Tips-Of-Mine/terraform
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Compare commits

merge into: Tips-Of-Mine:master
Branches Tags
Tips-Of-Mine:master
Tips-Of-Mine:UserStory335474
Tips-Of-Mine:UserStory281947b
Tips-Of-Mine:UserStory330782
Tips-Of-Mine:UserStory281947
Tips-Of-Mine:f-101-aks-standard-lb-and-vmss
Tips-Of-Mine:UserStory330721
Tips-Of-Mine:UserStory327082
Tips-Of-Mine:UserStory327081
Tips-Of-Mine:UserStory327080
Tips-Of-Mine:UserStory327079
Tips-Of-Mine:301-machine-learning-hub-spoke-secure
Tips-Of-Mine:301-hub-spoke
Tips-Of-Mine:201-vmss-jumpbox
Tips-Of-Mine:UserStory284326
Tips-Of-Mine:101-vm-with-infrastructure
Tips-Of-Mine:101-devtest-labs
Tips-Of-Mine:101-attestation-provider
Tips-Of-Mine:101-authn-managed-identity
Tips-Of-Mine:UserStory316624
Tips-Of-Mine:202-machine-learning-moderately-secure-existing-VNet
Tips-Of-Mine:UserStory316612
Tips-Of-Mine:cron
Tips-Of-Mine:bump-changed-files
Tips-Of-Mine:release/358
Tips-Of-Mine:users/GitHubPolicyService/46ac6b72-fb6d-4399-a02a-714c519189f1
Tips-Of-Mine:rebrand
Tips-Of-Mine:release/UserStory316624
...
pull from: Tips-Of-Mine:301-hub-spoke
Branches Tags
Tips-Of-Mine:master
Tips-Of-Mine:UserStory335474
Tips-Of-Mine:UserStory281947b
Tips-Of-Mine:UserStory330782
Tips-Of-Mine:UserStory281947
Tips-Of-Mine:f-101-aks-standard-lb-and-vmss
Tips-Of-Mine:UserStory330721
Tips-Of-Mine:UserStory327082
Tips-Of-Mine:UserStory327081
Tips-Of-Mine:UserStory327080
Tips-Of-Mine:UserStory327079
Tips-Of-Mine:301-machine-learning-hub-spoke-secure
Tips-Of-Mine:301-hub-spoke
Tips-Of-Mine:201-vmss-jumpbox
Tips-Of-Mine:UserStory284326
Tips-Of-Mine:101-vm-with-infrastructure
Tips-Of-Mine:101-devtest-labs
Tips-Of-Mine:101-attestation-provider
Tips-Of-Mine:101-authn-managed-identity
Tips-Of-Mine:UserStory316624
Tips-Of-Mine:202-machine-learning-moderately-secure-existing-VNet
Tips-Of-Mine:UserStory316612
Tips-Of-Mine:cron
Tips-Of-Mine:bump-changed-files
Tips-Of-Mine:release/358
Tips-Of-Mine:users/GitHubPolicyService/46ac6b72-fb6d-4399-a02a-714c519189f1
Tips-Of-Mine:rebrand
Tips-Of-Mine:release/UserStory316624

5 Commits
master ... 301-hub-sp

Author SHA1 Message Date
zjhe
c08405c06a fix broken script url 2024-10-05 12:37:06 +08:00
zjhe
ff0b2795ab add random suffix to resource group name 2024-10-05 10:43:31 +08:00
zjhe
dcca3ba6ef fix example 2024-10-05 10:39:55 +08:00
zjhe
86b15f1a9f fix example 2024-10-05 08:54:51 +08:00
zjhe
ddfedda590 fix 301-hub-spoke 2024-10-05 08:50:32 +08:00
7 changed files with 400 additions and 379 deletions
Show Stats Expand all files Collapse all files

