aztfmod/community

Hub & Spoke Implementation (Cross-subscription)

Can anyone help with the Hub-Spoke implementation if they are in two different Subscriptions please

Hub network must be in level 2 in its own landingzone subscription sub1. VWan is in same subscription/resource group but different landingzone & hence different tfstate file.
Spoke network must be in level3 and in a different subscription sub2.

I defined the virtual_hub_connections at level 3:

virtual_hub_connections = {
  my-spoke_TO_my-hub = {
    name        = "my-spoke_TO_my-hub"
    virtual_hub = {
      lz_key = "my-hub-landingzone-key"
      key    = "my-hub-key"
    }
    vnet = {
      vnet_key = "my-spoke-vnet-key"

    }
  }
}

module.solution.azurerm_virtual_hub_connection.vhub_connection["my-spoke_TO_my-hub"]: Creating...
╷
│ Error: creating Hub Virtual Network Connection: (Name "my-spoke_TO_my-hub" / Virtual Hub Name "my-hub" / Resource Group "myhub-rg"): network.HubVirtualNetworkConnectionsClient#CreateOrUpdate: Failure sending request: StatusCode=404 -- Original Error: Code="ResourceGroupNotFound" Message="Resource group 'myhub-rg' could not be found."
│ 
│   with module.solution.azurerm_virtual_hub_connection.vhub_connection["my-spoke_TO_my-hub"],
│   on /home/vscode/.terraform.cache/mydev/rover_jobs/20220728004934565321893/modules/solution/networking_virtual_hub_connection.tf line 14, in resource "azurerm_virtual_hub_connection" "vhub_connection":
│   14: resource "azurerm_virtual_hub_connection" "vhub_connection" {
│

TF Plan shows the right plan but when it does apply it fails and I assume it is targeting the level3 subscription when it does TF Apply even though TF plan shows the correct level2 subscription.

** Do we create a virtual_hub_connections landingzone exclusive for connections (no other resources defined) and then run -target-subscription <level2-subscription or move virtual_hub_connections to level 2 and reference level3 vnet using resource ID?

Note: The tfstate for Hub & VWan landingzones are reference at level3 - order toggled but still issue persists.