err != nil {
return err
}
return nil
})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azure.core.ResourceGroup;
import com.pulumi.azure.core.ResourceGroupArgs;
import com.pulumi.azure.storage.Account;
import com.pulumi.azure.storage.AccountArgs;
import com.pulumi.azure.storage.inputs.AccountNetworkRulesArgs;
import com.pulumi.azure.cdn.FrontdoorProfile;
import com.pulumi.azure.cdn.FrontdoorProfileArgs;
import com.pulumi.azure.cdn.FrontdoorOriginGroup;
import com.pulumi.azure.cdn.FrontdoorOriginGroupArgs;
import com.pulumi.azure.cdn.inputs.FrontdoorOriginGroupLoadBalancingArgs;
import com.pulumi.azure.cdn.FrontdoorOrigin;
import com.pulumi.azure.cdn.FrontdoorOriginArgs;
import com.pulumi.azure.cdn.inputs.FrontdoorOriginPrivateLinkArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var example = new ResourceGroup("example", ResourceGroupArgs.builder()
.name("example-resources")
.location("West Europe")
.build());
var exampleAccount = new Account("exampleAccount", AccountArgs.builder()
.name("examplestoracc")
.resourceGroupName(example.name())
.location(example.location())
.accountTier("Premium")
.accountReplicationType("LRS")
.allowNestedItemsToBePublic(false)
.networkRules(AccountNetworkRulesArgs.builder()
.defaultAction("Deny")
.build())
.tags(Map.of("environment", "Example"))
.build());
var exampleFrontdoorProfile = new FrontdoorProfile("exampleFrontdoorProfile", FrontdoorProfileArgs.builder()
.name("example-profile")
.resourceGroupName(example.name())
.skuName("Premium_AzureFrontDoor")
.build());
var exampleFrontdoorOriginGroup = new FrontdoorOriginGroup("exampleFrontdoorOriginGroup", FrontdoorOriginGroupArgs.builder()
.name("example-origin-group")
.cdnFrontdoorProfileId(exampleFrontdoorProfile.id())
.loadBalancing()
.build());
var exampleFrontdoorOrigin = new FrontdoorOrigin("exampleFrontdoorOrigin", FrontdoorOriginArgs.builder()
.name("example-origin")
.cdnFrontdoorOriginGroupId(exampleFrontdoorOriginGroup.id())
.enabled(true)
.certificateNameCheckEnabled(true)
.hostName(exampleAccount.primaryBlobHost())
.originHostHeader(exampleAccount.primaryBlobHost())
.priority(1)
.weight(500)
.privateLink(FrontdoorOriginPrivateLinkArgs.builder()
.requestMessage("Request access for Private Link Origin CDN Frontdoor")
.targetType("blob")
.location(exampleAccount.location())
.privateLinkTargetId(exampleAccount.id())
.build())
.build());
}
}
resources:
example:
type: azure:core:ResourceGroup
properties:
name: example-resources
location: West Europe
exampleAccount:
type: azure:storage:Account
name: example
properties:
name: examplestoracc
resourceGroupName: ${example.name}
location: ${example.location}
accountTier: Premium
accountReplicationType: LRS
allowNestedItemsToBePublic: false
networkRules:
defaultAction: Deny
tags:
environment: Example
exampleFrontdoorProfile:
type: azure:cdn:FrontdoorProfile
name: example
properties:
name: example-profile
resourceGroupName: ${example.name}
skuName: Premium_AzureFrontDoor
exampleFrontdoorOriginGroup:
type: azure:cdn:FrontdoorOriginGroup
name: example
properties:
name: example-origin-group
cdnFrontdoorProfileId: ${exampleFrontdoorProfile.id}
loadBalancing: {}
exampleFrontdoorOrigin:
type: azure:cdn:FrontdoorOrigin
name: example
properties:
name: example-origin
cdnFrontdoorOriginGroupId: ${exampleFrontdoorOriginGroup.id}
enabled: true
certificateNameCheckEnabled: true
hostName: ${exampleAccount.primaryBlobHost}
originHostHeader: ${exampleAccount.primaryBlobHost}