184
quickstart/301-hub-spoke/hub-nva.tf
View File

@ -1,199 +1,205 @@
locals { locals {
prefix-hub-nva = "hub-nva" prefix-hub-nva = "hub-nva"
hub-nva-location = "eastus" hub-nva-location = "eastus"
hub-nva-resource-group = "hub-nva-rg" hub-nva-resource-group = "hub-nva-rg"
}
resource "random_string" "suffix" {
length = 5
special = false
upper = false
} }
resource "azurerm_resource_group" "hub-nva-rg" { resource "azurerm_resource_group" "hub-nva-rg" {
name = "${local.prefix-hub-nva}-rg" name = "${local.prefix-hub-nva}-rg-${random_string.suffix.result}"
location = local.hub-nva-location location = local.hub-nva-location
tags = { tags = {
environment = local.prefix-hub-nva environment = local.prefix-hub-nva
} }
} }
resource "azurerm_network_interface" "hub-nva-nic" { resource "azurerm_network_interface" "hub-nva-nic" {
name = "${local.prefix-hub-nva}-nic" name = "${local.prefix-hub-nva}-nic"
location = azurerm_resource_group.hub-nva-rg.location location = azurerm_resource_group.hub-nva-rg.location
resource_group_name = azurerm_resource_group.hub-nva-rg.name resource_group_name = azurerm_resource_group.hub-nva-rg.name
enable_ip_forwarding = true enable_ip_forwarding = true
ip_configuration { ip_configuration {
name = local.prefix-hub-nva name = local.prefix-hub-nva
subnet_id = azurerm_subnet.hub-dmz.id subnet_id = azurerm_subnet.hub-dmz.id
private_ip_address_allocation = "Static" private_ip_address_allocation = "Static"
private_ip_address = "10.0.0.36" private_ip_address = "10.0.0.36"
} }
tags = { tags = {
environment = local.prefix-hub-nva environment = local.prefix-hub-nva
} }
} }
resource "azurerm_virtual_machine" "hub-nva-vm" { resource "azurerm_virtual_machine" "hub-nva-vm" {
name = "${local.prefix-hub-nva}-vm" name = "${local.prefix-hub-nva}-vm"
location = azurerm_resource_group.hub-nva-rg.location location = azurerm_resource_group.hub-nva-rg.location
resource_group_name = azurerm_resource_group.hub-nva-rg.name resource_group_name = azurerm_resource_group.hub-nva-rg.name
network_interface_ids = [azurerm_network_interface.hub-nva-nic.id] network_interface_ids = [azurerm_network_interface.hub-nva-nic.id]
vm_size = var.vmsize vm_size = var.vmsize
storage_image_reference { storage_image_reference {
publisher = "Canonical" publisher = "Canonical"
offer = "UbuntuServer" offer = "UbuntuServer"
sku = "16.04-LTS" sku = "16.04-LTS"
version = "latest" version = "latest"
} }
storage_os_disk { storage_os_disk {
name = "myosdisk1" name = "myosdisk1"
caching = "ReadWrite" caching = "ReadWrite"
create_option = "FromImage" create_option = "FromImage"
managed_disk_type = "Standard_LRS" managed_disk_type = "Standard_LRS"
} }
os_profile { os_profile {
computer_name = "${local.prefix-hub-nva}-vm" computer_name = "${local.prefix-hub-nva}-vm"
admin_username = var.username admin_username = var.username
admin_password = var.password admin_password = local.password
} }
os_profile_linux_config { os_profile_linux_config {
disable_password_authentication = false disable_password_authentication = false
} }
tags = { tags = {
environment = local.prefix-hub-nva environment = local.prefix-hub-nva
} }
} }
resource "azurerm_virtual_machine_extension" "enable-routes" { resource "azurerm_virtual_machine_extension" "enable-routes" {
name = "enable-iptables-routes" name = "enable-iptables-routes"
virtual_machine_id = azurerm_virtual_machine.hub-nva-vm.id virtual_machine_id = azurerm_virtual_machine.hub-nva-vm.id
publisher = "Microsoft.Azure.Extensions" publisher = "Microsoft.Azure.Extensions"
type = "CustomScript" type = "CustomScript"
type_handler_version = "2.0" type_handler_version = "2.0"
settings = <<SETTINGS settings = <<SETTINGS
{ {
"fileUris": [ "fileUris": [
"https://raw.githubusercontent.com/mspnp/reference-architectures/master/scripts/linux/enable-ip-forwarding.sh" "https://raw.githubusercontent.com/lonegunmanb/reference-architectures/refs/heads/master/scripts/linux/enable-ip-forwarding.sh"
], ],
"commandToExecute": "bash enable-ip-forwarding.sh" "commandToExecute": "bash enable-ip-forwarding.sh"
} }
SETTINGS SETTINGS
tags = { tags = {
environment = local.prefix-hub-nva environment = local.prefix-hub-nva
} }
} }
resource "azurerm_route_table" "hub-gateway-rt" { resource "azurerm_route_table" "hub-gateway-rt" {
name = "hub-gateway-rt" name = "hub-gateway-rt"
location = azurerm_resource_group.hub-nva-rg.location location = azurerm_resource_group.hub-nva-rg.location
resource_group_name = azurerm_resource_group.hub-nva-rg.name resource_group_name = azurerm_resource_group.hub-nva-rg.name
disable_bgp_route_propagation = false disable_bgp_route_propagation = false
route { route {
name = "toHub" name = "toHub"
address_prefix = "10.0.0.0/16" address_prefix = "10.0.0.0/16"
next_hop_type = "VnetLocal" next_hop_type = "VnetLocal"
} }
route { route {
name = "toSpoke1" name = "toSpoke1"
address_prefix = "10.1.0.0/16" address_prefix = "10.1.0.0/16"
next_hop_type = "VirtualAppliance" next_hop_type = "VirtualAppliance"
next_hop_in_ip_address = "10.0.0.36" next_hop_in_ip_address = "10.0.0.36"
} }
route { route {
name = "toSpoke2" name = "toSpoke2"
address_prefix = "10.2.0.0/16" address_prefix = "10.2.0.0/16"
next_hop_type = "VirtualAppliance" next_hop_type = "VirtualAppliance"
next_hop_in_ip_address = "10.0.0.36" next_hop_in_ip_address = "10.0.0.36"
} }
tags = { tags = {
environment = local.prefix-hub-nva environment = local.prefix-hub-nva
} }
} }
resource "azurerm_subnet_route_table_association" "hub-gateway-rt-hub-vnet-gateway-subnet" { resource "azurerm_subnet_route_table_association" "hub-gateway-rt-hub-vnet-gateway-subnet" {
subnet_id = azurerm_subnet.hub-gateway-subnet.id subnet_id = azurerm_subnet.hub-gateway-subnet.id
route_table_id = azurerm_route_table.hub-gateway-rt.id route_table_id = azurerm_route_table.hub-gateway-rt.id
depends_on = [azurerm_subnet.hub-gateway-subnet] depends_on = [azurerm_subnet.hub-gateway-subnet]
} }
resource "azurerm_route_table" "spoke1-rt" { resource "azurerm_route_table" "spoke1-rt" {
name = "spoke1-rt" name = "spoke1-rt"
location = azurerm_resource_group.hub-nva-rg.location location = azurerm_resource_group.hub-nva-rg.location
resource_group_name = azurerm_resource_group.hub-nva-rg.name resource_group_name = azurerm_resource_group.hub-nva-rg.name
disable_bgp_route_propagation = false disable_bgp_route_propagation = false
route { route {
name = "toSpoke2" name = "toSpoke2"
address_prefix = "10.2.0.0/16" address_prefix = "10.2.0.0/16"
next_hop_type = "VirtualAppliance" next_hop_type = "VirtualAppliance"
next_hop_in_ip_address = "10.0.0.36" next_hop_in_ip_address = "10.0.0.36"
} }
route { route {
name = "default" name = "default"
address_prefix = "0.0.0.0/0" address_prefix = "0.0.0.0/0"
next_hop_type = "vnetlocal" next_hop_type = "VnetLocal"
} }
tags = { tags = {
environment = local.prefix-hub-nva environment = local.prefix-hub-nva
} }
} }
resource "azurerm_subnet_route_table_association" "spoke1-rt-spoke1-vnet-mgmt" { resource "azurerm_subnet_route_table_association" "spoke1-rt-spoke1-vnet-mgmt" {
subnet_id = azurerm_subnet.spoke1-mgmt.id subnet_id = azurerm_subnet.spoke1-mgmt.id
route_table_id = azurerm_route_table.spoke1-rt.id route_table_id = azurerm_route_table.spoke1-rt.id
depends_on = [azurerm_subnet.spoke1-mgmt] depends_on = [azurerm_subnet.spoke1-mgmt]
} }
resource "azurerm_subnet_route_table_association" "spoke1-rt-spoke1-vnet-workload" { resource "azurerm_subnet_route_table_association" "spoke1-rt-spoke1-vnet-workload" {
subnet_id = azurerm_subnet.spoke1-workload.id subnet_id = azurerm_subnet.spoke1-workload.id
route_table_id = azurerm_route_table.spoke1-rt.id route_table_id = azurerm_route_table.spoke1-rt.id
depends_on = [azurerm_subnet.spoke1-workload] depends_on = [azurerm_subnet.spoke1-workload]
} }
resource "azurerm_route_table" "spoke2-rt" { resource "azurerm_route_table" "spoke2-rt" {
name = "spoke2-rt" name = "spoke2-rt"
location = azurerm_resource_group.hub-nva-rg.location location = azurerm_resource_group.hub-nva-rg.location
resource_group_name = azurerm_resource_group.hub-nva-rg.name resource_group_name = azurerm_resource_group.hub-nva-rg.name
disable_bgp_route_propagation = false disable_bgp_route_propagation = false
route { route {
name = "toSpoke1" name = "toSpoke1"
address_prefix = "10.1.0.0/16" address_prefix = "10.1.0.0/16"
next_hop_in_ip_address = "10.0.0.36" next_hop_in_ip_address = "10.0.0.36"
next_hop_type = "VirtualAppliance" next_hop_type = "VirtualAppliance"
} }
route { route {
name = "default" name = "default"
address_prefix = "0.0.0.0/0" address_prefix = "0.0.0.0/0"
next_hop_type = "vnetlocal" next_hop_type = "VnetLocal"
} }
tags = { tags = {
environment = local.prefix-hub-nva environment = local.prefix-hub-nva
} }
} }
resource "azurerm_subnet_route_table_association" "spoke2-rt-spoke2-vnet-mgmt" { resource "azurerm_subnet_route_table_association" "spoke2-rt-spoke2-vnet-mgmt" {
subnet_id = azurerm_subnet.spoke2-mgmt.id subnet_id = azurerm_subnet.spoke2-mgmt.id
route_table_id = azurerm_route_table.spoke2-rt.id route_table_id = azurerm_route_table.spoke2-rt.id
depends_on = [azurerm_subnet.spoke2-mgmt] depends_on = [azurerm_subnet.spoke2-mgmt]
} }
resource "azurerm_subnet_route_table_association" "spoke2-rt-spoke2-vnet-workload" { resource "azurerm_subnet_route_table_association" "spoke2-rt-spoke2-vnet-workload" {
subnet_id = azurerm_subnet.spoke2-workload.id subnet_id = azurerm_subnet.spoke2-workload.id
route_table_id = azurerm_route_table.spoke2-rt.id route_table_id = azurerm_route_table.spoke2-rt.id
depends_on = [azurerm_subnet.spoke2-workload] depends_on = [azurerm_subnet.spoke2-workload]
} }

