From 792ffdbbdaa533c4188fda7f6fcf30aca93e7c75 Mon Sep 17 00:00:00 2001
From: willie-yao <williamyao@microsoft.com>
Date: Mon, 10 Feb 2025 23:39:05 +0000
Subject: [PATCH] Add terraform for capz monitoring cluster

---
 .../terraform/capz/capz-monitoring/main.tf    | 81 +++++++++++++++++++
 infra/azure/terraform/capz/main.tf            |  6 ++
 2 files changed, 87 insertions(+)
 create mode 100644 infra/azure/terraform/capz/capz-monitoring/main.tf

diff --git a/infra/azure/terraform/capz/capz-monitoring/main.tf b/infra/azure/terraform/capz/capz-monitoring/main.tf
new file mode 100644
index 000000000000..8c3379ba11ce
--- /dev/null
+++ b/infra/azure/terraform/capz/capz-monitoring/main.tf
@@ -0,0 +1,81 @@
+/*
+Copyright 2024 The Kubernetes Authors.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+variable "subscription_id" {
+  type = string
+}
+
+# Create the "capz-monitoring" resource group
+resource "azurerm_resource_group" "capz-monitoring" {
+  location = "eastus"
+  name     = "capz-monitoring"
+  tags = {
+    DO-NOT-DELETE     = "contact capz"
+    creationTimestamp = "2024-10-24T00:00:00Z"
+  }
+}
+
+resource "azurerm_resource_group" "MC_capz-monitoring_capz-monitoring_eastus" {
+  location = "eastus"
+  name     = "MC_capz-monitoring_capz-monitoring_eastus"
+  tags = {
+    DO-NOT-DELETE     = "contact capz"
+    creationTimestamp = "2024-10-24T00:00:00Z"
+  }
+}
+
+resource "azurerm_user_assigned_identity" "capz_monitoring_user_identity" {
+  name                = "capz-monitoring-user-identity"
+  location            = azurerm_resource_group.capz-monitoring.location
+  resource_group_name = azurerm_resource_group.capz-monitoring.name
+}
+
+resource "azurerm_role_assignment" "monitoring_reader" {
+  principal_id         = azurerm_user_assigned_identity.capz_monitoring_user_identity.principal_id
+  role_definition_name = "Monitoring Reader"
+  scope                = "/subscriptions/${var.subscription_id}"
+  depends_on = [ azurerm_user_assigned_identity.capz_monitoring_user_identity ]
+}
+
+resource "azurerm_kubernetes_cluster" "capz-monitoring" {
+  dns_prefix            = "capz-monitoring"
+  location              = azurerm_resource_group.capz-monitoring.location
+  name                  = "capz-monitoring"
+  resource_group_name   = azurerm_resource_group.capz-monitoring.name
+  node_resource_group = azurerm_resource_group.MC_capz-monitoring_capz-monitoring_eastus.name
+  tags = {
+    DO-NOT-DELETE     = "contact capz"
+    creationTimestamp = "2024-10-24T00:00:00Z"
+  }
+  depends_on = [
+    azurerm_resource_group.capz-monitoring,
+    azurerm_user_assigned_identity.capz_monitoring_user_identity,
+  ]
+  kubelet_identity {
+    user_assigned_identity_id = azurerm_user_assigned_identity.capz_monitoring_user_identity.id
+  }
+  identity {
+    type                     = "UserAssigned"
+    identity_ids = [
+      azurerm_user_assigned_identity.capz_monitoring_user_identity.id
+    ]
+  }
+  default_node_pool {
+    name       = "default"
+    node_count = 1
+    vm_size    = "Standard_Ds2_v2"
+  }
+}
\ No newline at end of file
diff --git a/infra/azure/terraform/capz/main.tf b/infra/azure/terraform/capz/main.tf
index b94b887c8346..03dde8104e08 100644
--- a/infra/azure/terraform/capz/main.tf
+++ b/infra/azure/terraform/capz/main.tf
@@ -133,3 +133,9 @@ module "cluster_api_gallery" {
   location            = var.location
   depends_on          = module.role_assignments
 }
+
+# Import CAPZ monitoring module
+module "capz_monitoring" {
+  source              = "./capz-monitoring"
+  subscription_id          = data.azurerm_client_config.current.subscription_id
+}