priority: 1
weight: 500
privateLink:
requestMessage: Request access for Private Link Origin CDN Frontdoor
targetType: blob
location: ${exampleAccount.location}
privateLinkTargetId: ${exampleAccount.id}
With Private Link Service
import * as pulumi from "@pulumi/pulumi";
import * as azure from "@pulumi/azure";
const current = azure.core.getClientConfig({});
const example = new azure.core.ResourceGroup("example", {
name: "example-resources",
location: "West Europe",
});
const exampleVirtualNetwork = new azure.network.VirtualNetwork("example", {
name: "vn-example",
resourceGroupName: example.name,
location: example.location,
addressSpaces: ["10.5.0.0/16"],
});
const exampleSubnet = new azure.network.Subnet("example", {
name: "sn-example",
resourceGroupName: example.name,
virtualNetworkName: exampleVirtualNetwork.name,
addressPrefixes: ["10.5.1.0/24"],
privateLinkServiceNetworkPoliciesEnabled: false,
});
const examplePublicIp = new azure.network.PublicIp("example", {
name: "ip-example",
sku: "Standard",
location: example.location,
resourceGroupName: example.name,
allocationMethod: "Static",
});
const exampleLoadBalancer = new azure.lb.LoadBalancer("example", {
name: "lb-example",
sku: "Standard",
location: example.location,
resourceGroupName: example.name,
frontendIpConfigurations: [{
name: examplePublicIp.name,
publicIpAddressId: examplePublicIp.id,
}],
});
const exampleLinkService = new azure.privatedns.LinkService("example", {
name: "pls-example",
resourceGroupName: example.name,
location: example.location,
visibilitySubscriptionIds: [current.then(current => current.subscriptionId)],
loadBalancerFrontendIpConfigurationIds: [exampleLoadBalancer.frontendIpConfigurations.apply(frontendIpConfigurations => frontendIpConfigurations?.[0]?.id)],
natIpConfigurations: [{
name: "primary",
privateIpAddress: "10.5.1.17",
privateIpAddressVersion: "IPv4",
subnetId: exampleSubnet.id,
primary: true,
}],
});
const exampleFrontdoorProfile = new azure.cdn.FrontdoorProfile("example", {
name: "profile-example",
resourceGroupName: example.name,
skuName: "Premium_AzureFrontDoor",
}, {
dependsOn: [exampleLinkService],
});
const exampleFrontdoorOriginGroup = new azure.cdn.FrontdoorOriginGroup("example", {
name: "group-example",
cdnFrontdoorProfileId: exampleFrontdoorProfile.id,
loadBalancing: {
additionalLatencyInMilliseconds: 0,
sampleSize: 16,
successfulSamplesRequired: 3,
},
});
const exampleFrontdoorOrigin = new azure.cdn.FrontdoorOrigin("example", {
name: "origin-example",
cdnFrontdoorOriginGroupId: exampleFrontdoorOriginGroup.id,
enabled: true,
hostName: "example.com",
originHostHeader: "example.com",
priority: 1,
weight: 1000,
certificateNameCheckEnabled: false,
privateLink: {
requestMessage: "Request access for Private Link Origin CDN Frontdoor",
location: example.location,
privateLinkTargetId: exampleLinkService.id,
},
});
import pulumi
import pulumi_azure as azure
current = azure.core.get_client_config()
example = azure.core.ResourceGroup("example",
name="example-resources",
location="West Europe")
example_virtual_network = azure.network.VirtualNetwork("example",
name="vn-example",
resource_group_name=example.name,
location=example.location,
address_spaces=["10.5.0.0/16"])
example_subnet = azure.network.Subnet("example",
name="sn-example",
resource_group_name=example.name,
virtual_network_name=example_virtual_network.name,
address_prefixes=["10.5.1.0/24"],