158
quickstart/301-hub-spoke/hub-vnet.tf
View File

@ -1,153 +1,153 @@
locals { locals {
prefix-hub = "hub" prefix-hub = "hub"
hub-location = "eastus" hub-location = "eastus"
hub-resource-group = "hub-vnet-rg" hub-resource-group = "hub-vnet-rg-${random_string.suffix.result}"
shared-key = "4-v3ry-53cr37-1p53c-5h4r3d-k3y" shared-key = "4-v3ry-53cr37-1p53c-5h4r3d-k3y"
} }
resource "azurerm_resource_group" "hub-vnet-rg" { resource "azurerm_resource_group" "hub-vnet-rg" {
name = local.hub-resource-group name = local.hub-resource-group
location = local.hub-location location = local.hub-location
} }
resource "azurerm_virtual_network" "hub-vnet" { resource "azurerm_virtual_network" "hub-vnet" {
name = "${local.prefix-hub}-vnet" name = "${local.prefix-hub}-vnet"
location = azurerm_resource_group.hub-vnet-rg.location location = azurerm_resource_group.hub-vnet-rg.location
resource_group_name = azurerm_resource_group.hub-vnet-rg.name resource_group_name = azurerm_resource_group.hub-vnet-rg.name
address_space = ["10.0.0.0/16"] address_space = ["10.0.0.0/16"]
tags = { tags = {
environment = "hub-spoke" environment = "hub-spoke"
} }
} }
resource "azurerm_subnet" "hub-gateway-subnet" { resource "azurerm_subnet" "hub-gateway-subnet" {
name = "GatewaySubnet" name = "GatewaySubnet"
resource_group_name = azurerm_resource_group.hub-vnet-rg.name resource_group_name = azurerm_resource_group.hub-vnet-rg.name
virtual_network_name = azurerm_virtual_network.hub-vnet.name virtual_network_name = azurerm_virtual_network.hub-vnet.name
address_prefixes = ["10.0.255.224/27"] address_prefixes = ["10.0.255.224/27"]
} }
resource "azurerm_subnet" "hub-mgmt" { resource "azurerm_subnet" "hub-mgmt" {
name = "mgmt" name = "mgmt"
resource_group_name = azurerm_resource_group.hub-vnet-rg.name resource_group_name = azurerm_resource_group.hub-vnet-rg.name
virtual_network_name = azurerm_virtual_network.hub-vnet.name virtual_network_name = azurerm_virtual_network.hub-vnet.name
address_prefixes = ["10.0.0.64/27"] address_prefixes = ["10.0.0.64/27"]
} }
resource "azurerm_subnet" "hub-dmz" { resource "azurerm_subnet" "hub-dmz" {
name = "dmz" name = "dmz"
resource_group_name = azurerm_resource_group.hub-vnet-rg.name resource_group_name = azurerm_resource_group.hub-vnet-rg.name
virtual_network_name = azurerm_virtual_network.hub-vnet.name virtual_network_name = azurerm_virtual_network.hub-vnet.name
address_prefixes = ["10.0.0.32/27"] address_prefixes = ["10.0.0.32/27"]
} }
resource "azurerm_network_interface" "hub-nic" { resource "azurerm_network_interface" "hub-nic" {
name = "${local.prefix-hub}-nic" name = "${local.prefix-hub}-nic"
location = azurerm_resource_group.hub-vnet-rg.location location = azurerm_resource_group.hub-vnet-rg.location
resource_group_name = azurerm_resource_group.hub-vnet-rg.name resource_group_name = azurerm_resource_group.hub-vnet-rg.name
enable_ip_forwarding = true enable_ip_forwarding = true
ip_configuration { ip_configuration {
name = local.prefix-hub name = local.prefix-hub
subnet_id = azurerm_subnet.hub-mgmt.id subnet_id = azurerm_subnet.hub-mgmt.id
private_ip_address_allocation = "Dynamic" private_ip_address_allocation = "Dynamic"
} }
tags = { tags = {
environment = local.prefix-hub environment = local.prefix-hub
} }
} }
#Virtual Machine #Virtual Machine
resource "azurerm_virtual_machine" "hub-vm" { resource "azurerm_virtual_machine" "hub-vm" {
name = "${local.prefix-hub}-vm" name = "${local.prefix-hub}-vm"
location = azurerm_resource_group.hub-vnet-rg.location location = azurerm_resource_group.hub-vnet-rg.location
resource_group_name = azurerm_resource_group.hub-vnet-rg.name resource_group_name = azurerm_resource_group.hub-vnet-rg.name
network_interface_ids = [azurerm_network_interface.hub-nic.id] network_interface_ids = [azurerm_network_interface.hub-nic.id]
vm_size = var.vmsize vm_size = var.vmsize
storage_image_reference { storage_image_reference {
publisher = "Canonical" publisher = "Canonical"
offer = "UbuntuServer" offer = "UbuntuServer"
sku = "16.04-LTS" sku = "16.04-LTS"
version = "latest" version = "latest"
} }
storage_os_disk { storage_os_disk {
name = "myosdisk1" name = "myosdisk1"
caching = "ReadWrite" caching = "ReadWrite"
create_option = "FromImage" create_option = "FromImage"
managed_disk_type = "Standard_LRS" managed_disk_type = "Standard_LRS"
} }
os_profile { os_profile {
computer_name = "${local.prefix-hub}-vm" computer_name = "${local.prefix-hub}-vm"
