Azure container group on a vnet that is also reachable via a public ip (using terraform)

I tried to provision an Azure container group on a vnet that is also reachable via a public IP using Terraform and I was able to provision the requirement successfully.

To expose a container group in an Azure Virtual Network to the public internet, let’s focus on a solution that fits within that framework.

One common approach is to use an Azure Load Balancer. The load balancer can have a public IP address associated with it, and it can forward traffic to your container group’s private IP address within the virtual network. This way, your container group remains secure within the virtual network, but it’s also accessible from the internet through the load balancer.

Tried a demo configuration that matches with requirements you are looking for.

My Terraform configuration:

provider "azurerm" {
    features {}
}

resource "azurerm_resource_group" "example" {
  name     = "demo-vksb"
  location = "West US"
}

resource "azurerm_virtual_network" "example" {
  name                = "vksb-network"
  address_space       = ["10.0.0.0/16"]
  location            = azurerm_resource_group.example.location
  resource_group_name = azurerm_resource_group.example.name
}

resource "azurerm_subnet" "example" {
  name                 = "internal"
  resource_group_name  = azurerm_resource_group.example.name
  virtual_network_name = azurerm_virtual_network.example.name
  address_prefixes     = ["10.0.2.0/24"]

  delegation {
    name = "aciDelegation"

    service_delegation {
      name    = "Microsoft.ContainerInstance/containerGroups"
      actions = ["Microsoft.Network/virtualNetworks/subnets/join/action"]
    }
  }
}


resource "azurerm_public_ip" "example" {
  name                = "vksb-publicip"
  location            = azurerm_resource_group.example.location
  resource_group_name = azurerm_resource_group.example.name
  allocation_method   = "Static"
}

resource "azurerm_lb" "example" {
  name                = "vksb-example-lb"
  location            = azurerm_resource_group.example.location
  resource_group_name = azurerm_resource_group.example.name

  frontend_ip_configuration {
    name                 = "publicIPAddress"
    public_ip_address_id = azurerm_public_ip.example.id
  }
}

resource "azurerm_lb_backend_address_pool" "example" {
  loadbalancer_id = azurerm_lb.example.id
  name            = "vksb-backend"
}

resource "azurerm_lb_rule" "example" {
  loadbalancer_id                = azurerm_lb.example.id
  name                           = "HTTP"
  protocol                       = "Tcp"
  frontend_port                  = 80
  backend_port                   = 80
  frontend_ip_configuration_name = "publicIPAddress"
  
}

resource "azurerm_container_group" "example" {
  name                = "vksb-containergroup"
  location            = azurerm_resource_group.example.location
  resource_group_name = azurerm_resource_group.example.name
  os_type             = "Linux"

  container {
    name   = "example-container"
    image  = "hello-world"  # Updated image
    cpu    = "0.5"
    memory = "1.5"

    ports {
      port     = 80
      protocol = "TCP"
    }
  }

  ip_address_type = "Private"
  subnet_ids = [azurerm_subnet.example.id]

}

output "public_ip_address" {
  value = azurerm_public_ip.example.ip_address
}

Output: