Merge pull request #68 from denniseik/feature/azureml-workspace
Looks great!
This commit is contained in:
Mark Gray (MSFT)
GitHub
commit
20a846a0b4
296
.gitignore
vendored
296
.gitignore
vendored
@ -1,296 +0,0 @@
|
|||||||
## Ignore terraform provider and state files
|
|
||||||
*.terraform
|
|
||||||
*.tfstate*
|
|
||||||
|
|
||||||
## Ignore Visual Studio temporary files, build results, and
|
|
||||||
## files generated by popular Visual Studio add-ons.
|
|
||||||
##
|
|
||||||
## Get latest from https://github.com/github/gitignore/blob/master/VisualStudio.gitignore
|
|
||||||
|
|
||||||
# User-specific files
|
|
||||||
*.suo
|
|
||||||
*.user
|
|
||||||
*.userosscache
|
|
||||||
*.sln.docstates
|
|
||||||
|
|
||||||
# User-specific files (MonoDevelop/Xamarin Studio)
|
|
||||||
*.userprefs
|
|
||||||
|
|
||||||
# Build results
|
|
||||||
[Dd]ebug/
|
|
||||||
[Dd]ebugPublic/
|
|
||||||
[Rr]elease/
|
|
||||||
[Rr]eleases/
|
|
||||||
x64/
|
|
||||||
x86/
|
|
||||||
bld/
|
|
||||||
[Bb]in/
|
|
||||||
[Oo]bj/
|
|
||||||
[Ll]og/
|
|
||||||
|
|
||||||
# Visual Studio 2015 cache/options directory
|
|
||||||
.vs/
|
|
||||||
# Uncomment if you have tasks that create the project's static files in wwwroot
|
|
||||||
#wwwroot/
|
|
||||||
|
|
||||||
# MSTest test Results
|
|
||||||
[Tt]est[Rr]esult*/
|
|
||||||
[Bb]uild[Ll]og.*
|
|
||||||
|
|
||||||
# NUNIT
|
|
||||||
*.VisualState.xml
|
|
||||||
TestResult.xml
|
|
||||||
|
|
||||||
# Build Results of an ATL Project
|
|
||||||
[Dd]ebugPS/
|
|
||||||
[Rr]eleasePS/
|
|
||||||
dlldata.c
|
|
||||||
|
|
||||||
# .NET Core
|
|
||||||
project.lock.json
|
|
||||||
project.fragment.lock.json
|
|
||||||
artifacts/
|
|
||||||
**/Properties/launchSettings.json
|
|
||||||
|
|
||||||
*_i.c
|
|
||||||
*_p.c
|
|
||||||
*_i.h
|
|
||||||
*.ilk
|
|
||||||
*.meta
|
|
||||||
*.obj
|
|
||||||
*.pch
|
|
||||||
*.pdb
|
|
||||||
*.pgc
|
|
||||||
*.pgd
|
|
||||||
*.rsp
|
|
||||||
*.sbr
|
|
||||||
*.tlb
|
|
||||||
*.tli
|
|
||||||
*.tlh
|
|
||||||
*.tmp
|
|
||||||
*.tmp_proj
|
|
||||||
*.log
|
|
||||||
*.vspscc
|
|
||||||
*.vssscc
|
|
||||||
.builds
|
|
||||||
*.pidb
|
|
||||||
*.svclog
|
|
||||||
*.scc
|
|
||||||
|
|
||||||
# Chutzpah Test files
|
|
||||||
_Chutzpah*
|
|
||||||
|
|
||||||
# Visual C++ cache files
|
|
||||||
ipch/
|
|
||||||
*.aps
|
|
||||||
*.ncb
|
|
||||||
*.opendb
|
|
||||||
*.opensdf
|
|
||||||
*.sdf
|
|
||||||
*.cachefile
|
|
||||||
*.VC.db
|
|
||||||
*.VC.VC.opendb
|
|
||||||
|
|
||||||
# Visual Studio profiler
|
|
||||||
*.psess
|
|
||||||
*.vsp
|
|
||||||
*.vspx
|
|
||||||
*.sap
|
|
||||||
|
|
||||||
# TFS 2012 Local Workspace
|
|
||||||
$tf/
|
|
||||||
|
|
||||||
# Guidance Automation Toolkit
|
|
||||||
*.gpState
|
|
||||||
|
|
||||||
# ReSharper is a .NET coding add-in
|
|
||||||
_ReSharper*/
|
|
||||||
*.[Rr]e[Ss]harper
|
|
||||||
*.DotSettings.user
|
|
||||||
|
|
||||||
# JustCode is a .NET coding add-in
|
|
||||||
.JustCode
|
|
||||||
|
|
||||||
# TeamCity is a build add-in
|
|
||||||
_TeamCity*
|
|
||||||
|
|
||||||
# DotCover is a Code Coverage Tool
|
|
||||||
*.dotCover
|
|
||||||
|
|
||||||
# Visual Studio code coverage results
|
|
||||||
*.coverage
|
|
||||||
*.coveragexml
|
|
||||||
|
|
||||||
# NCrunch
|
|
||||||
_NCrunch_*
|
|
||||||
.*crunch*.local.xml
|
|
||||||
nCrunchTemp_*
|
|
||||||
|
|
||||||
# MightyMoose
|
|
||||||
*.mm.*
|
|
||||||
AutoTest.Net/
|
|
||||||
|
|
||||||
# Web workbench (sass)
|
|
||||||
.sass-cache/
|
|
||||||
|
|
||||||
# Installshield output folder
|
|
||||||
[Ee]xpress/
|
|
||||||
|
|
||||||
# DocProject is a documentation generator add-in
|
|
||||||
DocProject/buildhelp/
|
|
||||||
DocProject/Help/*.HxT
|
|
||||||
DocProject/Help/*.HxC
|
|
||||||
DocProject/Help/*.hhc
|
|
||||||
DocProject/Help/*.hhk
|
|
||||||
DocProject/Help/*.hhp
|
|
||||||
DocProject/Help/Html2
|
|
||||||
DocProject/Help/html
|
|
||||||
|
|
||||||
# Click-Once directory
|
|
||||||
publish/
|
|
||||||
|
|
||||||
# Publish Web Output
|
|
||||||
*.[Pp]ublish.xml
|
|
||||||
*.azurePubxml
|
|
||||||
# TODO: Comment the next line if you want to checkin your web deploy settings
|
|
||||||
# but database connection strings (with potential passwords) will be unencrypted
|
|
||||||
*.pubxml
|
|
||||||
*.publishproj
|
|
||||||
|
|
||||||
# Microsoft Azure Web App publish settings. Comment the next line if you want to
|
|
||||||
# checkin your Azure Web App publish settings, but sensitive information contained
|
|
||||||
# in these scripts will be unencrypted
|
|
||||||
PublishScripts/
|
|
||||||
|
|
||||||
# NuGet Packages
|
|
||||||
*.nupkg
|
|
||||||
# The packages folder can be ignored because of Package Restore
|
|
||||||
**/packages/*
|
|
||||||
# except build/, which is used as an MSBuild target.
|
|
||||||
!**/packages/build/
|
|
||||||
# Uncomment if necessary however generally it will be regenerated when needed
|
|
||||||
#!**/packages/repositories.config
|
|
||||||
# NuGet v3's project.json files produces more ignorable files
|
|
||||||
*.nuget.props
|
|
||||||
*.nuget.targets
|
|
||||||
|
|
||||||
# Microsoft Azure Build Output
|
|
||||||
csx/
|
|
||||||
*.build.csdef
|
|
||||||
|
|
||||||
# Microsoft Azure Emulator
|
|
||||||
ecf/
|
|
||||||
rcf/
|
|
||||||
|
|
||||||
# Windows Store app package directories and files
|
|
||||||
AppPackages/
|
|
||||||
BundleArtifacts/
|
|
||||||
Package.StoreAssociation.xml
|
|
||||||
_pkginfo.txt
|
|
||||||
|
|
||||||
# Visual Studio cache files
|
|
||||||
# files ending in .cache can be ignored
|
|
||||||
*.[Cc]ache
|
|
||||||
# but keep track of directories ending in .cache
|
|
||||||
!*.[Cc]ache/
|
|
||||||
|
|
||||||
# Others
|
|
||||||
ClientBin/
|
|
||||||
~$*
|
|
||||||
*~
|
|
||||||
*.dbmdl
|
|
||||||
*.dbproj.schemaview
|
|
||||||
*.jfm
|
|
||||||
*.pfx
|
|
||||||
*.publishsettings
|
|
||||||
orleans.codegen.cs
|
|
||||||
|
|
||||||
# Since there are multiple workflows, uncomment next line to ignore bower_components
|
|
||||||
# (https://github.com/github/gitignore/pull/1529#issuecomment-104372622)
|
|
||||||
#bower_components/
|
|
||||||
|
|
||||||
# RIA/Silverlight projects
|
|
||||||
Generated_Code/
|
|
||||||
|
|
||||||
# Backup & report files from converting an old project file
|
|
||||||
# to a newer Visual Studio version. Backup files are not needed,
|
|
||||||
# because we have git ;-)
|
|
||||||
_UpgradeReport_Files/
|
|
||||||
Backup*/
|
|
||||||
UpgradeLog*.XML
|
|
||||||
UpgradeLog*.htm
|
|
||||||
|
|
||||||
# SQL Server files
|
|
||||||
*.mdf
|
|
||||||
*.ldf
|
|
||||||
*.ndf
|
|
||||||
|
|
||||||
# Business Intelligence projects
|
|
||||||
*.rdl.data
|
|
||||||
*.bim.layout
|
|
||||||
*.bim_*.settings
|
|
||||||
|
|
||||||
# Microsoft Fakes
|
|
||||||
FakesAssemblies/
|
|
||||||
|
|
||||||
# GhostDoc plugin setting file
|
|
||||||
*.GhostDoc.xml
|
|
||||||
|
|
||||||
# Node.js Tools for Visual Studio
|
|
||||||
.ntvs_analysis.dat
|
|
||||||
node_modules/
|
|
||||||
|
|
||||||
# Typescript v1 declaration files
|
|
||||||
typings/
|
|
||||||
|
|
||||||
# Visual Studio 6 build log
|
|
||||||
*.plg
|
|
||||||
|
|
||||||
# Visual Studio 6 workspace options file
|
|
||||||
*.opt
|
|
||||||
|
|
||||||
# Visual Studio 6 auto-generated workspace file (contains which files were open etc.)
|
|
||||||
*.vbw
|
|
||||||
|
|
||||||
# Visual Studio LightSwitch build output
|
|
||||||
**/*.HTMLClient/GeneratedArtifacts
|
|
||||||
**/*.DesktopClient/GeneratedArtifacts
|
|
||||||
**/*.DesktopClient/ModelManifest.xml
|
|
||||||
**/*.Server/GeneratedArtifacts
|
|
||||||
**/*.Server/ModelManifest.xml
|
|
||||||
_Pvt_Extensions
|
|
||||||
|
|
||||||
# Paket dependency manager
|
|
||||||
.paket/paket.exe
|
|
||||||
paket-files/
|
|
||||||
|
|
||||||
# FAKE - F# Make
|
|
||||||
.fake/
|
|
||||||
|
|
||||||
# JetBrains Rider
|
|
||||||
.idea/
|
|
||||||
*.sln.iml
|
|
||||||
|
|
||||||
# CodeRush
|
|
||||||
.cr/
|
|
||||||
|
|
||||||
# Python Tools for Visual Studio (PTVS)
|
|
||||||
__pycache__/
|
|
||||||
*.pyc
|
|
||||||
|
|
||||||
# Cake - Uncomment if you are using it
|
|
||||||
# tools/**
|
|
||||||
# !tools/packages.config
|
|
||||||
|
|
||||||
# Telerik's JustMock configuration file
|
|
||||||
*.jmconfig
|
|
||||||
|
|
||||||
# BizTalk build output
|
|
||||||
*.btp.cs
|
|
||||||
*.btm.cs
|
|
||||||
*.odx.cs
|
|
||||||
*.xsd.cs
|
|
||||||
|
|
||||||
# Golang
|
|
||||||
go.sum
|
|
||||||
.test-data/
|
|
||||||
21
quickstart/101-machine-learning/main.tf
Normal file
21
quickstart/101-machine-learning/main.tf
Normal file
@ -0,0 +1,21 @@
|
|||||||
|
terraform {
|
||||||
|
required_version = ">=0.15.0"
|
||||||
|
|
||||||
|
required_providers {
|
||||||
|
azurerm = {
|
||||||
|
source = "hashicorp/azurerm"
|
||||||
|
version = "=2.56.0"
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
provider "azurerm" {
|
||||||
|
features {}
|
||||||
|
}
|
||||||
|
|
||||||
|
data "azurerm_client_config" "current" {}
|
||||||
|
|
||||||
|
resource "azurerm_resource_group" "default" {
|
||||||
|
name = "rg-${var.name}-${var.environment}"
|
||||||
|
location = var.location
|
||||||
|
}
|
||||||
33
quickstart/101-machine-learning/readme.md
Normal file
33
quickstart/101-machine-learning/readme.md
Normal file
@ -0,0 +1,33 @@
|
|||||||
|
# Azure Machine Learning workspace
|
||||||
|
|
||||||
|
This deployment configuration specifies an [Azure Machine Learning workspace](https://docs.microsoft.com/en-us/azure/machine-learning/concept-workspace),
|
||||||
|
and its associated resources including Azure Key Vault, Azure Storage, Azure Application Insights and Azure Container Registry.
|
||||||
|
|
||||||
|
This configuration describes the minimal set of resources you require to get started with Azure Machine Learning.
