Investigate supporting nested resource loops

[sandorfr]

It's a pretty important one to do anything with loops (if you have a loop for azure webapp and some related app insights accounts).

[stan-sz]

What is the interim solution for nested resources like eventhubs/customgroups to be able to declare an list of child resources of an already-provisioned list of resources? Example below does not work:

var hubs = {
    'foo': {
        'name': 'foo'
        'consumerGroups': {
            'name': 'bar'
        }
    }
}
resource eventhub 'Microsoft.EventHub/namespaces@2017-04-01' = {
    name: ''
    location: ''

    resource hub 'eventhubs' = [for hub in items(hubs): {
        name: hub.value.name
    }]

    resource cg 'eventhubs/consumergroups' = [for (hub, i) in items(hubs): {
        name: hub.value.consumerGroups.name
        parent: hub[i]
    }]
}

[brwilkinson]

I currently deploy nested resources in a Module, up to 4 layers of Modules.

1) an array of x top level resource 2) a single x top level resource 3) first child resource 4) second child resource

samples:

Service Bus https://github.com/brwilkinson/AzureDeploymentFramework/blob/a1a8678f1a54dd08bce782407a49165bb4d013e5/ADF/tenants/AOA/ACU1.T5.parameters.json#L527

1) https://github.com/brwilkinson/AzureDeploymentFramework/blob/main/ADF/bicep/SB.bicep 2) https://github.com/brwilkinson/AzureDeploymentFramework/blob/main/ADF/bicep/SB-ServiceBus.bicep 3) https://github.com/brwilkinson/AzureDeploymentFramework/blob/main/ADF/bicep/SB-ServiceBus-TopicSubscription.bicep

This is the model that I use for all resources, that you can view here: https://github.com/brwilkinson/AzureDeploymentFramework/tree/main/ADF/bicep

e.g. FrontDoor

Cosmos

Even things like Multiple VM's in a loop/array, with each VM having 1 or more NICS.

[brwilkinson]

actually looking at your sample I thought it was an array, however it's only an object, so perhaps above wasn't relevant for your sample?

var hubs = {
    'foo': {
        'name': 'foo'
        'consumerGroups': {
            'name': 'bar'
        }
    }
}

[AlexanderSehr]

We use the same approach leveraged by @brwilkinson in our CARML modules for e.g. RBAC

(...)
"queueServices": {
        "value": {
            "queues": [
                {
                    "name": "queue1",
                    "metadata": {},
                    "roleAssignments": [
                        {
                            "roleDefinitionIdOrName": "Reader",
                            "principalIds": [
                                "<<deploymentSpId>>"
                            ]
                        }
                    ]
                },
                {
                    "name": "queue2",
                    "metadata": {}
                }
            ]
        }
}

Where

• the storage account is a module that deploys
• a queue services module that deploy n-number of
• a queue module that iterates over an array of role assignments and deploys n-number of
• a role assignment module that iterats over n-number of principalIds

[ramondegoede]

unfortunally this workaround only works when your creating new resources or child resources. Some advanced templates have nested arrays which wont work unfortunally.

e.g. https://docs.microsoft.com/en-us/azure/templates/microsoft.network/applicationgateways?tabs=bicep

backendAddressPools: [
      {
        id: 'string'
        name: 'string'
        properties: {
          backendAddresses: [
            {
              fqdn: 'string'
              ipAddress: 'string'
            }
          ]
        }
      }
    ]

Where an Application gateway can have one or more backendpools with one or more backendaddresses

[brwilkinson]

@ramondegoede This does actually work, however you have to process the nested array in it's own Module.

The module doesn't create any resources it simply iterates over some object and returns the objects that you need for the nested property.

Here is a sample to look at with FrontDoor.

https://github.com/brwilkinson/AzureDeploymentFramework/blob/main/ADF/tenants/AOA/ACU1.T5.parameters.json#L982

            "services": [
              {
                "Name": "APIM03", // acu1-BRW-AOA-s1-afd 01 - apim01 .psthing.com
                "BEAddress": [
                  {
                    "address": "{Deployment}-apim03.azure-api.net",
                    "hostheader": "{Deployment}-afd03-apim03.{Domain}"
                  }
                ],

1) main template loops over multiple frontdoors https://github.com/brwilkinson/AzureDeploymentFramework/blob/main/ADF/bicep/FD.bicep 2) child template does single frontdoor https://github.com/brwilkinson/AzureDeploymentFramework/blob/main/ADF/bicep/FD-frontDoor.bicep 3) nested module for processing the backend object https://github.com/brwilkinson/AzureDeploymentFramework/blob/main/ADF/bicep/FD-frontDoor-BE.bicep 4) The main front door template referencing the backend via outputs https://github.com/brwilkinson/AzureDeploymentFramework/blob/main/ADF/bicep/FD-frontDoor.bicep#L151

    backendPools: [for (service, index) in frontDoorInfo.services: {
      name: service.Name
      properties: {
        backends: FDServiceBE[index].outputs.backends
        loadBalancingSettings: {
          id: resourceId('Microsoft.Network/frontdoors/loadBalancingSettings', FDName, service.LBSettings)
        }
        healthProbeSettings: {
          id: resourceId('Microsoft.Network/frontdoors/healthProbeSettings', FDName, service.ProbeName)
        }
      }
    }]

[brwilkinson]

From: @stan-sz

related to #4555 . Gave example what should be allowed with double looping and probably even triple looping should be allowed for some rare RPs.

[slavizh]

@brwilkinson the example is from me - @slavizh

[brwilkinson]

Thanks @slavizh

• I copied and pasted directly from a similar thread not sure how that happened 😞

[aslan-im]

Is there any update?

[srinadhbh]

Is there any update? Struggling to deploy a dynamic AGW.

[alex-frankel]

No update on this that I am aware of. It's possible the introduction of lambda functions has exposed more workarounds, but not sure about that. @anthony-c-martin would be most likely to come up with something creative here :)

[slavizh]

@alex-frankel you could nest multiple lambda functions. You only need to document it. Main problem is that lambda do not have index option and you cannot use them on existing resource. That forces you to use some other workarounds.

[janinternet]

Nested loops are still needed. Also struggeling with Application Gateway URL paths.