Compare commits
9 Commits
101-authn-
...
201-vmss-j
Author | SHA1 | Date | |
---|---|---|---|
caff317c3f | |||
af3343e56f | |||
8c3f290e61 | |||
3a6dd12ab9 | |||
5192273700 | |||
d2e47ddadd | |||
96d88c3c41 | |||
e405273660 | |||
98f857a865 |
@ -40,4 +40,13 @@ resource "azurerm_attestation_provider" "corp_attestation" {
|
||||
name = "${var.attestation_provider_name}${random_string.attestation_suffix.result}"
|
||||
resource_group_name = azurerm_resource_group.rg.name
|
||||
policy_signing_certificate_data = try(tls_self_signed_cert.attestation[0].cert_pem, file(var.cert_path))
|
||||
#https://github.com/hashicorp/terraform-provider-azurerm/issues/21998#issuecomment-1573312297
|
||||
lifecycle {
|
||||
ignore_changes = [
|
||||
"open_enclave_policy_base64",
|
||||
"sev_snp_policy_base64",
|
||||
"sgx_enclave_policy_base64",
|
||||
"tpm_policy_base64",
|
||||
]
|
||||
}
|
||||
}
|
@ -4,7 +4,7 @@ terraform {
|
||||
required_providers {
|
||||
azurerm = {
|
||||
source = "hashicorp/azurerm"
|
||||
version = "~>2.0"
|
||||
version = "~>3.0"
|
||||
}
|
||||
random = {
|
||||
source = "hashicorp/random"
|
||||
|
@ -3,7 +3,7 @@ terraform {
|
||||
required_providers {
|
||||
azurerm = {
|
||||
source = "hashicorp/azurerm"
|
||||
version = "~>2.0"
|
||||
version = "~>3.0"
|
||||
}
|
||||
random = {
|
||||
source = "hashicorp/random"
|
||||
|
@ -8,7 +8,7 @@ terraform {
|
||||
}
|
||||
azurerm = {
|
||||
source = "hashicorp/azurerm"
|
||||
version = "~>2.0"
|
||||
version = "~>3.0"
|
||||
}
|
||||
random = {
|
||||
source = "hashicorp/random"
|
||||
|
@ -4,7 +4,7 @@ terraform {
|
||||
required_providers {
|
||||
azurerm = {
|
||||
source = "hashicorp/azurerm"
|
||||
version = "~>2.0"
|
||||
version = "~>3.0"
|
||||
}
|
||||
}
|
||||
}
|
||||
@ -17,6 +17,15 @@ provider "azurerm" {
|
||||
}
|
||||
}
|
||||
|
||||
resource "random_password" "password" {
|
||||
count = var.admin_password == null ? 1 : 0
|
||||
length = 20
|
||||
}
|
||||
|
||||
locals {
|
||||
admin_password = try(random_password.password[0].result, var.admin_password)
|
||||
}
|
||||
|
||||
resource "azurerm_resource_group" "vmss" {
|
||||
name = var.resource_group_name
|
||||
location = var.location
|
||||
@ -27,7 +36,7 @@ resource "random_string" "fqdn" {
|
||||
length = 6
|
||||
special = false
|
||||
upper = false
|
||||
number = false
|
||||
numeric = false
|
||||
}
|
||||
|
||||
resource "azurerm_virtual_network" "vmss" {
|
||||
@ -73,14 +82,12 @@ resource "azurerm_lb_backend_address_pool" "bpepool" {
|
||||
}
|
||||
|
||||
resource "azurerm_lb_probe" "vmss" {
|
||||
resource_group_name = azurerm_resource_group.vmss.name
|
||||
loadbalancer_id = azurerm_lb.vmss.id
|
||||
name = "ssh-running-probe"
|
||||
port = var.application_port
|
||||
}
|
||||
|
||||
resource "azurerm_lb_rule" "lbnatrule" {
|
||||
resource_group_name = azurerm_resource_group.vmss.name
|
||||
loadbalancer_id = azurerm_lb.vmss.id
|
||||
name = "http"
|
||||
protocol = "Tcp"
|
||||
@ -127,7 +134,7 @@ resource "azurerm_virtual_machine_scale_set" "vmss" {
|
||||
os_profile {
|
||||
computer_name_prefix = "vmlab"
|
||||
admin_username = var.admin_user
|
||||
admin_password = var.admin_password
|
||||
admin_password = local.admin_password
|
||||
custom_data = file("web.conf")
|
||||
}
|
||||
|
||||
@ -198,7 +205,7 @@ resource "azurerm_virtual_machine" "jumpbox" {
|
||||
os_profile {
|
||||
computer_name = "jumpbox"
|
||||
admin_username = var.admin_user
|
||||
admin_password = var.admin_password
|
||||
admin_password = local.admin_password
|
||||
}
|
||||
|
||||
os_profile_linux_config {
|
||||
|
@ -28,6 +28,6 @@ variable "admin_user" {
|
||||
|
||||
variable "admin_password" {
|
||||
description = "Default password for admin account"
|
||||
default = "ChangeMe123!"
|
||||
default = null
|
||||
sensitive = true
|
||||
}
|
||||
|
Reference in New Issue
Block a user