Compare commits
1 Commits
301-hub-sp
...
101-authn-
Author | SHA1 | Date | |
---|---|---|---|
3c17fdd146 |
@ -40,13 +40,4 @@ resource "azurerm_attestation_provider" "corp_attestation" {
|
|||||||
name = "${var.attestation_provider_name}${random_string.attestation_suffix.result}"
|
name = "${var.attestation_provider_name}${random_string.attestation_suffix.result}"
|
||||||
resource_group_name = azurerm_resource_group.rg.name
|
resource_group_name = azurerm_resource_group.rg.name
|
||||||
policy_signing_certificate_data = try(tls_self_signed_cert.attestation[0].cert_pem, file(var.cert_path))
|
policy_signing_certificate_data = try(tls_self_signed_cert.attestation[0].cert_pem, file(var.cert_path))
|
||||||
#https://github.com/hashicorp/terraform-provider-azurerm/issues/21998#issuecomment-1573312297
|
|
||||||
lifecycle {
|
|
||||||
ignore_changes = [
|
|
||||||
"open_enclave_policy_base64",
|
|
||||||
"sev_snp_policy_base64",
|
|
||||||
"sgx_enclave_policy_base64",
|
|
||||||
"tpm_policy_base64",
|
|
||||||
]
|
|
||||||
}
|
|
||||||
}
|
}
|
@ -4,7 +4,7 @@ terraform {
|
|||||||
required_providers {
|
required_providers {
|
||||||
azurerm = {
|
azurerm = {
|
||||||
source = "hashicorp/azurerm"
|
source = "hashicorp/azurerm"
|
||||||
version = "~>3.0"
|
version = "~>2.0"
|
||||||
}
|
}
|
||||||
random = {
|
random = {
|
||||||
source = "hashicorp/random"
|
source = "hashicorp/random"
|
||||||
|
@ -3,7 +3,7 @@ terraform {
|
|||||||
required_providers {
|
required_providers {
|
||||||
azurerm = {
|
azurerm = {
|
||||||
source = "hashicorp/azurerm"
|
source = "hashicorp/azurerm"
|
||||||
version = "~>3.0"
|
version = "~>2.0"
|
||||||
}
|
}
|
||||||
random = {
|
random = {
|
||||||
source = "hashicorp/random"
|
source = "hashicorp/random"
|
||||||
|
@ -8,7 +8,7 @@ terraform {
|
|||||||
}
|
}
|
||||||
azurerm = {
|
azurerm = {
|
||||||
source = "hashicorp/azurerm"
|
source = "hashicorp/azurerm"
|
||||||
version = "~>3.0"
|
version = "~>2.0"
|
||||||
}
|
}
|
||||||
random = {
|
random = {
|
||||||
source = "hashicorp/random"
|
source = "hashicorp/random"
|
||||||
|
@ -4,14 +4,8 @@ locals {
|
|||||||
hub-nva-resource-group = "hub-nva-rg"
|
hub-nva-resource-group = "hub-nva-rg"
|
||||||
}
|
}
|
||||||
|
|
||||||
resource "random_string" "suffix" {
|
|
||||||
length = 5
|
|
||||||
special = false
|
|
||||||
upper = false
|
|
||||||
}
|
|
||||||
|
|
||||||
resource "azurerm_resource_group" "hub-nva-rg" {
|
resource "azurerm_resource_group" "hub-nva-rg" {
|
||||||
name = "${local.prefix-hub-nva}-rg-${random_string.suffix.result}"
|
name = "${local.prefix-hub-nva}-rg"
|
||||||
location = local.hub-nva-location
|
location = local.hub-nva-location
|
||||||
|
|
||||||
tags = {
|
tags = {
|
||||||
@ -61,7 +55,7 @@ resource "azurerm_virtual_machine" "hub-nva-vm" {
|
|||||||
os_profile {
|
os_profile {
|
||||||
computer_name = "${local.prefix-hub-nva}-vm"
|
computer_name = "${local.prefix-hub-nva}-vm"
|
||||||
admin_username = var.username
|
admin_username = var.username
|
||||||
admin_password = local.password
|
admin_password = var.password
|
||||||
}
|
}
|
||||||
|
|
||||||
os_profile_linux_config {
|
os_profile_linux_config {
|
||||||
