Tips-Of-Mine/terraform-azure
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

201-vm-disk-encryption-extension patch (#152)

Browse Source
This commit is contained in:
Dingjia Chen
2023-02-16 22:59:18 -06:00
committed by GitHub
parent 624d602345
commit 5d3a3f367c
4 changed files with 51 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files

39
quickstart/201-vm-disk-encryption-extension/main.tf
View File

@ -1,13 +1,17 @@
resource "azurerm_resource_group" "example" {
name = "${var.name_prefix}-rg"
name = "${random_pet.prefix.id}-rg"
location = var.location
}
// Key Vault Key
data "azurerm_client_config" "current" {}
locals {
current_user_object_id = coalesce(var.msi_id, data.azurerm_client_config.current.object_id)
}
resource "azurerm_key_vault" "example" {
name = "${var.name_prefix}-kv"
name = "${random_pet.prefix.id}-kv"
location = azurerm_resource_group.example.location
resource_group_name = azurerm_resource_group.example.name
tenant_id = data.azurerm_client_config.current.tenant_id
@ -20,7 +24,7 @@ resource "azurerm_key_vault" "example" {
resource "azurerm_key_vault_access_policy" "service-principal" {
key_vault_id = azurerm_key_vault.example.id
tenant_id = data.azurerm_client_config.current.tenant_id
object_id = data.azurerm_client_config.current.object_id
object_id = local.current_user_object_id
key_permissions = [
"Create",
@ -58,21 +62,21 @@ resource "azurerm_key_vault_key" "example" {
// Virtual Machine
resource "azurerm_virtual_network" "example" {
name = "${var.name_prefix}-vnet"
name = "${random_pet.prefix.id}-vnet"
address_space = ["10.0.0.0/16"]
location = azurerm_resource_group.example.location
resource_group_name = azurerm_resource_group.example.name
}
resource "azurerm_subnet" "example" {
name = "${var.name_prefix}-subnet"
name = "${random_pet.prefix.id}-subnet"
resource_group_name = azurerm_resource_group.example.name
virtual_network_name = azurerm_virtual_network.example.name
address_prefixes = ["10.0.2.0/24"]
}
resource "azurerm_network_interface" "example" {
name = "${var.name_prefix}-nic"
name = "${random_pet.prefix.id}-nic"
location = azurerm_resource_group.example.location
resource_group_name = azurerm_resource_group.example.name
@ -83,8 +87,8 @@ resource "azurerm_network_interface" "example" {
}
}
resource "azurerm_linux_virtual_machine" "example" {
name = "${var.name_prefix}-vm"
resource "azurerm_linux_virtual_machine" "main" {
name = "${random_pet.prefix.id}-vm"
resource_group_name = azurerm_resource_group.example.name
location = azurerm_resource_group.example.location
size = "Standard_D2s_v3"
@ -95,7 +99,7 @@ resource "azurerm_linux_virtual_machine" "example" {
admin_ssh_key {
username = "azureuser"
public_key = var.vm_public_key
public_key = tls_private_key.vm_key.public_key_openssh
}
source_image_reference {
@ -118,7 +122,7 @@ resource "azurerm_virtual_machine_extension" "example" {
type = "AzureDiskEncryptionForLinux"
type_handler_version = "1.1"
auto_upgrade_minor_version = false
virtual_machine_id = azurerm_linux_virtual_machine.example.id
virtual_machine_id = azurerm_linux_virtual_machine.main.id
settings = jsonencode({
"EncryptionOperation" = "EnableEncryption"
@ -130,3 +134,18 @@ resource "azurerm_virtual_machine_extension" "example" {
"VolumeType" = "All"
})
}
resource "local_sensitive_file" "lsf" {
content = tls_private_key.vm_key.private_key_pem
filename = "key.pem"
}
resource "random_pet" "prefix" {
length = 1
prefix = var.prefix
}
resource "tls_private_key" "vm_key" {
algorithm = "RSA"
rsa_bits = 4096
}