Terraform — Provider Citrix : catalogues MCS et groupes de mise à disposition

terraform {
  required_providers {
    citrix = {
      source  = "citrix/citrix"
      version = ">= 1.0"          # fige la version testée dans ton projet
    }
  }
}

# Citrix Cloud (DaaS) : client API sécurisé créé dans Citrix Cloud
provider "citrix" {
  cvad_config = {
    customer_id   = var.customer_id      # ou variable d'env. CITRIX_CUSTOMER_ID
    client_id     = var.client_id        # ou CITRIX_CLIENT_ID
    client_secret = var.client_secret    # ou CITRIX_CLIENT_SECRET
  }
}

# CVAD on-premises (≥ 2311, Web Studio installé)
# provider "citrix" {
#   cvad_config = {
#     hostname      = "ddc01.corp.local"       # ou CITRIX_HOSTNAME
#     client_id     = "CORP\\svc-terraform"    # compte admin Citrix
#     client_secret = var.ddc_password
#   }
# }

resource "citrix_azure_hypervisor" "azure" {
  name                = "Azure-FranceCentral"
  zone                = var.zone_id
  active_directory_id = var.azure_tenant_id
  subscription_id     = var.azure_subscription_id
  authentication_mode = "SystemAssignedManagedIdentity"   # pas de secret à gérer
  proxy_hypervisor_traffic_through_connector = true
}

resource "citrix_azure_hypervisor_resource_pool" "vda" {
  name                           = "RP-VDA-FranceCentral"
  hypervisor                     = citrix_azure_hypervisor.azure.id
  region                         = "France Central"
  virtual_network_resource_group = "rg-prd-network"
  virtual_network                = "vnet-prd-citrix"
  subnets                        = ["snet-vda"]
}

resource "citrix_machine_catalog" "w2025_ms" {
  name              = "CAT-W2025-MS"
  description       = "Windows Server 2025 multi-session"
  zone              = var.zone_id
  allocation_type   = "Random"          # obligatoire en MultiSession
  session_support   = "MultiSession"
  provisioning_type = "MCS"

  provisioning_scheme = {
    hypervisor               = citrix_azure_hypervisor.azure.id
    hypervisor_resource_pool = citrix_azure_hypervisor_resource_pool.vda.id
    identity_type            = "ActiveDirectory"   # ou AzureAD, HybridAzureAD
    machine_domain_identity = {
      domain             = "corp.local"
      domain_ou          = "OU=VDA,OU=Citrix,DC=corp,DC=local"
      service_account_id = citrix_service_account.ad_join.id   # évite le mot de passe en clair
    }
    azure_machine_config = {
      service_offering  = "Standard_D8s_v5"
      storage_type      = "Premium_LRS"
      use_managed_disks = true
      license_type      = "Windows_Server"
      azure_master_image = {
        resource_group = "rg-prd-images"
        master_image   = var.master_snapshot          # la variable qu'on fait évoluer
      }
    }
    number_of_total_machines = 4
    machine_account_creation_rules = {
      naming_scheme      = "VDA-MS-##"
      naming_scheme_type = "Numeric"
    }
  }
}

resource "citrix_delivery_group" "bureaux" {
  name = "DG-W2025-Bureaux"
  associated_machine_catalogs = [{
    machine_catalog = citrix_machine_catalog.w2025_ms.id
    machine_count   = 4
  }]

  desktops = [{
    published_name = "Bureau Windows"     # le renommer recrée le bureau !
    enabled        = true
    restricted_access_users = {
      allow_list = ["CORP\\GG-Citrix-Bureau"]
    }
  }]

  autoscale_settings = {
    autoscale_enabled = true
    timezone          = "Romance Standard Time"
    peak_buffer_size_percent = 10
    power_time_schemes = [{
      display_name          = "Semaine"
      days_of_week          = ["Monday", "Tuesday", "Wednesday", "Thursday", "Friday"]
      peak_time_ranges      = ["08:00-18:00"]
      pool_using_percentage = false
      pool_size_schedules   = [{ time_range = "07:30-18:30", pool_size = 2 }]
    }]
  }

  reboot_schedules = [{
    name                    = "Reboot hebdo"
    reboot_schedule_enabled = true
    frequency               = "Weekly"
    frequency_factor        = 1
    days_in_week            = ["Sunday"]
    start_date              = "2026-11-01"
    start_time              = "03:00"
    ignore_maintenance_mode = true
    natural_reboot_schedule = false
    reboot_duration_minutes = 60
  }]
}