|
||||||
|
|
||||||
|
## Resources
|
||||||
|
|
||||||
|
| Terraform Resource Type | Description |
|
||||||
|
| - | - |
|
||||||
|
| `azurerm_resource_group` | The resource group all resources get deployed into |
|
||||||
|
| `azurerm_application_insights` | An Azure Application Insights instance associated to the Azure Machine Learning workspace |
|
||||||
|
| `azurerm_key_vault` | An Azure Key Vault instance associated to the Azure Machine Learning workspace |
|
||||||
|
| `azurerm_storage_account` | An Azure Storage instance associated to the Azure Machine Learning workspace |
|
||||||
|
| `azurerm_container_registry` | An Azure Container Registry instance associated to the Azure Machine Learning workspace |
|
||||||
|
| `azurerm_machine_learning_workspace` | An Azure Machine Learning workspace instance |
|
||||||
|
|
||||||
|
## Variables
|
||||||
|
|
||||||
|
| Name | Description |
|
||||||
|
|-|-|
|
||||||
|
| name | Name of the deployment |
|
||||||
|
| environment | The deployment environment name (used for pre- and postfixing resource names) |
|
||||||
|
| location | The Azure region used for deployments |
|
||||||
|
|
||||||
|
## Usage
|
||||||
|
|
||||||
|
```bash
|
||||||
|
terraform plan -var name=azureml567 -out demo.tfplan
|
||||||
|
|
||||||
|
terraform apply "demo.tfplan"
|
||||||
|
```
|
||||||
16
quickstart/101-machine-learning/variables.tf
Normal file
16
quickstart/101-machine-learning/variables.tf
Normal file
@ -0,0 +1,16 @@
|
|||||||
|
variable "name" {
|
||||||
|
type = string
|
||||||
|
description = "Name of the deployment"
|
||||||
|
}
|
||||||
|
|
||||||
|
variable "environment" {
|
||||||
|
type = string
|
||||||
|
description = "Name of the environment"
|
||||||
|
default = "dev"
|
||||||
|
}
|
||||||
|
|
||||||
|
variable "location" {
|
||||||
|
type = string
|
||||||
|
description = "Location of the resources"
|
||||||
|
default = "East US"
|
||||||
|
}
|
||||||
57
quickstart/101-machine-learning/workspace.tf
Normal file
57
quickstart/101-machine-learning/workspace.tf
Normal file
@ -0,0 +1,57 @@
|
|||||||
|
# Dependent resources for Azure Machine Learning
|
||||||
|
resource "azurerm_application_insights" "default" {
|
||||||
|
name = "appi-${var.name}-${var.environment}"
|
||||||
|
location = azurerm_resource_group.default.location
|
||||||
|
resource_group_name = azurerm_resource_group.default.name
|
||||||
|
application_type = "web"
|
||||||
|
}
|
||||||
|
|
||||||
|
resource "azurerm_key_vault" "default" {
|
||||||
|
name = "kv-${var.name}-${var.environment}"
|
||||||
|
location = azurerm_resource_group.default.location
|
||||||
|
resource_group_name = azurerm_resource_group.default.name
|
||||||
|
tenant_id = data.azurerm_client_config.current.tenant_id
|
||||||
|
sku_name = "premium"
|
||||||
|
purge_protection_enabled = false
|
||||||
|
|
||||||
|
network_acls {
|
||||||
|
default_action = "Deny"
|
||||||
|
bypass = "AzureServices"
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
resource "azurerm_storage_account" "default" {
|
||||||
|
name = "st${var.name}${var.environment}"
|
||||||
|
location = azurerm_resource_group.default.location
|
||||||
|
resource_group_name = azurerm_resource_group.default.name
|
||||||
|
account_tier = "Standard"
|
||||||
|
account_replication_type = "GRS"
|
||||||
|
|
||||||
|
network_rules {
|
||||||
|
default_action = "Deny"
|
||||||
|
bypass = ["AzureServices"]
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
resource "azurerm_container_registry" "default" {
|
||||||
|
name = "cr${var.name}${var.environment}"
|
||||||
|
location = azurerm_resource_group.default.location
|
||||||
|
resource_group_name = azurerm_resource_group.default.name
|
||||||
|
sku = "Premium"
|
||||||
|
admin_enabled = true
|
||||||
|
}
|
||||||
|
|
||||||
|
# Machine Learning workspace
|
||||||
|
resource "azurerm_machine_learning_workspace" "default" {
|
||||||
|
name = "mlw-${var.name}-${var.environment}"
|
||||||
|
location = azurerm_resource_group.default.location
|
||||||
|
resource_group_name = azurerm_resource_group.default.name