private_link_service_network_policies_enabled=False)
example_public_ip = azure.network.PublicIp("example",
name="ip-example",
sku="Standard",
location=example.location,
resource_group_name=example.name,
allocation_method="Static")
example_load_balancer = azure.lb.LoadBalancer("example",
name="lb-example",
sku="Standard",
location=example.location,
resource_group_name=example.name,
frontend_ip_configurations=[{
"name": example_public_ip.name,
"public_ip_address_id": example_public_ip.id,
}])
example_link_service = azure.privatedns.LinkService("example",
name="pls-example",
resource_group_name=example.name,
location=example.location,
visibility_subscription_ids=[current.subscription_id],
load_balancer_frontend_ip_configuration_ids=[example_load_balancer.frontend_ip_configurations[0].id],
nat_ip_configurations=[{
"name": "primary",
"private_ip_address": "10.5.1.17",
"private_ip_address_version": "IPv4",
"subnet_id": example_subnet.id,
"primary": True,
}])
example_frontdoor_profile = azure.cdn.FrontdoorProfile("example",
name="profile-example",
resource_group_name=example.name,
sku_name="Premium_AzureFrontDoor",
opts = pulumi.ResourceOptions(depends_on=[example_link_service]))
example_frontdoor_origin_group = azure.cdn.FrontdoorOriginGroup("example",
name="group-example",
cdn_frontdoor_profile_id=example_frontdoor_profile.id,
load_balancing={
"additional_latency_in_milliseconds": 0,
"sample_size": 16,
"successful_samples_required": 3,
})
example_frontdoor_origin = azure.cdn.FrontdoorOrigin("example",
name="origin-example",
cdn_frontdoor_origin_group_id=example_frontdoor_origin_group.id,
enabled=True,
host_name="example.com",
origin_host_header="example.com",
priority=1,
weight=1000,
certificate_name_check_enabled=False,
private_link={
"request_message": "Request access for Private Link Origin CDN Frontdoor",
"location": example.location,
"private_link_target_id": example_link_service.id,
})
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Azure = Pulumi.Azure;
return await Deployment.RunAsync(() =>
{
var current = Azure.Core.GetClientConfig.Invoke();
var example = new Azure.Core.ResourceGroup("example", new()
{
Name = "example-resources",
Location = "West Europe",
});
var exampleVirtualNetwork = new Azure.Network.VirtualNetwork("example", new()
{
Name = "vn-example",
ResourceGroupName = example.Name,
Location = example.Location,
AddressSpaces = new[]
{
"10.5.0.0/16",
},
});
var exampleSubnet = new Azure.Network.Subnet("example", new()
{
Name = "sn-example",
ResourceGroupName = example.Name,
VirtualNetworkName = exampleVirtualNetwork.Name,
AddressPrefixes = new[]
{
"10.5.1.0/24",
},
PrivateLinkServiceNetworkPoliciesEnabled = false,
});
var examplePublicIp = new Azure.Network.PublicIp("example", new()
{
Name = "ip-example",
Sku = "Standard",
Location = example.Location,
ResourceGroupName = example.Name,
AllocationMethod = "Static",
});
var exampleLoadBalancer = new Azure.Lb.LoadBalancer("example", new()
{
Name = "lb-example",
Sku = "Standard",
Location = example.Location,
ResourceGroupName = example.Name,
FrontendIpConfigurations = new[]
{
new Azure.Lb.Inputs.LoadBalancerFrontendIpConfigurationArgs
{
Name = examplePublicIp.Name,
PublicIpAddressId = examplePublicIp.Id,
},
},
});
var exampleLinkService = new Azure.PrivateDns.LinkService("example", new()
{
Name = "pls-example",
ResourceGroupName = example.Name,
Location = example.Location,
VisibilitySubscriptionIds = new[]
{
