Compare commits

..

5 Commits

Author SHA1 Message Date
c08405c06a fix broken script url 2024-10-05 12:37:06 +08:00
ff0b2795ab add random suffix to resource group name 2024-10-05 10:43:31 +08:00
dcca3ba6ef fix example 2024-10-05 10:39:55 +08:00
86b15f1a9f fix example 2024-10-05 08:54:51 +08:00
ddfedda590 fix 301-hub-spoke 2024-10-05 08:50:32 +08:00
9 changed files with 24 additions and 91 deletions

View File

@ -4,7 +4,7 @@ terraform {
required_providers { required_providers {
azurerm = { azurerm = {
source = "hashicorp/azurerm" source = "hashicorp/azurerm"
version = "~>3.0" version = "~>2.0"
} }
} }
} }
@ -17,15 +17,6 @@ provider "azurerm" {
} }
} }
resource "random_password" "password" {
count = var.admin_password == null ? 1 : 0
length = 20
}
locals {
admin_password = try(random_password.password[0].result, var.admin_password)
}
resource "azurerm_resource_group" "vmss" { resource "azurerm_resource_group" "vmss" {
name = var.resource_group_name name = var.resource_group_name
location = var.location location = var.location
@ -36,7 +27,7 @@ resource "random_string" "fqdn" {
length = 6 length = 6
special = false special = false
upper = false upper = false
numeric = false number = false
} }
resource "azurerm_virtual_network" "vmss" { resource "azurerm_virtual_network" "vmss" {
@ -82,12 +73,14 @@ resource "azurerm_lb_backend_address_pool" "bpepool" {
} }
resource "azurerm_lb_probe" "vmss" { resource "azurerm_lb_probe" "vmss" {
resource_group_name = azurerm_resource_group.vmss.name
loadbalancer_id = azurerm_lb.vmss.id loadbalancer_id = azurerm_lb.vmss.id
name = "ssh-running-probe" name = "ssh-running-probe"
port = var.application_port port = var.application_port
} }
resource "azurerm_lb_rule" "lbnatrule" { resource "azurerm_lb_rule" "lbnatrule" {
resource_group_name = azurerm_resource_group.vmss.name
loadbalancer_id = azurerm_lb.vmss.id loadbalancer_id = azurerm_lb.vmss.id
name = "http" name = "http"
protocol = "Tcp" protocol = "Tcp"
@ -134,7 +127,7 @@ resource "azurerm_virtual_machine_scale_set" "vmss" {
os_profile { os_profile {
computer_name_prefix = "vmlab" computer_name_prefix = "vmlab"
admin_username = var.admin_user admin_username = var.admin_user
admin_password = local.admin_password admin_password = var.admin_password
custom_data = file("web.conf") custom_data = file("web.conf")
} }
@ -205,7 +198,7 @@ resource "azurerm_virtual_machine" "jumpbox" {
os_profile { os_profile {
computer_name = "jumpbox" computer_name = "jumpbox"
admin_username = var.admin_user admin_username = var.admin_user
admin_password = local.admin_password admin_password = var.admin_password
} }
os_profile_linux_config { os_profile_linux_config {

View File

@ -1,11 +1,11 @@
output "vmss_public_ip_fqdn" { output "vmss_public_ip_fqdn" {
value = azurerm_public_ip.vmss.fqdn value = azurerm_public_ip.vmss.fqdn
} }
output "jumpbox_public_ip_fqdn" { output "jumpbox_public_ip_fqdn" {
value = azurerm_public_ip.jumpbox.fqdn value = azurerm_public_ip.jumpbox.fqdn
} }
output "jumpbox_public_ip" { output "jumpbox_public_ip" {
value = azurerm_public_ip.jumpbox.ip_address value = azurerm_public_ip.jumpbox.ip_address
} }

View File

@ -28,6 +28,6 @@ variable "admin_user" {
variable "admin_password" { variable "admin_password" {
description = "Default password for admin account" description = "Default password for admin account"
default = null default = "ChangeMe123!"
sensitive = true sensitive = true
} }

View File

@ -3,7 +3,7 @@ resource "random_string" "fw_diag_prefix" {
length = 8 length = 8
upper = false upper = false
special = false special = false
numeric = false number = false
} }
resource "azurerm_ip_group" "ip_group_hub" { resource "azurerm_ip_group" "ip_group_hub" {
name = "hub-ipgroup" name = "hub-ipgroup"
@ -47,8 +47,6 @@ resource "azurerm_firewall" "azure_firewall_instance" {
name = "afw-${var.name}-${var.environment}" name = "afw-${var.name}-${var.environment}"
location = azurerm_resource_group.default.location location = azurerm_resource_group.default.location
resource_group_name = azurerm_resource_group.hub_rg.name resource_group_name = azurerm_resource_group.hub_rg.name
sku_name = "AZFW_VNet"
sku_tier = "Standard"
firewall_policy_id = azurerm_firewall_policy.base_policy.id firewall_policy_id = azurerm_firewall_policy.base_policy.id
ip_configuration { ip_configuration {
@ -107,11 +105,6 @@ resource "azurerm_monitor_diagnostic_setting" "azure_firewall_instance" {
} }
} }
lifecycle {
ignore_changes = [
log
]
}
} }
resource "azurerm_firewall_policy_rule_collection_group" "azure_firewall_rules_collection" { resource "azurerm_firewall_policy_rule_collection_group" "azure_firewall_rules_collection" {