|
||||||
|
application_insights_id = azurerm_application_insights.default.id
|
||||||
|
key_vault_id = azurerm_key_vault.default.id
|
||||||
|
storage_account_id = azurerm_storage_account.default.id
|
||||||
|
container_registry_id = azurerm_container_registry.default.id
|
||||||
|
|
||||||
|
identity {
|
||||||
|
type = "SystemAssigned"
|
||||||
|
}
|
||||||
|
}
|
||||||
21
quickstart/201-machine-learning-private/main.tf
Normal file
21
quickstart/201-machine-learning-private/main.tf
Normal file
@ -0,0 +1,21 @@
|
|||||||
|
terraform {
|
||||||
|
required_version = ">=0.15.0"
|
||||||
|
|
||||||
|
required_providers {
|
||||||
|
azurerm = {
|
||||||
|
source = "hashicorp/azurerm"
|
||||||
|
version = "=2.72.0"
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
provider "azurerm" {
|
||||||
|
features {}
|
||||||
|
}
|
||||||
|
|
||||||
|
data "azurerm_client_config" "current" {}
|
||||||
|
|
||||||
|
resource "azurerm_resource_group" "default" {
|
||||||
|
name = "rg-${var.name}-${var.environment}"
|
||||||
|
location = var.location
|
||||||
|
}
|
||||||
89
quickstart/201-machine-learning-private/network.tf
Normal file
89
quickstart/201-machine-learning-private/network.tf
Normal file
@ -0,0 +1,89 @@
|
|||||||
|
# Virtual Network
|
||||||
|
resource "azurerm_virtual_network" "default" {
|
||||||
|
name = "vnet-${var.name}-${var.environment}"
|
||||||
|
address_space = var.vnet_address_space
|
||||||
|
location = azurerm_resource_group.default.location
|
||||||
|
resource_group_name = azurerm_resource_group.default.name
|
||||||
|
}
|
||||||
|
|
||||||
|
resource "azurerm_subnet" "mlsubnet" {
|
||||||
|
name = "mlsubnet"
|
||||||
|
resource_group_name = azurerm_resource_group.default.name
|
||||||
|
virtual_network_name = azurerm_virtual_network.default.name
|
||||||
|
address_prefixes = var.subnet_address_space
|
||||||
|
enforce_private_link_endpoint_network_policies = true
|
||||||
|
}
|
||||||
|
|
||||||
|
# Private DNS Zones
|
||||||
|
resource "azurerm_private_dns_zone" "dnsvault" {
|
||||||
|
name = "privatelink.vaultcore.azure.net"
|
||||||
|
resource_group_name = azurerm_resource_group.default.name
|
||||||
|
}
|
||||||
|
|
||||||
|
resource "azurerm_private_dns_zone_virtual_network_link" "vnetlinkvault" {
|
||||||
|
name = "dnsvaultlink"
|
||||||
|
resource_group_name = azurerm_resource_group.default.name
|
||||||
|
private_dns_zone_name = azurerm_private_dns_zone.dnsvault.name
|
||||||
|
virtual_network_id = azurerm_virtual_network.default.id
|
||||||
|
}
|
||||||
|
|
||||||
|
resource "azurerm_private_dns_zone" "dnsstorageblob" {
|
||||||
|
name = "privatelink.blob.core.windows.net"
|
||||||
|
resource_group_name = azurerm_resource_group.default.name
|
||||||
|
}
|
||||||
|
|
||||||
|
resource "azurerm_private_dns_zone_virtual_network_link" "vnetlinkblob" {
|
||||||
|
name = "dnsblobstoragelink"
|
||||||
|
resource_group_name = azurerm_resource_group.default.name
|
||||||
|
private_dns_zone_name = azurerm_private_dns_zone.dnsstorageblob.name
|
||||||
|
virtual_network_id = azurerm_virtual_network.default.id
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
resource "azurerm_private_dns_zone" "dnsstoragefile" {
|
||||||
|
name = "privatelink.file.core.windows.net"
|
||||||
|
resource_group_name = azurerm_resource_group.default.name
|
||||||
|
}
|
||||||
|
|
||||||
|
resource "azurerm_private_dns_zone_virtual_network_link" "vnetlinkfile" {
|
||||||
|
name = "dnsfilestoragelink"
|
||||||
|
resource_group_name = azurerm_resource_group.default.name
|
||||||
|
private_dns_zone_name = azurerm_private_dns_zone.dnsstoragefile.name
|
||||||
|
virtual_network_id = azurerm_virtual_network.default.id
|
||||||
|
}
|
||||||
|
|
||||||
|
resource "azurerm_private_dns_zone" "dnscontainerregistry" {
|
||||||
|
name = "privatelink.azurecr.io"
|
||||||
|
resource_group_name = azurerm_resource_group.default.name
|
||||||
|
}
|
||||||
|
|
||||||
|
resource "azurerm_private_dns_zone_virtual_network_link" "vnetlinkcr" {
|
||||||
|
name = "dnscrlink"