@ -84,7 +78,7 @@ resource "azurerm_virtual_machine_extension" "enable-routes" {
|
|||||||
settings = <<SETTINGS
|
settings = <<SETTINGS
|
||||||
{
|
{
|
||||||
"fileUris": [
|
"fileUris": [
|
||||||
"https://raw.githubusercontent.com/lonegunmanb/reference-architectures/refs/heads/master/scripts/linux/enable-ip-forwarding.sh"
|
"https://raw.githubusercontent.com/mspnp/reference-architectures/master/scripts/linux/enable-ip-forwarding.sh"
|
||||||
],
|
],
|
||||||
"commandToExecute": "bash enable-ip-forwarding.sh"
|
"commandToExecute": "bash enable-ip-forwarding.sh"
|
||||||
}
|
}
|
||||||
@ -148,7 +142,7 @@ resource "azurerm_route_table" "spoke1-rt" {
|
|||||||
route {
|
route {
|
||||||
name = "default"
|
name = "default"
|
||||||
address_prefix = "0.0.0.0/0"
|
address_prefix = "0.0.0.0/0"
|
||||||
next_hop_type = "VnetLocal"
|
next_hop_type = "vnetlocal"
|
||||||
}
|
}
|
||||||
|
|
||||||
tags = {
|
tags = {
|
||||||
@ -184,7 +178,7 @@ resource "azurerm_route_table" "spoke2-rt" {
|
|||||||
route {
|
route {
|
||||||
name = "default"
|
name = "default"
|
||||||
address_prefix = "0.0.0.0/0"
|
address_prefix = "0.0.0.0/0"
|
||||||
next_hop_type = "VnetLocal"
|
next_hop_type = "vnetlocal"
|
||||||
}
|
}
|
||||||
|
|
||||||
tags = {
|
tags = {
|
||||||
|
@ -1,7 +1,7 @@
|
|||||||
locals {
|
locals {
|
||||||
prefix-hub = "hub"
|
prefix-hub = "hub"
|
||||||
hub-location = "eastus"
|
hub-location = "eastus"
|
||||||
hub-resource-group = "hub-vnet-rg-${random_string.suffix.result}"
|
hub-resource-group = "hub-vnet-rg"
|
||||||
shared-key = "4-v3ry-53cr37-1p53c-5h4r3d-k3y"
|
shared-key = "4-v3ry-53cr37-1p53c-5h4r3d-k3y"
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -84,7 +84,7 @@ resource "azurerm_virtual_machine" "hub-vm" {
|
|||||||
os_profile {
|
os_profile {
|
||||||
computer_name = "${local.prefix-hub}-vm"
|
computer_name = "${local.prefix-hub}-vm"
|
||||||
admin_username = var.username
|
admin_username = var.username
|
||||||
admin_password = local.password
|
admin_password = var.password
|
||||||
}
|
}
|
||||||
|
|
||||||
os_profile_linux_config {
|
os_profile_linux_config {
|
||||||
|
@ -5,24 +5,11 @@ terraform {
|
|||||||
required_providers {
|
required_providers {
|
||||||
azurerm = {
|
azurerm = {
|
||||||
source = "hashicorp/azurerm"
|
source = "hashicorp/azurerm"
|
||||||
version = "~> 3.0"
|
version = "~>2.0"
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
provider "azurerm" {
|
provider "azurerm" {
|
||||||
features {
|
features {}
|
||||||
resource_group {
|
|
||||||
prevent_deletion_if_contains_resources = false
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
resource "random_password" "password" {
|
|
||||||
count = var.password == null ? 1 : 0
|
|
||||||
length = 20
|
|
||||||
}
|
|
||||||
|
|
||||||
locals {
|
|
||||||
password = try(random_password.password[0].result, var.password)
|
|
||||||
}
|
}
|
@ -1,6 +1,6 @@
|
|||||||
locals {
|
locals {
|
||||||
onprem-location = "eastus"
|
onprem-location = "eastus"
|
||||||
onprem-resource-group = "onprem-vnet-rg-${random_string.suffix.result}"
|
onprem-resource-group = "onprem-vnet-rg"
|
||||||
prefix-onprem = "onprem"
|
prefix-onprem = "onprem"