View File

@ -3,7 +3,7 @@ resource "random_string" "ci_prefix" {
length = 8 length = 8
upper = false upper = false
special = false special = false
numeric = false number = false
} }
# Compute instance # Compute instance

View File

@ -10,15 +10,6 @@ resource "azurerm_network_interface" "dsvm" {
} }
} }
resource "random_password" "dsvm_host_password" {
count = var.dsvm_host_password == null ? 1 : 0
length = 20
}
locals {
dsvm_host_password = try(random_password.dsvm_host_password[0].result, var.dsvm_host_password)
}
resource "azurerm_windows_virtual_machine" "dsvm" { resource "azurerm_windows_virtual_machine" "dsvm" {
name = var.dsvm_name name = var.dsvm_name
location = azurerm_resource_group.default.location location = azurerm_resource_group.default.location
@ -46,18 +37,12 @@ resource "azurerm_windows_virtual_machine" "dsvm" {
} }
computer_name = var.dsvm_name computer_name = var.dsvm_name
admin_username = var.dsvm_admin_username admin_username = var.dsvm_admin_username
admin_password = local.dsvm_host_password admin_password = var.dsvm_host_password
provision_vm_agent = true provision_vm_agent = true
vm_agent_platform_updates_enabled = false
timeouts { timeouts {
create = "60m" create = "60m"
delete = "2h" delete = "2h"
} }
lifecycle {
ignore_changes = [
vm_agent_platform_updates_enabled,
]
}
} }

View File

@ -4,43 +4,29 @@ terraform {
required_providers { required_providers {
azurerm = { azurerm = {
source = "hashicorp/azurerm" source = "hashicorp/azurerm"
version = "~> 3.0" version = "=2.78.0"
} }
azureml = { azureml = {
source = "registry.terraform.io/orobix/azureml" source = "registry.terraform.io/Telemaco019/azureml"
} }
} }
} }
provider "azurerm" { provider "azurerm" {
features { features {}
key_vault {
recover_soft_deleted_key_vaults = false
purge_soft_delete_on_destroy = false
purge_soft_deleted_keys_on_destroy = false
}
resource_group {
prevent_deletion_if_contains_resources = false
}
}
} }
data "azurerm_client_config" "current" {} data "azurerm_client_config" "current" {}
resource "random_string" "suffix" {
length = 4
upper = false
special = false
}
resource "azurerm_resource_group" "default" { resource "azurerm_resource_group" "default" {
name = "rg-${var.name}-${var.environment}-${random_string.suffix.result}" name = "rg-${var.name}-${var.environment}"
location = var.location location = var.location
} }
#Hub Resource Group #Hub Resource Group
resource "azurerm_resource_group" "hub_rg" { resource "azurerm_resource_group" "hub_rg" {
name = "rg-hub-${var.name}-${var.environment}-${random_string.suffix.result}" name = "rg-hub-${var.name}-${var.environment}"
location = var.location location = var.location
} }

View File

@ -1,7 +1,6 @@
variable "name" { variable "name" {
type = string type = string
description = "Name of the deployment" description = "Name of the deployment"
default = "301mlhss"
} }
variable "environment" { variable "environment" {
@ -91,5 +90,4 @@ variable "dsvm_host_password" {
type = string type = string
description = "Password for the admin username of the Data Science VM" description = "Password for the admin username of the Data Science VM"
sensitive = true sensitive = true
default = null
} }

