Postgres to Azure via CDK

[mitchdenny]

This is a draft, here is the API usage:

var pgsqlAdministratorLogin = builder.AddParameter("pgsqlAdministratorLogin");
var pgsqlAdministratorLoginPassword = builder.AddParameter("pgsqlAdministratorLoginPassword", secret: true);
var pgsql = builder.AddPostgres("pgsql").AsAzurePostgresFlexibleServerConstruct(pgsqlAdministratorLogin, pgsqlAdministratorLoginPassword);

This produces this manifest:

    "pgsqlAdministratorLogin": {
      "type": "parameter.v0",
      "value": "{pgsqlAdministratorLogin.inputs.value}",
      "inputs": {
        "value": {
          "type": "string"
        }
      }
    },
    "pgsqlAdministratorLoginPassword": {
      "type": "parameter.v0",
      "value": "{pgsqlAdministratorLoginPassword.inputs.value}",
      "inputs": {
        "value": {
          "type": "string",
          "secret": true
        }
      }
    },
    "pgsql": {
      "type": "azure.bicep.v0",
      "connectionString": "{pgsql.secretOutputs.connectionString}",
      "path": "pgsql.module.bicep",
      "params": {
        "principalId": "",
        "keyVaultName": "",
        "administratorLogin": "{pgsqlAdministratorLogin.value}",
        "administratorLoginPassword": "{pgsqlAdministratorLoginPassword.value}"
      },
      "inputs": {
        "password": {
          "type": "string",
          "secret": true,
          "default": {
            "generate": {
              "minLength": 10
            }
          }
        }
      }
    },

There is a bug in the above manifest ... the inputs section in pgsql probably shouldn't be there but I think that this is from a recent change that @eerhardt made so maybe my change is conflicting.

Finally this is the Bicep that is being produced:

targetScope = 'resourceGroup'

@description('')
param location string = resourceGroup().location

@description('')
param administratorLogin string

@description('')
param administratorLoginPassword string

@description('')
param principalId string

@description('')
param keyVaultName string


resource keyVault_IeF8jZvXV 'Microsoft.KeyVault/vaults@2023-02-01' existing = {
  name: keyVaultName
}

resource postgreSqlFlexibleServer_NYWb9Nbel 'Microsoft.DBforPostgreSQL/flexibleServers@2021-06-01' = {
  name: toLower(take(concat('postgres', uniqueString(resourceGroup().id)), 24))
  location: location
  sku: {
    name: 'Standard_B1ms'
    tier: 'Burstable'
  }
  properties: {
    administratorLogin: administratorLogin
    administratorLoginPassword: administratorLoginPassword
    version: '16'
    storage: {
      storageSizeGB: 32
    }
    backup: {
      backupRetentionDays: 7
      geoRedundantBackup: 'Disabled'
    }
    highAvailability: {
      mode: 'Disabled'
    }
    availabilityZone: '1'
  }
}

resource keyVaultSecret_Ddsc3HjrA 'Microsoft.KeyVault/vaults/secrets@2023-02-01' = {
  parent: keyVault_IeF8jZvXV
  name: 'connectionString'
  location: location
  properties: {
    value: 'Host=${postgreSqlFlexibleServer_NYWb9Nbel.properties.fullyQualifiedDomainName};Username=${administratorLogin};Password=${administratorLoginPassword}'
  }
}

There are a few outstanding issues blocking this PR:

• Database child resources for Postgres Flexible Server in CDK Azure/azure-sdk-for-net#42509
• Firewall rule child resources for Postgres Flexible Server in CDK Azure/azure-sdk-for-net#42508
• Postgres resource type for CDK appears to have an unsupported API version Azure/azure-sdk-for-net#42510

Microsoft Reviewers: Open in CodeFlow