current.Apply(getClientConfigResult => getClientConfigResult.SubscriptionId),
},
LoadBalancerFrontendIpConfigurationIds = new[]
{
exampleLoadBalancer.FrontendIpConfigurations.Apply(frontendIpConfigurations => frontendIpConfigurations[0]?.Id),
},
NatIpConfigurations = new[]
{
new Azure.PrivateDns.Inputs.LinkServiceNatIpConfigurationArgs
{
Name = "primary",
PrivateIpAddress = "10.5.1.17",
PrivateIpAddressVersion = "IPv4",
SubnetId = exampleSubnet.Id,
Primary = true,
},
},
});
var exampleFrontdoorProfile = new Azure.Cdn.FrontdoorProfile("example", new()
{
Name = "profile-example",
ResourceGroupName = example.Name,
SkuName = "Premium_AzureFrontDoor",
}, new CustomResourceOptions
{
DependsOn =
{
exampleLinkService,
},
});
var exampleFrontdoorOriginGroup = new Azure.Cdn.FrontdoorOriginGroup("example", new()
{
Name = "group-example",
CdnFrontdoorProfileId = exampleFrontdoorProfile.Id,
LoadBalancing = new Azure.Cdn.Inputs.FrontdoorOriginGroupLoadBalancingArgs
{
AdditionalLatencyInMilliseconds = 0,
SampleSize = 16,
SuccessfulSamplesRequired = 3,
},
});
var exampleFrontdoorOrigin = new Azure.Cdn.FrontdoorOrigin("example", new()
{
Name = "origin-example",
CdnFrontdoorOriginGroupId = exampleFrontdoorOriginGroup.Id,
Enabled = true,
HostName = "example.com",
OriginHostHeader = "example.com",
Priority = 1,
Weight = 1000,
CertificateNameCheckEnabled = false,
PrivateLink = new Azure.Cdn.Inputs.FrontdoorOriginPrivateLinkArgs
{
RequestMessage = "Request access for Private Link Origin CDN Frontdoor",
Location = example.Location,
PrivateLinkTargetId = exampleLinkService.Id,
},
});
});
package main
import (
"github.com/pulumi/pulumi-azure/sdk/v6/go/azure/cdn"
"github.com/pulumi/pulumi-azure/sdk/v6/go/azure/core"
"github.com/pulumi/pulumi-azure/sdk/v6/go/azure/lb"
"github.com/pulumi/pulumi-azure/sdk/v6/go/azure/network"
"github.com/pulumi/pulumi-azure/sdk/v6/go/azure/privatedns"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
current, err := core.GetClientConfig(ctx, map[string]interface{}{}, nil)
if err != nil {
return err
}
example, err := core.NewResourceGroup(ctx, "example", &core.ResourceGroupArgs{
Name: pulumi.String("example-resources"),
Location: pulumi.String("West Europe"),
})
if err != nil {
return err
}
exampleVirtualNetwork, err := network.NewVirtualNetwork(ctx, "example", &network.VirtualNetworkArgs{
Name: pulumi.String("vn-example"),
ResourceGroupName: example.Name,
Location: example.Location,
AddressSpaces: pulumi.StringArray{
pulumi.String("10.5.0.0/16"),
},
})
if err != nil {
return err
}
exampleSubnet, err := network.NewSubnet(ctx, "example", &network.SubnetArgs{
Name: pulumi.String("sn-example"),
ResourceGroupName: example.Name,
VirtualNetworkName: exampleVirtualNetwork.Name,
AddressPrefixes: pulumi.StringArray{
pulumi.String("10.5.1.0/24"),
},
PrivateLinkServiceNetworkPoliciesEnabled: pulumi.Bool(false),
})
if err != nil {
return err
}
examplePublicIp, err := network.NewPublicIp(ctx, "example", &network.PublicIpArgs{
Name: pulumi.String("ip-example"),
Sku: pulumi.String("Standard"),
Location: example.Location,
ResourceGroupName: example.Name,
AllocationMethod: pulumi.String("Static"),
})
if err != nil {
return err
}
exampleLoadBalancer, err := lb.NewLoadBalancer(ctx, "example", &lb.LoadBalancerArgs{
Name: pulumi.String("lb-example"),
Sku: pulumi.String("Standard"),
Location: example.Location,
ResourceGroupName: example.Name,
FrontendIpConfigurations: lb.LoadBalancerFrontendIpConfigurationArray{