admin_username = var.username admin_username = var.username
admin_password = var.password admin_password = local.password
} }
os_profile_linux_config { os_profile_linux_config {
disable_password_authentication = false disable_password_authentication = false
} }
tags = { tags = {
environment = local.prefix-hub environment = local.prefix-hub
} }
} }
# Virtual Network Gateway # Virtual Network Gateway
resource "azurerm_public_ip" "hub-vpn-gateway1-pip" { resource "azurerm_public_ip" "hub-vpn-gateway1-pip" {
name = "hub-vpn-gateway1-pip" name = "hub-vpn-gateway1-pip"
location = azurerm_resource_group.hub-vnet-rg.location location = azurerm_resource_group.hub-vnet-rg.location
resource_group_name = azurerm_resource_group.hub-vnet-rg.name resource_group_name = azurerm_resource_group.hub-vnet-rg.name
allocation_method = "Dynamic" allocation_method = "Dynamic"
} }
resource "azurerm_virtual_network_gateway" "hub-vnet-gateway" { resource "azurerm_virtual_network_gateway" "hub-vnet-gateway" {
name = "hub-vpn-gateway1" name = "hub-vpn-gateway1"
location = azurerm_resource_group.hub-vnet-rg.location location = azurerm_resource_group.hub-vnet-rg.location
resource_group_name = azurerm_resource_group.hub-vnet-rg.name resource_group_name = azurerm_resource_group.hub-vnet-rg.name
type = "Vpn" type = "Vpn"
vpn_type = "RouteBased" vpn_type = "RouteBased"
active_active = false active_active = false
enable_bgp = false enable_bgp = false
sku = "VpnGw1" sku = "VpnGw1"
ip_configuration { ip_configuration {
name = "vnetGatewayConfig" name = "vnetGatewayConfig"
public_ip_address_id = azurerm_public_ip.hub-vpn-gateway1-pip.id public_ip_address_id = azurerm_public_ip.hub-vpn-gateway1-pip.id
private_ip_address_allocation = "Dynamic" private_ip_address_allocation = "Dynamic"
subnet_id = azurerm_subnet.hub-gateway-subnet.id subnet_id = azurerm_subnet.hub-gateway-subnet.id
} }
depends_on = [azurerm_public_ip.hub-vpn-gateway1-pip] depends_on = [azurerm_public_ip.hub-vpn-gateway1-pip]
} }
resource "azurerm_virtual_network_gateway_connection" "hub-onprem-conn" { resource "azurerm_virtual_network_gateway_connection" "hub-onprem-conn" {
name = "hub-onprem-conn" name = "hub-onprem-conn"
location = azurerm_resource_group.hub-vnet-rg.location location = azurerm_resource_group.hub-vnet-rg.location
resource_group_name = azurerm_resource_group.hub-vnet-rg.name resource_group_name = azurerm_resource_group.hub-vnet-rg.name
type = "Vnet2Vnet" type = "Vnet2Vnet"
routing_weight = 1 routing_weight = 1
virtual_network_gateway_id = azurerm_virtual_network_gateway.hub-vnet-gateway.id virtual_network_gateway_id = azurerm_virtual_network_gateway.hub-vnet-gateway.id
peer_virtual_network_gateway_id = azurerm_virtual_network_gateway.onprem-vpn-gateway.id peer_virtual_network_gateway_id = azurerm_virtual_network_gateway.onprem-vpn-gateway.id
shared_key = local.shared-key shared_key = local.shared-key
} }
resource "azurerm_virtual_network_gateway_connection" "onprem-hub-conn" { resource "azurerm_virtual_network_gateway_connection" "onprem-hub-conn" {
name = "onprem-hub-conn" name = "onprem-hub-conn"
location = azurerm_resource_group.onprem-vnet-rg.location location = azurerm_resource_group.onprem-vnet-rg.location
resource_group_name = azurerm_resource_group.onprem-vnet-rg.name resource_group_name = azurerm_resource_group.onprem-vnet-rg.name
type = "Vnet2Vnet" type = "Vnet2Vnet"
routing_weight = 1 routing_weight = 1
virtual_network_gateway_id = azurerm_virtual_network_gateway.onprem-vpn-gateway.id virtual_network_gateway_id = azurerm_virtual_network_gateway.onprem-vpn-gateway.id
peer_virtual_network_gateway_id = azurerm_virtual_network_gateway.hub-vnet-gateway.id peer_virtual_network_gateway_id = azurerm_virtual_network_gateway.hub-vnet-gateway.id
shared_key = local.shared-key shared_key = local.shared-key
} }

17
quickstart/301-hub-spoke/main.tf
View File

@ -5,11 +5,24 @@ terraform {
required_providers { required_providers {
azurerm = { azurerm = {
source = "hashicorp/azurerm" source = "hashicorp/azurerm"
version = "~>2.0" version = "~> 3.0"
} }
} }
} }
provider "azurerm" { provider "azurerm" {
features {} features {
resource_group {
prevent_deletion_if_contains_resources = false
}
}
} }
resource "random_password" "password" {
count = var.password == null ? 1 : 0
length = 20
}
locals {
password = try(random_password.password[0].result, var.password)
}

