smithdavid-lab/vm-euw-core-adds.tf at main · dsmithcloud/smithdavid-lab · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
resource "azurerm_network_interface" "nic-euw-adds" {
  name                = "vmeuwcoreadds${count.index + 1}-NIC"
  location            = azurerm_resource_group.ADDS-euw.location
  resource_group_name = azurerm_resource_group.ADDS-euw.name
  count               = length(local.settings.adds.euw-adds-ip_address)

  ip_configuration {
    name                          = "ipconfig1"
    subnet_id                     = azurerm_subnet.subnet-euw-core-adds.id
    private_ip_address_allocation = "Static"
    private_ip_address            = local.settings.adds.euw-adds-ip_address[count.index]
  }

  tags = merge(local.settings.common_tags, local.settings.core_tags)
}

resource "azurerm_availability_set" "avset-euw-adds" {
  name                = "vmeuwcoreadds-avset"
  location            = azurerm_resource_group.ADDS-euw.location
  resource_group_name = azurerm_resource_group.ADDS-euw.name

  tags = merge(local.settings.common_tags, local.settings.core_tags)
}

resource "azurerm_virtual_machine" "vm-euw-adds" {
  name                             = "vmeuwcoreadds${count.index + 1}"
  location                         = azurerm_resource_group.ADDS-euw.location
  resource_group_name              = azurerm_resource_group.ADDS-euw.name
  network_interface_ids            = [element(azurerm_network_interface.nic-euw-adds.*.id, count.index)]
  vm_size                          = local.settings.adds.vm_size
  availability_set_id              = azurerm_availability_set.avset-euw-adds.id
  delete_data_disks_on_termination = true
  count                            = length(local.settings.adds.euw-adds-ip_address)

  storage_image_reference {
    publisher = local.settings.adds.publisher
    offer     = local.settings.adds.offer
    sku       = local.settings.adds.sku
    version   = local.settings.adds.version
  }
  os_profile {
    computer_name  = "vmeuwcoreadds${count.index + 1}"
    admin_username = local.settings.adds.admin_username
    admin_password = azurerm_key_vault_secret.ussc-admin_ospassword.value
  }
  os_profile_windows_config {
    provision_vm_agent        = true
    enable_automatic_upgrades = true
  }
  storage_os_disk {
    name              = "vmeuwcoreadds${count.index + 1}-OSDisk"
    create_option     = "FromImage"
    managed_disk_type = "Premium_LRS"
  }
  storage_data_disk {
    name              = "vmeuwcoreadds${count.index + 1}-DataDisk01"
    create_option     = "Empty"
    managed_disk_type = "Premium_LRS"
    disk_size_gb      = 64
    lun               = 0
    caching           = "None"
  }

  tags = merge(local.settings.common_tags, local.settings.core_tags)
}

resource "azurerm_virtual_machine_extension" "euw-iaasantimalware" {
  name                       = "IaaSAntimalware"
  virtual_machine_id         = azurerm_virtual_machine.vm-euw-adds[count.index].id
  publisher                  = "Microsoft.Azure.Security"
  type                       = "IaaSAntimalware"
  type_handler_version       = "1.3"
  auto_upgrade_minor_version = true
  #enable_automatic_upgrades  = true
  count = length(local.settings.adds.euw-adds-ip_address)

  settings = <<SETTINGS
    {
      "AntimalwareEnabled": true,
      "RealtimeProtectionEnabled": "true",
      "ScheduledScanSettings": {
        "isEnabled": "true",
        "day": "1",
        "time": "120",
        "scanType": "Quick"
      },
      "Exclusions": {
        "Extensions": "",
        "Paths": "",
        "Processes": ""
      }
    }
SETTINGS
}

resource "azurerm_virtual_machine_extension" "euw-mma" {
  name                       = "MicrosoftMonitoringAgent"
  virtual_machine_id         = azurerm_virtual_machine.vm-euw-adds[count.index].id
  publisher                  = "Microsoft.EnterpriseCloud.Monitoring"
  type                       = "MicrosoftMonitoringAgent"
  type_handler_version       = "1.0"
  auto_upgrade_minor_version = true
  #enable_automatic_upgrades  = true
  count = length(local.settings.adds.euw-adds-ip_address)

  settings = <<SETTINGS
        {
          "workspaceId": "${azurerm_log_analytics_workspace.euw-core-log.workspace_id}"
        }
        SETTINGS

  protected_settings = <<PROTECTED_SETTINGS
        {
          "workspaceKey": "${azurerm_log_analytics_workspace.euw-core-log.primary_shared_key}"
        }
        PROTECTED_SETTINGS
}

resource "azurerm_virtual_machine_extension" "euw-netwatch" {
  name                       = "NetworkWatcher"
  virtual_machine_id         = azurerm_virtual_machine.vm-euw-adds[count.index].id
  publisher                  = "Microsoft.Azure.NetworkWatcher"
  type                       = "NetworkWatcherAgentWindows"
  type_handler_version       = "1.0"
  auto_upgrade_minor_version = true
  #enable_automatic_upgrades  = true
  count = length(local.settings.adds.euw-adds-ip_address)
}