&lb.LoadBalancerFrontendIpConfigurationArgs{
Name: examplePublicIp.Name,
PublicIpAddressId: examplePublicIp.ID(),
},
},
})
if err != nil {
return err
}
exampleLinkService, err := privatedns.NewLinkService(ctx, "example", &privatedns.LinkServiceArgs{
Name: pulumi.String("pls-example"),
ResourceGroupName: example.Name,
Location: example.Location,
VisibilitySubscriptionIds: pulumi.StringArray{
pulumi.String(current.SubscriptionId),
},
LoadBalancerFrontendIpConfigurationIds: pulumi.StringArray{
pulumi.String(exampleLoadBalancer.FrontendIpConfigurations.ApplyT(func(frontendIpConfigurations []lb.LoadBalancerFrontendIpConfiguration) (*string, error) {
return &frontendIpConfigurations[0].Id, nil
}).(pulumi.StringPtrOutput)),
},
NatIpConfigurations: privatedns.LinkServiceNatIpConfigurationArray{
&privatedns.LinkServiceNatIpConfigurationArgs{
Name: pulumi.String("primary"),
PrivateIpAddress: pulumi.String("10.5.1.17"),
PrivateIpAddressVersion: pulumi.String("IPv4"),
SubnetId: exampleSubnet.ID(),
Primary: pulumi.Bool(true),
},
},
})
if err != nil {
return err
}
exampleFrontdoorProfile, err := cdn.NewFrontdoorProfile(ctx, "example", &cdn.FrontdoorProfileArgs{
Name: pulumi.String("profile-example"),
ResourceGroupName: example.Name,
SkuName: pulumi.String("Premium_AzureFrontDoor"),
}, pulumi.DependsOn([]pulumi.Resource{
exampleLinkService,
}))
if err != nil {
return err
}
exampleFrontdoorOriginGroup, err := cdn.NewFrontdoorOriginGroup(ctx, "example", &cdn.FrontdoorOriginGroupArgs{
Name: pulumi.String("group-example"),
CdnFrontdoorProfileId: exampleFrontdoorProfile.ID(),
LoadBalancing: &cdn.FrontdoorOriginGroupLoadBalancingArgs{
AdditionalLatencyInMilliseconds: pulumi.Int(0),
SampleSize: pulumi.Int(16),
SuccessfulSamplesRequired: pulumi.Int(3),
},
})
if err != nil {
return err
}
_, err = cdn.NewFrontdoorOrigin(ctx, "example", &cdn.FrontdoorOriginArgs{
Name: pulumi.String("origin-example"),
CdnFrontdoorOriginGroupId: exampleFrontdoorOriginGroup.ID(),
Enabled: pulumi.Bool(true),
HostName: pulumi.String("example.com"),
OriginHostHeader: pulumi.String("example.com"),
Priority: pulumi.Int(1),
Weight: pulumi.Int(1000),
CertificateNameCheckEnabled: pulumi.Bool(false),
PrivateLink: &cdn.FrontdoorOriginPrivateLinkArgs{
RequestMessage: pulumi.String("Request access for Private Link Origin CDN Frontdoor"),
Location: example.Location,
PrivateLinkTargetId: exampleLinkService.ID(),
},
})
if err != nil {
return err
}
return nil
})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azure.core.CoreFunctions;
import com.pulumi.azure.core.ResourceGroup;
import com.pulumi.azure.core.ResourceGroupArgs;
import com.pulumi.azure.network.VirtualNetwork;
import com.pulumi.azure.network.VirtualNetworkArgs;
import com.pulumi.azure.network.Subnet;
import com.pulumi.azure.network.SubnetArgs;
import com.pulumi.azure.network.PublicIp;
import com.pulumi.azure.network.PublicIpArgs;
import com.pulumi.azure.lb.LoadBalancer;
import com.pulumi.azure.lb.LoadBalancerArgs;
import com.pulumi.azure.lb.inputs.LoadBalancerFrontendIpConfigurationArgs;
import com.pulumi.azure.privatedns.LinkService;
import com.pulumi.azure.privatedns.LinkServiceArgs;
import com.pulumi.azure.privatedns.inputs.LinkServiceNatIpConfigurationArgs;
import com.pulumi.azure.cdn.FrontdoorProfile;
import com.pulumi.azure.cdn.FrontdoorProfileArgs;
import com.pulumi.azure.cdn.FrontdoorOriginGroup;
import com.pulumi.azure.cdn.FrontdoorOriginGroupArgs;