164
quickstart/301-hub-spoke/on-prem.tf
View File

@ -1,154 +1,154 @@
locals { locals {
onprem-location = "eastus" onprem-location = "eastus"
onprem-resource-group = "onprem-vnet-rg" onprem-resource-group = "onprem-vnet-rg-${random_string.suffix.result}"
prefix-onprem = "onprem" prefix-onprem = "onprem"
} }
resource "azurerm_resource_group" "onprem-vnet-rg" { resource "azurerm_resource_group" "onprem-vnet-rg" {
name = local.onprem-resource-group name = local.onprem-resource-group
location = local.onprem-location location = local.onprem-location
} }
resource "azurerm_virtual_network" "onprem-vnet" { resource "azurerm_virtual_network" "onprem-vnet" {
name = "onprem-vnet" name = "onprem-vnet"
location = azurerm_resource_group.onprem-vnet-rg.location location = azurerm_resource_group.onprem-vnet-rg.location
resource_group_name = azurerm_resource_group.onprem-vnet-rg.name resource_group_name = azurerm_resource_group.onprem-vnet-rg.name
address_space = ["192.168.0.0/16"] address_space = ["192.168.0.0/16"]
tags = { tags = {
environment = local.prefix-onprem environment = local.prefix-onprem
} }
} }
resource "azurerm_subnet" "onprem-gateway-subnet" { resource "azurerm_subnet" "onprem-gateway-subnet" {
name = "GatewaySubnet" name = "GatewaySubnet"
resource_group_name = azurerm_resource_group.onprem-vnet-rg.name resource_group_name = azurerm_resource_group.onprem-vnet-rg.name
virtual_network_name = azurerm_virtual_network.onprem-vnet.name virtual_network_name = azurerm_virtual_network.onprem-vnet.name
address_prefixes = ["192.168.255.224/27"] address_prefixes = ["192.168.255.224/27"]
} }
resource "azurerm_subnet" "onprem-mgmt" { resource "azurerm_subnet" "onprem-mgmt" {
name = "mgmt" name = "mgmt"
resource_group_name = azurerm_resource_group.onprem-vnet-rg.name resource_group_name = azurerm_resource_group.onprem-vnet-rg.name
virtual_network_name = azurerm_virtual_network.onprem-vnet.name virtual_network_name = azurerm_virtual_network.onprem-vnet.name
address_prefixes = ["192.168.1.128/25"] address_prefixes = ["192.168.1.128/25"]
} }
resource "azurerm_public_ip" "onprem-pip" { resource "azurerm_public_ip" "onprem-pip" {
name = "${local.prefix-onprem}-pip" name = "${local.prefix-onprem}-pip"
location = azurerm_resource_group.onprem-vnet-rg.location location = azurerm_resource_group.onprem-vnet-rg.location
resource_group_name = azurerm_resource_group.onprem-vnet-rg.name resource_group_name = azurerm_resource_group.onprem-vnet-rg.name
allocation_method = "Dynamic" allocation_method = "Dynamic"
tags = { tags = {
environment = local.prefix-onprem environment = local.prefix-onprem
} }
} }
resource "azurerm_network_interface" "onprem-nic" { resource "azurerm_network_interface" "onprem-nic" {
name = "${local.prefix-onprem}-nic" name = "${local.prefix-onprem}-nic"
location = azurerm_resource_group.onprem-vnet-rg.location location = azurerm_resource_group.onprem-vnet-rg.location
resource_group_name = azurerm_resource_group.onprem-vnet-rg.name resource_group_name = azurerm_resource_group.onprem-vnet-rg.name
enable_ip_forwarding = true enable_ip_forwarding = true
ip_configuration { ip_configuration {
name = local.prefix-onprem name = local.prefix-onprem
subnet_id = azurerm_subnet.onprem-mgmt.id subnet_id = azurerm_subnet.onprem-mgmt.id
private_ip_address_allocation = "Dynamic" private_ip_address_allocation = "Dynamic"
public_ip_address_id = azurerm_public_ip.onprem-pip.id public_ip_address_id = azurerm_public_ip.onprem-pip.id
} }
} }
# Create Network Security Group and rule # Create Network Security Group and rule
resource "azurerm_network_security_group" "onprem-nsg" { resource "azurerm_network_security_group" "onprem-nsg" {
name = "${local.prefix-onprem}-nsg" name = "${local.prefix-onprem}-nsg"
location = azurerm_resource_group.onprem-vnet-rg.location location = azurerm_resource_group.onprem-vnet-rg.location
resource_group_name = azurerm_resource_group.onprem-vnet-rg.name resource_group_name = azurerm_resource_group.onprem-vnet-rg.name
security_rule { security_rule {
name = "SSH" name = "SSH"
priority = 1001 priority = 1001
direction = "Inbound" direction = "Inbound"
access = "Allow" access = "Allow"
protocol = "Tcp" protocol = "Tcp"
source_port_range = "*" source_port_range = "*"
destination_port_range = "22" destination_port_range = "22"
source_address_prefix = "*" source_address_prefix = "*"
destination_address_prefix = "*" destination_address_prefix = "*"
} }
tags = { tags = {
environment = "onprem" environment = "onprem"
} }
} }
resource "azurerm_subnet_network_security_group_association" "mgmt-nsg-association" { resource "azurerm_subnet_network_security_group_association" "mgmt-nsg-association" {
subnet_id = azurerm_subnet.onprem-mgmt.id subnet_id = azurerm_subnet.onprem-mgmt.id
network_security_group_id = azurerm_network_security_group.onprem-nsg.id network_security_group_id = azurerm_network_security_group.onprem-nsg.id
} }
resource "azurerm_virtual_machine" "onprem-vm" { resource "azurerm_virtual_machine" "onprem-vm" {
name = "${local.prefix-onprem}-vm" name = "${local.prefix-onprem}-vm"
location = azurerm_resource_group.onprem-vnet-rg.location location = azurerm_resource_group.onprem-vnet-rg.location
resource_group_name = azurerm_resource_group.onprem-vnet-rg.name resource_group_name = azurerm_resource_group.onprem-vnet-rg.name
network_interface_ids = [azurerm_network_interface.onprem-nic.id] network_interface_ids = [azurerm_network_interface.onprem-nic.id]
vm_size = var.vmsize vm_size = var.vmsize
storage_image_reference { storage_image_reference {
publisher = "Canonical" publisher = "Canonical"
offer = "UbuntuServer" offer = "UbuntuServer"
sku = "16.04-LTS" sku = "16.04-LTS"
version = "latest" version = "latest"
} }
storage_os_disk { storage_os_disk {
name = "myosdisk1" name = "myosdisk1"
caching = "ReadWrite" caching = "ReadWrite"
create_option = "FromImage" create_option = "FromImage"
managed_disk_type = "Standard_LRS" managed_disk_type = "Standard_LRS"
} }
os_profile { os_profile {
computer_name = "${local.prefix-onprem}-vm" computer_name = "${local.prefix-onprem}-vm"
admin_username = var.username admin_username = var.username
admin_password = var.password admin_password = local.password
} }
os_profile_linux_config { os_profile_linux_config {
disable_password_authentication = false disable_password_authentication = false
} }
tags = { tags = {
environment = local.prefix-onprem environment = local.prefix-onprem
} }
} }
resource "azurerm_public_ip" "onprem-vpn-gateway1-pip" { resource "azurerm_public_ip" "onprem-vpn-gateway1-pip" {
name = "${local.prefix-onprem}-vpn-gateway1-pip" name = "${local.prefix-onprem}-vpn-gateway1-pip"
location = azurerm_resource_group.onprem-vnet-rg.location location = azurerm_resource_group.onprem-vnet-rg.location
resource_group_name = azurerm_resource_group.onprem-vnet-rg.name resource_group_name = azurerm_resource_group.onprem-vnet-rg.name
allocation_method = "Dynamic" allocation_method = "Dynamic"
} }
resource "azurerm_virtual_network_gateway" "onprem-vpn-gateway" { resource "azurerm_virtual_network_gateway" "onprem-vpn-gateway" {
name = "onprem-vpn-gateway1" name = "onprem-vpn-gateway1"
location = azurerm_resource_group.onprem-vnet-rg.location location = azurerm_resource_group.onprem-vnet-rg.location
resource_group_name = azurerm_resource_group.onprem-vnet-rg.name resource_group_name = azurerm_resource_group.onprem-vnet-rg.name
type = "Vpn" type = "Vpn"
vpn_type = "RouteBased" vpn_type = "RouteBased"
active_active = false active_active = false
enable_bgp = false enable_bgp = false
sku = "VpnGw1" sku = "VpnGw1"
ip_configuration { ip_configuration {
name = "vnetGatewayConfig" name = "vnetGatewayConfig"
public_ip_address_id = azurerm_public_ip.onprem-vpn-gateway1-pip.id public_ip_address_id = azurerm_public_ip.onprem-vpn-gateway1-pip.id
private_ip_address_allocation = "Dynamic" private_ip_address_allocation = "Dynamic"
subnet_id = azurerm_subnet.onprem-gateway-subnet.id subnet_id = azurerm_subnet.onprem-gateway-subnet.id
} }
depends_on = [azurerm_public_ip.onprem-vpn-gateway1-pip] depends_on = [azurerm_public_ip.onprem-vpn-gateway1-pip]
} }