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -111,7 +111,7 @@ resource "azurerm_virtual_machine" "onprem-vm" {
|
|||||||
os_profile {
|
os_profile {
|
||||||
computer_name = "${local.prefix-onprem}-vm"
|
computer_name = "${local.prefix-onprem}-vm"
|
||||||
admin_username = var.username
|
admin_username = var.username
|
||||||
admin_password = local.password
|
admin_password = var.password
|
||||||
}
|
}
|
||||||
|
|
||||||
os_profile_linux_config {
|
os_profile_linux_config {
|
||||||
|
@ -1,6 +1,6 @@
|
|||||||
locals {
|
locals {
|
||||||
spoke1-location = "eastus"
|
spoke1-location = "eastus"
|
||||||
spoke1-resource-group = "spoke1-vnet-rg-${random_string.suffix.result}"
|
spoke1-resource-group = "spoke1-vnet-rg"
|
||||||
prefix-spoke1 = "spoke1"
|
prefix-spoke1 = "spoke1"
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -44,7 +44,7 @@ resource "azurerm_virtual_network_peering" "spoke1-hub-peer" {
|
|||||||
allow_forwarded_traffic = true
|
allow_forwarded_traffic = true
|
||||||
allow_gateway_transit = false
|
allow_gateway_transit = false
|
||||||
use_remote_gateways = true
|
use_remote_gateways = true
|
||||||
depends_on = [azurerm_virtual_network.spoke1-vnet, azurerm_virtual_network.hub-vnet, azurerm_virtual_network_gateway.hub-vnet-gateway]
|
depends_on = [azurerm_virtual_network.spoke1-vnet, azurerm_virtual_network.hub-vnet , azurerm_virtual_network_gateway.hub-vnet-gateway]
|
||||||
}
|
}
|
||||||
|
|
||||||
resource "azurerm_network_interface" "spoke1-nic" {
|
resource "azurerm_network_interface" "spoke1-nic" {
|
||||||
@ -84,7 +84,7 @@ resource "azurerm_virtual_machine" "spoke1-vm" {
|
|||||||
os_profile {
|
os_profile {
|
||||||
computer_name = "${local.prefix-spoke1}-vm"
|
computer_name = "${local.prefix-spoke1}-vm"
|
||||||
admin_username = var.username
|
admin_username = var.username
|
||||||
admin_password = local.password
|
admin_password = var.password
|
||||||
}
|
}
|
||||||
|
|
||||||
os_profile_linux_config {
|
os_profile_linux_config {
|
||||||
|
@ -1,6 +1,6 @@
|
|||||||
locals {
|
locals {
|
||||||
spoke2-location = "eastus"
|
spoke2-location = "eastus"
|
||||||
spoke2-resource-group = "spoke2-vnet-rg-${random_string.suffix.result}"
|
spoke2-resource-group = "spoke2-vnet-rg"
|
||||||
prefix-spoke2 = "spoke2"
|
prefix-spoke2 = "spoke2"
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -88,7 +88,7 @@ resource "azurerm_virtual_machine" "spoke2-vm" {
|
|||||||
os_profile {
|
os_profile {
|
||||||
computer_name = "${local.prefix-spoke2}-vm"
|
computer_name = "${local.prefix-spoke2}-vm"
|
||||||
admin_username = var.username
|
admin_username = var.username
|
||||||
admin_password = local.password
|
admin_password = var.password
|
||||||
}
|
}
|
||||||
|
|
||||||
os_profile_linux_config {
|
os_profile_linux_config {
|
||||||
|
@ -10,8 +10,6 @@ variable "username" {
|
|||||||
|
|
||||||
variable "password" {
|
variable "password" {
|
||||||
description = "Password for Virtual Machines"
|
description = "Password for Virtual Machines"
|
||||||
sensitive = true
|
|
||||||
default = null
|
|
||||||
}
|
}
|
||||||
|
|
||||||
variable "vmsize" {
|
variable "vmsize" {
|
||||||
|
Reference in New Issue
Block a user