import com.pulumi.azure.cdn.inputs.FrontdoorOriginGroupLoadBalancingArgs;
import com.pulumi.azure.cdn.FrontdoorOrigin;
import com.pulumi.azure.cdn.FrontdoorOriginArgs;
import com.pulumi.azure.cdn.inputs.FrontdoorOriginPrivateLinkArgs;
import com.pulumi.resources.CustomResourceOptions;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
final var current = CoreFunctions.getClientConfig();
var example = new ResourceGroup("example", ResourceGroupArgs.builder()
.name("example-resources")
.location("West Europe")
.build());
var exampleVirtualNetwork = new VirtualNetwork("exampleVirtualNetwork", VirtualNetworkArgs.builder()
.name("vn-example")
.resourceGroupName(example.name())
.location(example.location())
.addressSpaces("10.5.0.0/16")
.build());
var exampleSubnet = new Subnet("exampleSubnet", SubnetArgs.builder()
.name("sn-example")
.resourceGroupName(example.name())
.virtualNetworkName(exampleVirtualNetwork.name())
.addressPrefixes("10.5.1.0/24")
.privateLinkServiceNetworkPoliciesEnabled(false)
.build());
var examplePublicIp = new PublicIp("examplePublicIp", PublicIpArgs.builder()
.name("ip-example")
.sku("Standard")
.location(example.location())
.resourceGroupName(example.name())
.allocationMethod("Static")
.build());
var exampleLoadBalancer = new LoadBalancer("exampleLoadBalancer", LoadBalancerArgs.builder()
.name("lb-example")
.sku("Standard")
.location(example.location())
.resourceGroupName(example.name())
.frontendIpConfigurations(LoadBalancerFrontendIpConfigurationArgs.builder()
.name(examplePublicIp.name())
.publicIpAddressId(examplePublicIp.id())
.build())
.build());
var exampleLinkService = new LinkService("exampleLinkService", LinkServiceArgs.builder()
.name("pls-example")
.resourceGroupName(example.name())
.location(example.location())
.visibilitySubscriptionIds(current.applyValue(getClientConfigResult -> getClientConfigResult.subscriptionId()))
.loadBalancerFrontendIpConfigurationIds(exampleLoadBalancer.frontendIpConfigurations().applyValue(frontendIpConfigurations -> frontendIpConfigurations[0].id()))
.natIpConfigurations(LinkServiceNatIpConfigurationArgs.builder()
.name("primary")
.privateIpAddress("10.5.1.17")
.privateIpAddressVersion("IPv4")
.subnetId(exampleSubnet.id())
.primary(true)
.build())
.build());
var exampleFrontdoorProfile = new FrontdoorProfile("exampleFrontdoorProfile", FrontdoorProfileArgs.builder()
.name("profile-example")
.resourceGroupName(example.name())
.skuName("Premium_AzureFrontDoor")
.build(), CustomResourceOptions.builder()
.dependsOn(exampleLinkService)
.build());
var exampleFrontdoorOriginGroup = new FrontdoorOriginGroup("exampleFrontdoorOriginGroup", FrontdoorOriginGroupArgs.builder()
.name("group-example")
.cdnFrontdoorProfileId(exampleFrontdoorProfile.id())
.loadBalancing(FrontdoorOriginGroupLoadBalancingArgs.builder()
.additionalLatencyInMilliseconds(0)
.sampleSize(16)
.successfulSamplesRequired(3)
.build())
.build());
var exampleFrontdoorOrigin = new FrontdoorOrigin("exampleFrontdoorOrigin", FrontdoorOriginArgs.builder()
.name("origin-example")
.cdnFrontdoorOriginGroupId(exampleFrontdoorOriginGroup.id())
.enabled(true)
.hostName("example.com")
.originHostHeader("example.com")
.priority(1)
.weight(1000)
.certificateNameCheckEnabled(false)
.privateLink(FrontdoorOriginPrivateLinkArgs.builder()
.requestMessage("Request access for Private Link Origin CDN Frontdoor")
.location(example.location())
.privateLinkTargetId(exampleLinkService.id())
.build())
.build());
}
}
resources:
example:
type: azure:core:ResourceGroup
properties:
name: example-resources
location: West Europe
exampleFrontdoorProfile:
type: azure:cdn:FrontdoorProfile
name: example
properties:
name: profile-example
resourceGroupName: ${example.name}
skuName: Premium_AzureFrontDoor
options:
dependsOn:
- ${exampleLinkService}
exampleFrontdoorOrigin:
type: azure:cdn:FrontdoorOrigin
name: example
properties:
name: origin-example
cdnFrontdoorOriginGroupId: ${exampleFrontdoorOriginGroup.id}
enabled: true
hostName: example.com
originHostHeader: example.com
priority: 1
weight: 1000
certificateNameCheckEnabled: false
privateLink:
requestMessage: Request access for Private Link Origin CDN Frontdoor
location: ${example.location}
privateLinkTargetId: ${exampleLinkService.id}
exampleFrontdoorOriginGroup:
type: azure:cdn:FrontdoorOriginGroup
name: example
properties:
name: group-example
cdnFrontdoorProfileId: ${exampleFrontdoorProfile.id}
loadBalancing:
additionalLatencyInMilliseconds: 0
sampleSize: 16
successfulSamplesRequired: 3
exampleVirtualNetwork:
type: azure:network:VirtualNetwork
name: example
properties:
name: vn-example
resourceGroupName: ${example.name}
location: ${example.location}
addressSpaces:
- 10.5.0.0/16
exampleSubnet:
type: azure:network:Subnet
name: example
properties:
name: sn-example
resourceGroupName: ${example.name}
virtualNetworkName: ${exampleVirtualNetwork.name}
addressPrefixes:
- 10.5.1.0/24
privateLinkServiceNetworkPoliciesEnabled: false
examplePublicIp:
type: azure:network:PublicIp
name: example
properties:
name: ip-example
sku: Standard
location: ${example.location}
resourceGroupName: ${example.name}
allocationMethod: Static
exampleLoadBalancer:
type: azure:lb:LoadBalancer
name: example
properties:
name: lb-example
sku: Standard
location: ${example.location}
resourceGroupName: ${example.name}
frontendIpConfigurations:
- name: ${examplePublicIp.name}
publicIpAddressId: ${examplePublicIp.id}
exampleLinkService:
type: azure:privatedns:LinkService
name: example
properties:
name: pls-example
resourceGroupName: ${example.name}
location: ${example.location}
visibilitySubscriptionIds:
- ${current.subscriptionId}
loadBalancerFrontendIpConfigurationIds:
- ${exampleLoadBalancer.frontendIpConfigurations[0].id}
natIpConfigurations:
- name: primary
privateIpAddress: 10.5.1.17
privateIpAddressVersion: IPv4
subnetId: ${exampleSubnet.id}
primary: true
variables:
current:
fn::invoke:
function: azure:core:getClientConfig
arguments: {}
Example HCL Configurations
Private Link Origin with Storage Account Blob
Private Link Origin with Storage Account Static Web Site
Private Link Origin with Linux Web Application
Private Link Origin with Internal Load Balancer
Import
Front Door Origins can be imported using the resource id
, e.g.
$ pulumi import azure:cdn/frontdoorOrigin:FrontdoorOrigin example /subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/resourceGroup1/providers/Microsoft.Cdn/profiles/profile1/originGroups/originGroup1/origins/origin1
Constructors
Properties
The ID of the Front Door Origin Group within which this Front Door Origin should exist. Changing this forces a new Front Door Origin to be created.
Specifies whether certificate name checks are enabled for this origin.
The host header value (an IPv4 address, IPv6 address or Domain name) which is sent to the origin with each request. If unspecified the hostname from the request will be used.
A private_link
block as defined below.