118
quickstart/301-hub-spoke/spoke1.tf
View File

@ -1,109 +1,109 @@
locals { locals {
spoke1-location = "eastus" spoke1-location = "eastus"
spoke1-resource-group = "spoke1-vnet-rg" spoke1-resource-group = "spoke1-vnet-rg-${random_string.suffix.result}"
prefix-spoke1 = "spoke1" prefix-spoke1 = "spoke1"
} }
resource "azurerm_resource_group" "spoke1-vnet-rg" { resource "azurerm_resource_group" "spoke1-vnet-rg" {
name = local.spoke1-resource-group name = local.spoke1-resource-group
location = local.spoke1-location location = local.spoke1-location
} }
resource "azurerm_virtual_network" "spoke1-vnet" { resource "azurerm_virtual_network" "spoke1-vnet" {
name = "spoke1-vnet" name = "spoke1-vnet"
location = azurerm_resource_group.spoke1-vnet-rg.location location = azurerm_resource_group.spoke1-vnet-rg.location
resource_group_name = azurerm_resource_group.spoke1-vnet-rg.name resource_group_name = azurerm_resource_group.spoke1-vnet-rg.name
address_space = ["10.1.0.0/16"] address_space = ["10.1.0.0/16"]
tags = { tags = {
environment = local.prefix-spoke1 environment = local.prefix-spoke1
} }
} }
resource "azurerm_subnet" "spoke1-mgmt" { resource "azurerm_subnet" "spoke1-mgmt" {
name = "mgmt" name = "mgmt"
resource_group_name = azurerm_resource_group.spoke1-vnet-rg.name resource_group_name = azurerm_resource_group.spoke1-vnet-rg.name
virtual_network_name = azurerm_virtual_network.spoke1-vnet.name virtual_network_name = azurerm_virtual_network.spoke1-vnet.name
address_prefixes = ["10.1.0.64/27"] address_prefixes = ["10.1.0.64/27"]
} }
resource "azurerm_subnet" "spoke1-workload" { resource "azurerm_subnet" "spoke1-workload" {
name = "workload" name = "workload"
resource_group_name = azurerm_resource_group.spoke1-vnet-rg.name resource_group_name = azurerm_resource_group.spoke1-vnet-rg.name
virtual_network_name = azurerm_virtual_network.spoke1-vnet.name virtual_network_name = azurerm_virtual_network.spoke1-vnet.name
address_prefixes = ["10.1.1.0/24"] address_prefixes = ["10.1.1.0/24"]
} }
resource "azurerm_virtual_network_peering" "spoke1-hub-peer" { resource "azurerm_virtual_network_peering" "spoke1-hub-peer" {
name = "spoke1-hub-peer" name = "spoke1-hub-peer"
resource_group_name = azurerm_resource_group.spoke1-vnet-rg.name resource_group_name = azurerm_resource_group.spoke1-vnet-rg.name
virtual_network_name = azurerm_virtual_network.spoke1-vnet.name virtual_network_name = azurerm_virtual_network.spoke1-vnet.name
remote_virtual_network_id = azurerm_virtual_network.hub-vnet.id remote_virtual_network_id = azurerm_virtual_network.hub-vnet.id
allow_virtual_network_access = true allow_virtual_network_access = true
allow_forwarded_traffic = true allow_forwarded_traffic = true
allow_gateway_transit = false allow_gateway_transit = false
use_remote_gateways = true use_remote_gateways = true
depends_on = [azurerm_virtual_network.spoke1-vnet, azurerm_virtual_network.hub-vnet , azurerm_virtual_network_gateway.hub-vnet-gateway] depends_on = [azurerm_virtual_network.spoke1-vnet, azurerm_virtual_network.hub-vnet, azurerm_virtual_network_gateway.hub-vnet-gateway]
} }
resource "azurerm_network_interface" "spoke1-nic" { resource "azurerm_network_interface" "spoke1-nic" {
name = "${local.prefix-spoke1}-nic" name = "${local.prefix-spoke1}-nic"
location = azurerm_resource_group.spoke1-vnet-rg.location location = azurerm_resource_group.spoke1-vnet-rg.location
resource_group_name = azurerm_resource_group.spoke1-vnet-rg.name resource_group_name = azurerm_resource_group.spoke1-vnet-rg.name
enable_ip_forwarding = true enable_ip_forwarding = true
ip_configuration { ip_configuration {
name = local.prefix-spoke1 name = local.prefix-spoke1
subnet_id = azurerm_subnet.spoke1-mgmt.id subnet_id = azurerm_subnet.spoke1-mgmt.id
private_ip_address_allocation = "Dynamic" private_ip_address_allocation = "Dynamic"
} }
} }
resource "azurerm_virtual_machine" "spoke1-vm" { resource "azurerm_virtual_machine" "spoke1-vm" {
name = "${local.prefix-spoke1}-vm" name = "${local.prefix-spoke1}-vm"
location = azurerm_resource_group.spoke1-vnet-rg.location location = azurerm_resource_group.spoke1-vnet-rg.location
resource_group_name = azurerm_resource_group.spoke1-vnet-rg.name resource_group_name = azurerm_resource_group.spoke1-vnet-rg.name
network_interface_ids = [azurerm_network_interface.spoke1-nic.id] network_interface_ids = [azurerm_network_interface.spoke1-nic.id]
vm_size = var.vmsize vm_size = var.vmsize
storage_image_reference { storage_image_reference {
publisher = "Canonical" publisher = "Canonical"
offer = "UbuntuServer" offer = "UbuntuServer"
sku = "16.04-LTS" sku = "16.04-LTS"
version = "latest" version = "latest"
} }
storage_os_disk { storage_os_disk {
name = "myosdisk1" name = "myosdisk1"
caching = "ReadWrite" caching = "ReadWrite"
create_option = "FromImage" create_option = "FromImage"
managed_disk_type = "Standard_LRS" managed_disk_type = "Standard_LRS"
} }
os_profile { os_profile {
computer_name = "${local.prefix-spoke1}-vm" computer_name = "${local.prefix-spoke1}-vm"
admin_username = var.username admin_username = var.username
admin_password = var.password admin_password = local.password
} }
os_profile_linux_config { os_profile_linux_config {
disable_password_authentication = false disable_password_authentication = false
} }
tags = { tags = {
environment = local.prefix-spoke1 environment = local.prefix-spoke1
} }
} }
resource "azurerm_virtual_network_peering" "hub-spoke1-peer" { resource "azurerm_virtual_network_peering" "hub-spoke1-peer" {
name = "hub-spoke1-peer" name = "hub-spoke1-peer"
resource_group_name = azurerm_resource_group.hub-vnet-rg.name resource_group_name = azurerm_resource_group.hub-vnet-rg.name
virtual_network_name = azurerm_virtual_network.hub-vnet.name virtual_network_name = azurerm_virtual_network.hub-vnet.name
remote_virtual_network_id = azurerm_virtual_network.spoke1-vnet.id remote_virtual_network_id = azurerm_virtual_network.spoke1-vnet.id
allow_virtual_network_access = true allow_virtual_network_access = true
allow_forwarded_traffic = true allow_forwarded_traffic = true
allow_gateway_transit = true allow_gateway_transit = true
use_remote_gateways = false use_remote_gateways = false
depends_on = [azurerm_virtual_network.spoke1-vnet, azurerm_virtual_network.hub-vnet, azurerm_virtual_network_gateway.hub-vnet-gateway] depends_on = [azurerm_virtual_network.spoke1-vnet, azurerm_virtual_network.hub-vnet, azurerm_virtual_network_gateway.hub-vnet-gateway]
} }

