Add backend resources and update VMSS resource group

Introduces backend.tf to provision a dedicated resource group and storage for Terraform state. Updates vmss.tf to create and reference the resource group directly, ensuring consistency with the backend state resources.

Author: potatoqualitee

gh-runners/backend.tf

@@ -0,0 +1,34 @@
+# Resource group for Terraform state storage
+resource "azurerm_resource_group" "tfstate" {
+  name     = "dbatools-ci-runners"
+  location = var.location
+
+  tags = {
+    Environment = "CI"
+    ManagedBy   = "Terraform"
+    Purpose     = "Terraform-State"
+  }
+}
+
+# Storage account for Terraform state
+resource "azurerm_storage_account" "tfstate" {
+  name                     = "dbatoolstfstate"
+  resource_group_name      = azurerm_resource_group.tfstate.name
+  location                 = azurerm_resource_group.tfstate.location
+  account_tier             = "Standard"
+  account_replication_type = "LRS"
+  min_tls_version          = "TLS1_2"
+
+  tags = {
+    Environment = "CI"
+    ManagedBy   = "Terraform"
+    Purpose     = "Terraform-State"
+  }
+}
+
+# Storage container for Terraform state files
+resource "azurerm_storage_container" "tfstate" {
+  name                  = "tfstate"
+  storage_account_name  = azurerm_storage_account.tfstate.name
+  container_access_type = "private"
+}

gh-runners/vmss.tf

@@ -1,9 +1,16 @@
 # Get current Azure context
 data "azurerm_client_config" "current" {}
 
-# Reference existing resource group
-data "azurerm_resource_group" "rg" {
-  name = var.resource_group_name
+# Use the resource group created in backend.tf
+# This references the same resource group used for Terraform state
+resource "azurerm_resource_group" "rg" {
+  name     = var.resource_group_name
+  location = var.location
+
+  tags = {
+    Environment = "CI"
+    ManagedBy   = "Terraform"
+  }
 }
 
 # Reference existing Key Vault
@@ -21,8 +28,8 @@ data "azurerm_image" "golden" {
 # Create virtual network for VMSS
 resource "azurerm_virtual_network" "vnet" {
   name                = "${var.vmss_name}-vnet"
-  resource_group_name = data.azurerm_resource_group.rg.name
-  location            = data.azurerm_resource_group.rg.location
+  resource_group_name = azurerm_resource_group.rg.name
+  location            = azurerm_resource_group.rg.location
   address_space       = ["10.0.0.0/16"]
 
   tags = {
@@ -34,16 +41,16 @@ resource "azurerm_virtual_network" "vnet" {
 # Create subnet for VMSS
 resource "azurerm_subnet" "subnet" {
   name                 = "${var.vmss_name}-subnet"
-  resource_group_name  = data.azurerm_resource_group.rg.name
+  resource_group_name  = azurerm_resource_group.rg.name
   virtual_network_name = azurerm_virtual_network.vnet.name
   address_prefixes     = ["10.0.1.0/24"]
 }
 
 # Windows Virtual Machine Scale Set with custom image
 resource "azurerm_windows_virtual_machine_scale_set" "vmss" {
   name                = var.vmss_name
-  resource_group_name = data.azurerm_resource_group.rg.name
-  location            = data.azurerm_resource_group.rg.location
+  resource_group_name = azurerm_resource_group.rg.name
+  location            = azurerm_resource_group.rg.location
   sku                 = var.vm_sku
   instances           = var.min_instances
   admin_username      = var.admin_username