View File

@ -1,6 +1,6 @@
# Dependent resources for Azure Machine Learning # Dependent resources for Azure Machine Learning
resource "azurerm_application_insights" "default" { resource "azurerm_application_insights" "default" {
name = "appi-${var.name}-${var.environment}-${random_string.suffix.result}" name = "appi-${var.name}-${var.environment}"
location = azurerm_resource_group.default.location location = azurerm_resource_group.default.location
resource_group_name = azurerm_resource_group.default.name resource_group_name = azurerm_resource_group.default.name
workspace_id = azurerm_log_analytics_workspace.default.id workspace_id = azurerm_log_analytics_workspace.default.id
@ -8,7 +8,7 @@ resource "azurerm_application_insights" "default" {
} }
resource "azurerm_key_vault" "default" { resource "azurerm_key_vault" "default" {
name = "kv-${var.name}-${var.environment}-${random_string.suffix.result}" name = "kv-${var.name}-${var.environment}"
location = azurerm_resource_group.default.location location = azurerm_resource_group.default.location
resource_group_name = azurerm_resource_group.default.name resource_group_name = azurerm_resource_group.default.name
tenant_id = data.azurerm_client_config.current.tenant_id tenant_id = data.azurerm_client_config.current.tenant_id
@ -22,7 +22,7 @@ resource "azurerm_key_vault" "default" {
} }
resource "azurerm_storage_account" "default" { resource "azurerm_storage_account" "default" {
name = "st${var.name}${var.environment}${random_string.suffix.result}" name = "st${var.name}${var.environment}"
location = azurerm_resource_group.default.location location = azurerm_resource_group.default.location
resource_group_name = azurerm_resource_group.default.name resource_group_name = azurerm_resource_group.default.name
account_tier = "Standard" account_tier = "Standard"
@ -36,7 +36,7 @@ resource "azurerm_storage_account" "default" {
} }
resource "azurerm_container_registry" "default" { resource "azurerm_container_registry" "default" {
name = "cr${var.name}${var.environment}${random_string.suffix.result}" name = "cr${var.name}${var.environment}"
location = azurerm_resource_group.default.location location = azurerm_resource_group.default.location
resource_group_name = azurerm_resource_group.default.name resource_group_name = azurerm_resource_group.default.name
sku = "Premium" sku = "Premium"
@ -50,7 +50,7 @@ resource "azurerm_container_registry" "default" {
# Machine Learning workspace # Machine Learning workspace
resource "azurerm_machine_learning_workspace" "default" { resource "azurerm_machine_learning_workspace" "default" {
name = "mlw-${var.name}-${var.environment}-${random_string.suffix.result}" name = "mlw-${var.name}-${var.environment}"
location = azurerm_resource_group.default.location location = azurerm_resource_group.default.location
resource_group_name = azurerm_resource_group.default.name resource_group_name = azurerm_resource_group.default.name
application_insights_id = azurerm_application_insights.default.id application_insights_id = azurerm_application_insights.default.id
@ -76,13 +76,6 @@ resource "azurerm_machine_learning_workspace" "default" {
} }
resource "time_sleep" "one_min" {
create_duration = "1m"
depends_on = [
azurerm_windows_virtual_machine.dsvm
]
}
# Private endpoints # Private endpoints
resource "azurerm_private_endpoint" "kv_ple" { resource "azurerm_private_endpoint" "kv_ple" {
name = "ple-${var.name}-${var.environment}-kv" name = "ple-${var.name}-${var.environment}-kv"
@ -101,9 +94,6 @@ resource "azurerm_private_endpoint" "kv_ple" {
subresource_names = ["vault"] subresource_names = ["vault"]
is_manual_connection = false is_manual_connection = false
} }
depends_on = [
time_sleep.one_min
]
} }
resource "azurerm_private_endpoint" "st_ple_blob" { resource "azurerm_private_endpoint" "st_ple_blob" {
@ -123,9 +113,6 @@ resource "azurerm_private_endpoint" "st_ple_blob" {
subresource_names = ["blob"] subresource_names = ["blob"]
is_manual_connection = false is_manual_connection = false
} }
depends_on = [
time_sleep.one_min
]
} }
resource "azurerm_private_endpoint" "storage_ple_file" { resource "azurerm_private_endpoint" "storage_ple_file" {
@ -145,9 +132,6 @@ resource "azurerm_private_endpoint" "storage_ple_file" {
subresource_names = ["file"] subresource_names = ["file"]
is_manual_connection = false is_manual_connection = false
} }
depends_on = [
time_sleep.one_min
]
} }
resource "azurerm_private_endpoint" "cr_ple" { resource "azurerm_private_endpoint" "cr_ple" {
@ -167,9 +151,6 @@ resource "azurerm_private_endpoint" "cr_ple" {
subresource_names = ["registry"] subresource_names = ["registry"]
is_manual_connection = false is_manual_connection = false
} }
depends_on = [
time_sleep.one_min
]
} }
resource "azurerm_private_endpoint" "mlw_ple" { resource "azurerm_private_endpoint" "mlw_ple" {
@ -189,9 +170,6 @@ resource "azurerm_private_endpoint" "mlw_ple" {
subresource_names = ["amlworkspace"] subresource_names = ["amlworkspace"]
is_manual_connection = false is_manual_connection = false
} }
depends_on = [
time_sleep.one_min
]
} }
# Compute cluster for image building required since the workspace is behind a vnet. # Compute cluster for image building required since the workspace is behind a vnet.