如何通过Terraform部署托管虚拟网络中的Azure Data Factory Azure IR并启用交互式创作

Absolutely! You can enable Interactive authoring for your VNet-connected Azure Managed Integration Runtime (IR) right through Terraform by adding a couple of key parameters to your resource definition.

When you set up a Managed IR with virtual_network_enabled = true (quick note: this parameter is deprecated in newer Azurerm provider versions—you’ll want to use managed_virtual_network_enabled = true instead for ongoing support), Interactive Authoring gets turned off by default. To flip it on, you need two critical settings:

• Explicitly enable Interactive Authoring with the interactive_authoring_enabled = true flag.
• Allow public network access via public_network_access_enabled = true. Even with a managed VNet, Interactive Authoring needs this to communicate with Data Factory’s authoring plane.

Here’s your updated Terraform code with these settings added:

resource "azurerm_data_factory_integration_runtime_azure" "ManagedIR" {
  name                          = "ManagedIR"
  data_factory_id               = azurerm_data_factory.datafactory.id
  location                      = var.location
  resource_group_name           = "****"
  # Replace deprecated virtual_network_enabled with the recommended parameter
  managed_virtual_network_enabled = true
  public_network_access_enabled  = true
  interactive_authoring_enabled  = true
  time_to_live_min              = 60
}

Additional Notes: #

• If you’re running an older version of the Azurerm provider (before v3.0), the interactive_authoring_enabled parameter might not exist—you’ll need to update your provider version first to use it.
• Also, ensure your VNet’s Network Security Groups (NSGs) allow inbound traffic on ports 443 (for HTTPS) and 50000-50010 (for Interactive Authoring backend communication). You can restrict this traffic to Data Factory’s official IP ranges or open it to the public based on your security requirements.

内容的提问来源于stack exchange，提问作者Aniket Karajgikar