|
||||||
|
resource_group_name = azurerm_resource_group.default.name
|
||||||
|
private_dns_zone_name = azurerm_private_dns_zone.dnscontainerregistry.name
|
||||||
|
virtual_network_id = azurerm_virtual_network.default.id
|
||||||
|
}
|
||||||
|
|
||||||
|
resource "azurerm_private_dns_zone" "dnsazureml" {
|
||||||
|
name = "privatelink.api.azureml.ms"
|
||||||
|
resource_group_name = azurerm_resource_group.default.name
|
||||||
|
}
|
||||||
|
|
||||||
|
resource "azurerm_private_dns_zone_virtual_network_link" "vnetlinkml" {
|
||||||
|
name = "dnsazuremllink"
|
||||||
|
resource_group_name = azurerm_resource_group.default.name
|
||||||
|
private_dns_zone_name = azurerm_private_dns_zone.dnsazureml.name
|
||||||
|
virtual_network_id = azurerm_virtual_network.default.id
|
||||||
|
}
|
||||||
|
|
||||||
|
resource "azurerm_private_dns_zone" "dnsnotebooks" {
|
||||||
|
name = "privatelink.azureml.notebooks.net"
|
||||||
|
resource_group_name = azurerm_resource_group.default.name
|
||||||
|
}
|
||||||
|
|
||||||
|
resource "azurerm_private_dns_zone_virtual_network_link" "vnetlinknbs" {
|
||||||
|
name = "dnsnotebookslink"
|
||||||
|
resource_group_name = azurerm_resource_group.default.name
|
||||||
|
private_dns_zone_name = azurerm_private_dns_zone.dnsnotebooks.name
|
||||||
|
virtual_network_id = azurerm_virtual_network.default.id
|
||||||
|
}
|
||||||
44
quickstart/201-machine-learning-private/readme.md
Normal file
44
quickstart/201-machine-learning-private/readme.md
Normal file
@ -0,0 +1,44 @@
|
|||||||
|
# Azure Machine Learning workspace using Azure Private Link
|
||||||
|
|
||||||
|
This deployment configuration specifies an [Azure Machine Learning workspace](https://docs.microsoft.com/en-us/azure/machine-learning/concept-workspace),
|
||||||
|
and its associated resources including Azure Key Vault, Azure Storage, Azure Application Insights and Azure Container Registry.
|
||||||
|
|
||||||
|
In addition to these core services, this configuration specifies any networking components that are required to set up Azure Machine Learning
|
||||||
|
for private network connectivity using [Azure Private Link](https://docs.microsoft.com/en-us/azure/private-link/).
|
||||||
|
|
||||||
|
This configuration describes the minimal set of resources you require to get started with Azure Machine Learning in a network-isolated set-up.
|
||||||
|
|
||||||
|
To learn more about security configurations in Azure Machine Learning, see [Enterprise security and governance for Azure Machine Learning](https://docs.microsoft.com/en-us/azure/machine-learning/concept-enterprise-security).
|
||||||
|
|
||||||
|
## Resources
|
||||||
|
|
||||||
|
| Terraform Resource Type | Description |
|
||||||
|
| - | - |
|
||||||
|
| `azurerm_resource_group` | The resource group all resources get deployed into |
|
||||||
|
| `azurerm_application_insights` | An Azure Application Insights instance associated to the Azure Machine Learning workspace |
|
||||||
|
| `azurerm_key_vault` | An Azure Key Vault instance associated to the Azure Machine Learning workspace |
|
||||||
|
| `azurerm_storage_account` | An Azure Storage instance associated to the Azure Machine Learning workspace |
|
||||||
|
| `azurerm_container_registry` | An Azure Container Registry instance associated to the Azure Machine Learning workspace |
|
||||||
|
| `azurerm_machine_learning_workspace` | An Azure Machine Learning workspace instance |
|
||||||
|
| `azurerm_virtual_network` | An Azure Machine Learning workspace instance |
|
||||||
|
| `azurerm_subnet` | An Azure Machine Learning workspace instance |
|
||||||
|
| `azurerm_private_dns_zone` | Private DNS Zones for FQDNs required for Azure Machine Learning and associated resources |
|
||||||
|
| `azurerm_private_dns_zone_virtual_network_link` | Virtual network links of the Private DNS Zones to the virtual network resource |
|
||||||
|
| `azurerm_private_endpoint` | Private Endpoints for the Azure Machine Learning workspace and associated resources |
|
||||||
|
|
||||||
|
## Variables
|
||||||