122
quickstart/301-hub-spoke/spoke2.tf
View File

@ -1,113 +1,113 @@
locals { locals {
spoke2-location = "eastus" spoke2-location = "eastus"
spoke2-resource-group = "spoke2-vnet-rg" spoke2-resource-group = "spoke2-vnet-rg-${random_string.suffix.result}"
prefix-spoke2 = "spoke2" prefix-spoke2 = "spoke2"
} }
resource "azurerm_resource_group" "spoke2-vnet-rg" { resource "azurerm_resource_group" "spoke2-vnet-rg" {
name = local.spoke2-resource-group name = local.spoke2-resource-group
location = local.spoke2-location location = local.spoke2-location
} }
resource "azurerm_virtual_network" "spoke2-vnet" { resource "azurerm_virtual_network" "spoke2-vnet" {
name = "${local.prefix-spoke2}-vnet" name = "${local.prefix-spoke2}-vnet"
location = azurerm_resource_group.spoke2-vnet-rg.location location = azurerm_resource_group.spoke2-vnet-rg.location
resource_group_name = azurerm_resource_group.spoke2-vnet-rg.name resource_group_name = azurerm_resource_group.spoke2-vnet-rg.name
address_space = ["10.2.0.0/16"] address_space = ["10.2.0.0/16"]
tags = { tags = {
environment = local.prefix-spoke2 environment = local.prefix-spoke2
} }
} }
resource "azurerm_subnet" "spoke2-mgmt" { resource "azurerm_subnet" "spoke2-mgmt" {
name = "mgmt" name = "mgmt"
resource_group_name = azurerm_resource_group.spoke2-vnet-rg.name resource_group_name = azurerm_resource_group.spoke2-vnet-rg.name
virtual_network_name = azurerm_virtual_network.spoke2-vnet.name virtual_network_name = azurerm_virtual_network.spoke2-vnet.name
address_prefixes = ["10.2.0.64/27"] address_prefixes = ["10.2.0.64/27"]
} }
resource "azurerm_subnet" "spoke2-workload" { resource "azurerm_subnet" "spoke2-workload" {
name = "workload" name = "workload"
resource_group_name = azurerm_resource_group.spoke2-vnet-rg.name resource_group_name = azurerm_resource_group.spoke2-vnet-rg.name
virtual_network_name = azurerm_virtual_network.spoke2-vnet.name virtual_network_name = azurerm_virtual_network.spoke2-vnet.name
address_prefixes = ["10.2.1.0/24"] address_prefixes = ["10.2.1.0/24"]
} }
resource "azurerm_virtual_network_peering" "spoke2-hub-peer" { resource "azurerm_virtual_network_peering" "spoke2-hub-peer" {
name = "${local.prefix-spoke2}-hub-peer" name = "${local.prefix-spoke2}-hub-peer"
resource_group_name = azurerm_resource_group.spoke2-vnet-rg.name resource_group_name = azurerm_resource_group.spoke2-vnet-rg.name
virtual_network_name = azurerm_virtual_network.spoke2-vnet.name virtual_network_name = azurerm_virtual_network.spoke2-vnet.name
remote_virtual_network_id = azurerm_virtual_network.hub-vnet.id remote_virtual_network_id = azurerm_virtual_network.hub-vnet.id
allow_virtual_network_access = true allow_virtual_network_access = true
allow_forwarded_traffic = true allow_forwarded_traffic = true
allow_gateway_transit = false allow_gateway_transit = false
use_remote_gateways = true use_remote_gateways = true
depends_on = [azurerm_virtual_network.spoke2-vnet, azurerm_virtual_network.hub-vnet, azurerm_virtual_network_gateway.hub-vnet-gateway] depends_on = [azurerm_virtual_network.spoke2-vnet, azurerm_virtual_network.hub-vnet, azurerm_virtual_network_gateway.hub-vnet-gateway]
} }
resource "azurerm_network_interface" "spoke2-nic" { resource "azurerm_network_interface" "spoke2-nic" {
name = "${local.prefix-spoke2}-nic" name = "${local.prefix-spoke2}-nic"
location = azurerm_resource_group.spoke2-vnet-rg.location location = azurerm_resource_group.spoke2-vnet-rg.location
resource_group_name = azurerm_resource_group.spoke2-vnet-rg.name resource_group_name = azurerm_resource_group.spoke2-vnet-rg.name
enable_ip_forwarding = true enable_ip_forwarding = true
ip_configuration { ip_configuration {
name = local.prefix-spoke2 name = local.prefix-spoke2
subnet_id = azurerm_subnet.spoke2-mgmt.id subnet_id = azurerm_subnet.spoke2-mgmt.id
private_ip_address_allocation = "Dynamic" private_ip_address_allocation = "Dynamic"
} }
tags = { tags = {
environment = local.prefix-spoke2 environment = local.prefix-spoke2
} }
} }
resource "azurerm_virtual_machine" "spoke2-vm" { resource "azurerm_virtual_machine" "spoke2-vm" {
name = "${local.prefix-spoke2}-vm" name = "${local.prefix-spoke2}-vm"
location = azurerm_resource_group.spoke2-vnet-rg.location location = azurerm_resource_group.spoke2-vnet-rg.location
resource_group_name = azurerm_resource_group.spoke2-vnet-rg.name resource_group_name = azurerm_resource_group.spoke2-vnet-rg.name
network_interface_ids = [azurerm_network_interface.spoke2-nic.id] network_interface_ids = [azurerm_network_interface.spoke2-nic.id]
vm_size = var.vmsize vm_size = var.vmsize
storage_image_reference { storage_image_reference {
publisher = "Canonical" publisher = "Canonical"
offer = "UbuntuServer" offer = "UbuntuServer"
sku = "16.04-LTS" sku = "16.04-LTS"
version = "latest" version = "latest"
} }
storage_os_disk { storage_os_disk {
name = "myosdisk1" name = "myosdisk1"
caching = "ReadWrite" caching = "ReadWrite"
create_option = "FromImage" create_option = "FromImage"
managed_disk_type = "Standard_LRS" managed_disk_type = "Standard_LRS"
} }
os_profile { os_profile {
computer_name = "${local.prefix-spoke2}-vm" computer_name = "${local.prefix-spoke2}-vm"
admin_username = var.username admin_username = var.username
admin_password = var.password admin_password = local.password
} }
os_profile_linux_config { os_profile_linux_config {
disable_password_authentication = false disable_password_authentication = false
} }
tags = { tags = {
environment = local.prefix-spoke2 environment = local.prefix-spoke2
} }
} }
resource "azurerm_virtual_network_peering" "hub-spoke2-peer" { resource "azurerm_virtual_network_peering" "hub-spoke2-peer" {
name = "hub-spoke2-peer" name = "hub-spoke2-peer"
resource_group_name = azurerm_resource_group.hub-vnet-rg.name resource_group_name = azurerm_resource_group.hub-vnet-rg.name
virtual_network_name = azurerm_virtual_network.hub-vnet.name virtual_network_name = azurerm_virtual_network.hub-vnet.name
remote_virtual_network_id = azurerm_virtual_network.spoke2-vnet.id remote_virtual_network_id = azurerm_virtual_network.spoke2-vnet.id
allow_virtual_network_access = true allow_virtual_network_access = true
allow_forwarded_traffic = true allow_forwarded_traffic = true
allow_gateway_transit = true allow_gateway_transit = true
use_remote_gateways = false use_remote_gateways = false
depends_on = [azurerm_virtual_network.spoke2-vnet, azurerm_virtual_network.hub-vnet, azurerm_virtual_network_gateway.hub-vnet-gateway] depends_on = [azurerm_virtual_network.spoke2-vnet, azurerm_virtual_network.hub-vnet, azurerm_virtual_network_gateway.hub-vnet-gateway]
} }

16
quickstart/301-hub-spoke/variables.tf
View File

@ -1,18 +1,20 @@
variable "location" { variable "location" {
description = "Location of the network" description = "Location of the network"
default = "eastus" default = "eastus"
} }
variable "username" { variable "username" {
description = "Username for Virtual Machines" description = "Username for Virtual Machines"
default = "azureuser" default = "azureuser"
} }
variable "password" { variable "password" {
description = "Password for Virtual Machines" description = "Password for Virtual Machines"
sensitive = true
default = null
} }
variable "vmsize" { variable "vmsize" {
description = "Size of the VMs" description = "Size of the VMs"
default = "Standard_DS1_v2" default = "Standard_DS1_v2"
} }