main.https.nginxviahelm.bicepparam

using './main.bicep'

// Variables
var httpFrontendPortName = 'HttpFrontendPort'
var httpListenerName = 'DefaultHttpListener'
var requestRoutingRuleName = 'DefaultRequestRoutingRule'
var backendHttpSettingsName = 'DefaultBackendHttpSettings'
var probeName = 'DefaultProbe'
var hostnames = ['your-yelb-hostname']

// Parameters
param aksClusterNetworkMode = 'transparent'
param aksClusterNetworkDataplane = 'cilium'
param aksClusterNetworkPlugin = 'azure'
param aksClusterNetworkPluginMode = 'overlay'
param aksClusterNetworkPolicy = 'cilium'
param aksClusterWebAppRoutingEnabled = false
param aksClusterSkuTier = 'Standard'
param aksClusterPodCidr = '192.168.0.0/16'
param aksClusterServiceCidr = '172.16.0.0/16'
param aksClusterDnsServiceIP = '172.16.0.10'
param aksClusterOutboundType = 'userAssignedNATGateway'
param aksClusterKubernetesVersion = '1.30.4'
param aksClusterAdminUsername = 'azadmin'
param aksClusterSshPublicKey = '<ssh-public-key>'
param loadBalancerBackendPoolType = 'nodeIP'
param aadProfileManaged = true
param aadProfileEnableAzureRBAC = true
param aadProfileAdminGroupObjectIDs = [
  '<entra-id-admin-group-object-id>'
]
param systemAgentPoolName = 'system'
param systemAgentPoolVmSize = 'Standard_F8s_v2'
param systemAgentPoolOsDiskSizeGB = 80
param systemAgentPoolAgentCount = 3
param systemAgentPoolMaxCount = 5
param systemAgentPoolMinCount = 3
param systemAgentPoolNodeTaints = [
  'CriticalAddonsOnly=true:NoSchedule'
]
param userAgentPoolName = 'user'
param userAgentPoolVmSize = 'Standard_F8s_v2'
param userAgentPoolOsDiskSizeGB = 80
param userAgentPoolAgentCount = 3
param userAgentPoolMaxCount = 5
param userAgentPoolMinCount = 3
param enableVnetIntegration = true
param virtualNetworkAddressPrefixes = '10.0.0.0/8'
param systemAgentPoolSubnetName = 'SystemSubnet'
param systemAgentPoolSubnetAddressPrefix = '10.240.0.0/16'
param userAgentPoolSubnetName = 'UserSubnet'
param userAgentPoolSubnetAddressPrefix = '10.241.0.0/16'
param podSubnetName = 'PodSubnet'
param podSubnetAddressPrefix = '10.242.0.0/16'
param apiServerSubnetName = 'ApiServerSubnet'
param apiServerSubnetAddressPrefix = '10.243.0.0/27'
param vmSubnetName = 'VmSubnet'
param vmSubnetAddressPrefix = '10.243.1.0/24'
param bastionSubnetAddressPrefix = '10.243.2.0/24'
param logAnalyticsSku = 'PerGB2018'
param logAnalyticsRetentionInDays = 60
param vmEnabled = true
param vmName = 'TestVm'
param vmSize = 'Standard_F8s_v2'
param imagePublisher = 'Canonical'
param imageOffer = '0001-com-ubuntu-server-jammy'
param imageSku = '22_04-lts-gen2'
param authenticationType = 'sshPublicKey'
param vmAdminUsername = 'azadmin'
param vmAdminPasswordOrKey = '<ssh-public-key>'
param diskStorageAccountType = 'Premium_LRS'
param numDataDisks = 1
param osDiskSize = 50
param dataDiskSize = 50
param dataDiskCaching = 'ReadWrite'
param aksClusterEnablePrivateCluster = false
param aksEnablePrivateClusterPublicFQDN = false
param podIdentityProfileEnabled = false
param kedaEnabled = true
param daprEnabled = true
param fluxGitOpsEnabled = false
param verticalPodAutoscalerEnabled = true
param deploymentScriptUri = 'https://raw.githubusercontent.com/paolosalvatori/scripts/refs/heads/main/install-packages.sh'
param blobCSIDriverEnabled = true
param diskCSIDriverEnabled = true
param fileCSIDriverEnabled = true
param snapshotControllerEnabled = true
param defenderSecurityMonitoringEnabled = true
param imageCleanerEnabled = true
param imageCleanerIntervalHours = 24
param nodeRestrictionEnabled = true
param workloadIdentityEnabled = true
param oidcIssuerProfileEnabled = true
param dnsZoneName = '<your-azure-dns-name-eg-contoso-com>'
param dnsZoneResourceGroupName = '<your-azure-dns-resource-group-name>'
param actionGroupEmailAddress = '<your-email-adddress>'
param keyVaultName = '<key-vault-name>'
param keyVaultResourceGroupName = '<key-vault-resource-group-name>'
param keyVaultCertificateName = '<key-vault-certificate-name>'
param backendAddressPoolName = 'DefaultBackendAddressPool'
param frontendPorts = [
  {
    name: httpFrontendPortName
    port: 443
  }
]
param httpListeners = [
  {
    name: httpListenerName
    protocol: 'Https'
    frontendPort: httpFrontendPortName
    sslCertificate: keyVaultCertificateName
    hostNames: hostnames
    firewallPolicy: 'Enabled'
  }
]
param requestRoutingRules = [
  {
    name: requestRoutingRuleName
    ruleType: 'Basic'
    priority: 1000
    listener: httpListenerName
    backendPool: backendAddressPoolName
    backendHttpSettings: backendHttpSettingsName
  }
]
param backendHttpSettings = [
  {
    name: backendHttpSettingsName
    port: 443
    protocol: 'Https'
    cookieBasedAffinity: 'Disabled'
    probeName: probeName
    probeEnabled: true
    pickHostNameFromBackendAddress: false
    requestTimeout: 300
  }
]
param probes = [
  {
    name: probeName
    protocol: 'Https'
    path: '/'
    host: hostnames[0]
    port: 443
    interval: 60
    timeout: 30
    unhealthyThreshold: 3
    pickHostNameFromBackendHttpSettings: false
    match: {
      statusCodes: [
        '200'
      ]
    }
  }
]
param redirectConfigurations = []
param deployPrometheusAndGrafanaViaHelm = true
param deployCertificateManagerViaHelm = true
param ingressClassNames = ['nginx']
param clusterIssuerNames = ['letsencrypt-nginx']
param deployNginxIngressControllerViaHelm = 'Internal'
param email = '<your-email-adddress>'