|
|
||||||
|
| Name | Description |
|
||||||
|
|-|-|
|
||||||
|
| name | Name of the deployment |
|
||||||
|
| environment | The deployment environment name (used for pre- and postfixing resource names) |
|
||||||
|
| location | The Azure region used for deployments |
|
||||||
|
|
||||||
|
|
||||||
|
## Usage
|
||||||
|
|
||||||
|
```bash
|
||||||
|
terraform plan -var name=azureml567 -out demo.tfplan
|
||||||
|
|
||||||
|
terraform apply "demo.tfplan"
|
||||||
|
```
|
||||||
28
quickstart/201-machine-learning-private/variables.tf
Normal file
28
quickstart/201-machine-learning-private/variables.tf
Normal file
@ -0,0 +1,28 @@
|
|||||||
|
variable "name" {
|
||||||
|
type = string
|
||||||
|
description = "Name of the deployment"
|
||||||
|
}
|
||||||
|
|
||||||
|
variable "environment" {
|
||||||
|
type = string
|
||||||
|
description = "Name of the environment"
|
||||||
|
default = "dev"
|
||||||
|
}
|
||||||
|
|
||||||
|
variable "location" {
|
||||||
|
type = string
|
||||||
|
description = "Location of the resources"
|
||||||
|
default = "East US"
|
||||||
|
}
|
||||||
|
|
||||||
|
variable "vnet_address_space" {
|
||||||
|
type = list(string)
|
||||||
|
description = "Address space of the subnet"
|
||||||
|
default = ["10.0.0.0/16"]
|
||||||
|
}
|
||||||
|
|
||||||
|
variable "subnet_address_space" {
|
||||||
|
type = list(string)
|
||||||
|
description = "Address space of the subnet"
|
||||||
|
default = ["10.0.0.0/24"]
|
||||||
|
}
|
||||||
157
quickstart/201-machine-learning-private/workspace.tf
Normal file
157
quickstart/201-machine-learning-private/workspace.tf
Normal file
@ -0,0 +1,157 @@
|
|||||||
|
# Dependent resources for Azure Machine Learning
|
||||||
|
resource "azurerm_application_insights" "default" {
|
||||||
|
name = "appi-${var.name}-${var.environment}"
|
||||||
|
location = azurerm_resource_group.default.location
|
||||||
|
resource_group_name = azurerm_resource_group.default.name
|
||||||
|
application_type = "web"
|
||||||
|
}
|
||||||
|
|
||||||
|
resource "azurerm_key_vault" "default" {
|
||||||
|
name = "kv-${var.name}-${var.environment}"
|
||||||
|
location = azurerm_resource_group.default.location
|
||||||
|
resource_group_name = azurerm_resource_group.default.name
|
||||||
|
tenant_id = data.azurerm_client_config.current.tenant_id
|
||||||
|
sku_name = "premium"
|
||||||
|
purge_protection_enabled = false
|
||||||
|
|
||||||
|
network_acls {
|
||||||
|
default_action = "Deny"
|
||||||
|
bypass = "AzureServices"
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
resource "azurerm_storage_account" "default" {
|
||||||
|
name = "st${var.name}${var.environment}"
|
||||||
|
location = azurerm_resource_group.default.location
|
||||||
|
resource_group_name = azurerm_resource_group.default.name
|
||||||
|
account_tier = "Standard"
|
||||||
|
account_replication_type = "GRS"
|
||||||
|
|
||||||
|
network_rules {
|
||||||
|
default_action = "Deny"
|
||||||
|
bypass = ["AzureServices"]
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
resource "azurerm_container_registry" "default" {
|
||||||
|
name = "cr${var.name}${var.environment}"
|
||||||
|
location = azurerm_resource_group.default.location
|
||||||
|
resource_group_name = azurerm_resource_group.default.name
|
||||||
|
sku = "Premium"
|
||||||
|
admin_enabled = true
|
||||||
|
}
|
||||||
|
|
||||||
|
# Machine Learning workspace
|
||||||
|
resource "azurerm_machine_learning_workspace" "default" {
|
||||||
|
name = "mlw-${var.name}-${var.environment}"
|
||||||
|
location = azurerm_resource_group.default.location
|
||||||
|
resource_group_name = azurerm_resource_group.default.name
|
||||||
|
application_insights_id = azurerm_application_insights.default.id
|
||||||
|
key_vault_id = azurerm_key_vault.default.id
|
||||||
|
storage_account_id = azurerm_storage_account.default.id
|
||||||
|
container_registry_id = azurerm_container_registry.default.id
|
||||||
|
|
||||||
|
identity {
|
||||||
|
type = "SystemAssigned"
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
# Private endpoints
|
||||||
|
resource "azurerm_private_endpoint" "kv_ple" {
|
||||||
|
name = "ple-${var.name}-${var.environment}-kv"
|
||||||
|
location = azurerm_resource_group.default.location
|
||||||
|
resource_group_name = azurerm_resource_group.default.name
|
||||||
|
subnet_id = azurerm_subnet.mlsubnet.id
|
||||||
|
|
||||||
|
private_dns_zone_group {
|
||||||
|
name = "private-dns-zone-group"
|
||||||
|
private_dns_zone_ids = [azurerm_private_dns_zone.dnsvault.id]
|
||||||
|
}
|
||||||
|
|
||||||
|
private_service_connection {
|
||||||
|
name = "psc-${var.name}-kv"
|
||||||
|
private_connection_resource_id = azurerm_key_vault.default.id
|
||||||
|
subresource_names = [ "vault" ]
|
||||||
|
is_manual_connection = false
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
resource "azurerm_private_endpoint" "st_ple_blob" {
|
||||||
|
name = "ple-${var.name}-${var.environment}-st-blob"
|
||||||
|
location = azurerm_resource_group.default.location
|
||||||
|
resource_group_name = azurerm_resource_group.default.name
|
||||||
|
subnet_id = azurerm_subnet.mlsubnet.id
|
||||||
|
|
||||||
|
private_dns_zone_group {
|
||||||
|
name = "private-dns-zone-group"
|
||||||
|
private_dns_zone_ids = [azurerm_private_dns_zone.dnsstorageblob.id]
|
||||||
|
}
|
||||||
|
|
||||||
|
private_service_connection {
|
||||||
|
name = "psc-${var.name}-st"
|
||||||
|
private_connection_resource_id = azurerm_storage_account.default.id
|
||||||
|
subresource_names = [ "blob" ]
|
||||||
|
is_manual_connection = false
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
resource "azurerm_private_endpoint" "storage_ple_file" {
|
||||||
|
name = "ple-${var.name}-${var.environment}-st-file"
|
||||||
|
location = azurerm_resource_group.default.location
|
||||||
|
resource_group_name = azurerm_resource_group.default.name
|
||||||
|
subnet_id = azurerm_subnet.mlsubnet.id
|
||||||
|
|
||||||
|
private_dns_zone_group {
|
||||||
|
name = "private-dns-zone-group"
|
||||||
|
private_dns_zone_ids = [azurerm_private_dns_zone.dnsstoragefile.id]
|
||||||
|
}
|
||||||
|
|
||||||
|
private_service_connection {
|
||||||
|
name = "psc-${var.name}-st"
|
||||||
|
private_connection_resource_id = azurerm_storage_account.default.id
|
||||||
|
subresource_names = [ "file" ]
|
||||||
|
is_manual_connection = false
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
resource "azurerm_private_endpoint" "cr_ple" {
|
||||||
|
name = "ple-${var.name}-${var.environment}-cr"
|
||||||
|
location = azurerm_resource_group.default.location
|
||||||
|
resource_group_name = azurerm_resource_group.default.name
|
||||||
|
subnet_id = azurerm_subnet.mlsubnet.id
|
||||||
|
|
||||||
|
private_dns_zone_group {
|
||||||
|
name = "private-dns-zone-group"
|
||||||
|
private_dns_zone_ids = [azurerm_private_dns_zone.dnscontainerregistry.id]
|
||||||
|
}
|
||||||
|
|
||||||
|
private_service_connection {
|
||||||
|
name = "psc-${var.name}-cr"
|
||||||
|
private_connection_resource_id = azurerm_container_registry.default.id
|
||||||
|
subresource_names = [ "registry" ]
|
||||||
|
is_manual_connection = false
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
resource "azurerm_private_endpoint" "mlw_ple" {
|
||||||
|
name = "ple-${var.name}-${var.environment}-mlw"
|
||||||
|
location = azurerm_resource_group.default.location
|
||||||
|
resource_group_name = azurerm_resource_group.default.name
|
||||||
|
subnet_id = azurerm_subnet.mlsubnet.id
|
||||||
|
|
||||||
|
private_dns_zone_group {
|
||||||
|
name = "private-dns-zone-group"
|
||||||
|
private_dns_zone_ids = [
|
||||||
|
azurerm_private_dns_zone.dnsazureml.id,
|
||||||
|
azurerm_private_dns_zone.dnsnotebooks.id
|
||||||
|
]
|
||||||
|
}
|
||||||
|
|
||||||
|
private_service_connection {
|
||||||
|
name = "psc-${var.name}-mlw"
|
||||||
|
private_connection_resource_id = azurerm_machine_learning_workspace.default.id
|
||||||
|
subresource_names = [ "amlworkspace" ]
|
||||||
|
is_manual_connection = false
|
||||||
|
}
|
||||||
|
|
||||||
|
}
|
||||||
Loading…
x
Reference in New Issue
Block a user