ansible.azure.automation/doc/en_vrac.md

En vrac

Availability set

ANSIBLE_PLAYBOOK_FILE=playbook_availability_set.yml ./run.sh -vv -e "{avss: [{name: 'jdongmohub-eca1-gen-avs01', resource_group: 'jdongmohub-nonprod-eca1-gen-rg01', platform_fault_domain_count: 2, platform_update_domain_count: 2, sku: 'Aligned', state: 'present'}]}"

Storage account

ANSIBLE_PLAYBOOK_FILE=playbook_storage_account.yml ./run.sh -vv -e "{sas: [{name: 'jdongmohubeca1gensa01', resource_group: 'jdongmohub-nonprod-eca1-gen-rg01', access_tier: 'Hot', account_type: 'Standard_LRS', blob_cors: [], force_delete_nonempty: true, https_only: true, kind: 'StorageV2', state: 'present', tags: {'env': 'test', 'provisioner': 'ansible'}}]}"

Log analytics workspace

ANSIBLE_PLAYBOOK_FILE=playbook_analytics_workspace.yml ./run.sh -vv -e "{laws: [{name: 'jdongmohub-eca1-gen-ngfw-law01', resource_group: 'jdongmohub-nonprod-eca1-gen-rg01', location: 'canadacentral', retention_in_days: 90, state: 'present'}]}"

sentinel

ANSIBLE_PLAYBOOK_FILE=playbook_sentinel.yml ./run.sh -vv -e "{sentinels: [{law: {name: 'jdongmohub-eca1-gen-ngfw-law01', subscriptionid: 'd89d587d-8a3f-4e4d-ac5a-636b4aa7b5d8'}, resource_group: 'jdongmohub-nonprod-eca1-gen-rg01', location: 'canadacentral', state: 'present'}]}"

Routing table

ANSIBLE_PLAYBOOK_FILE=playbook_routing_table.yml ./run.sh -vv -e "{rts: [{name: 'jdongmohub-eca1-gw-rt', resource_group: 'jdongmohub-nonprod-eca1-gen-rg01', disable_bgp_route_propagation: false, state: 'present'}, {name: 'jdongmohub-eca1-sub01-rt', resource_group: 'jdongmohub-nonprod-eca1-gen-rg01', state: 'present'}, {name: 'jdongmohub-eca1-sub02-rt', resource_group: 'jdongmohub-nonprod-eca1-gen-rg01', state: 'present'}]}"

Network security group

ANSIBLE_PLAYBOOK_FILE=playbook_network_security_group.yml ./run.sh -vv -e "{nsgs: [{name: 'jdongmohub-eca1-nsg01', resource_group: 'jdongmohub-nonprod-eca1-gen-rg01', purge_rules: true, rules: [{name: 'Allowtcp22', description: 'Allow incoming tcp traffic on port 22', protocol: 'Tcp', destination_port_range: 22, access: 'Allow', direction: 'Inbound', priority: 122}, {name: 'Allowtcp443', description: 'Allow incoming tcp traffic on port 443', protocol: 'Tcp', destination_port_range: 443, access: 'Allow', direction: 'Inbound', priority: 443}], state: 'present'}]}"

Subnet

ANSIBLE_PLAYBOOK_FILE=playbook_subnet.yml ./run.sh -vv -e "{subnets: [{name: 'GatewaySubnet', resource_group: 'jdongmohub-nonprod-eca1-gen-rg01', virtual_network_name: 'jdongmohub-eca1-gen-vnet01', address_prefix_cidr: '10.225.135.0/28', route_table: 'jdongmohub-eca1-gw-rt', state: 'present'}, {name: 'jdongmohub-eca1-mgt-sub01', resource_group: 'jdongmohub-nonprod-eca1-gen-rg01', virtual_network_name: 'jdongmohub-eca1-gen-vnet01', address_prefix_cidr: '10.220.135.0/28', route_table: 'jdongmohub-eca1-sub01-rt', state: 'present'}]}"
ANSIBLE_PLAYBOOK_FILE=playbook_subnet.yml ./run.sh -vv -e "{subnets: [{name: 'jdongmohub-eca1-trust-prod-sub02', resource_group: 'jdongmohub-nonprod-eca1-gen-rg01', virtual_network_name: 'jdongmohub-eca1-gen-vnet01', address_prefix_cidr: '10.225.135.16/28', route_table: 'jdongmohub-eca1-sub02-rt', state: 'present'}]}"

subnets:
  - name: 'GatewaySubnet'
    resource_group: 'jdongmohub-nonprod-eca1-gen-rg01'
    virtual_network_name: 'jdongmohub-eca1-gen-vnet01'
    address_prefix_cidr: '10.225.135.0/28'
    route_table: 'jdongmohub-eca1-gw-rt'
    state: 'present'
  - name: 'jdongmohub-eca1-mgt-sub01'
    resource_group: 'jdongmohub-nonprod-eca1-gen-rg01'
    virtual_network_name: 'jdongmohub-eca1-gen-vnet01'
    address_prefix_cidr: '10.220.135.0/28'
    route_table: 'jdongmohub-eca1-sub01-rt'
    state: 'present'
  - name: 'jdongmohub-eca1-trust-prod-sub02'
    resource_group: 'jdongmohub-nonprod-eca1-gen-rg01'
    virtual_network_name: 'jdongmohub-eca1-gen-vnet01'
    address_prefix_cidr: '10.225.135.16/28'
    route_table: 'jdongmohub-eca1-sub02-rt'
    state: 'present'
  - name: 'jdongmohub-eca1-trust-nprod-sub03'
    resource_group: 'jdongmohub-nonprod-eca1-gen-rg01'
    virtual_network_name: 'jdongmohub-eca1-gen-vnet01'
    address_prefix_cidr: '10.220.135.16/28'
    route_table: 'jdongmohub-eca1-sub03-rt'
    state: 'present'
  - name: 'jdongmohub-eca1-untrust-prod-sub04'
    resource_group: 'jdongmohub-nonprod-eca1-gen-rg01'
    virtual_network_name: 'jdongmohub-eca1-gen-vnet01'
    address_prefix_cidr: '10.225.135.32/28'
    route_table: 'jdongmohub-eca1-sub04-rt'
    state: 'present'
  - name: 'jdongmohub-eca1-untrust-nprod-sub05'
    resource_group: 'jdongmohub-nonprod-eca1-gen-rg01'
    virtual_network_name: 'jdongmohub-eca1-gen-vnet01'
    address_prefix_cidr: '10.220.135.32/28'
    route_table: 'jdongmohub-eca1-sub05-rt'
    state: 'present'

Network interface card

ANSIBLE_PLAYBOOK_FILE=playbook_network_interface_card.yml ./run.sh -vv -e "{nics: [{name: 'jdongmohub-eca1-mgt-nic01', resource_group: 'jdongmohub-nonprod-eca1-gen-rg01', create_with_security_group: true, enable_accelerated_networking: false, enable_ip_forwarding: false, security_group: 'jdongmohub-eca1-nsg01', subnet_name: 'jdongmohub-eca1-mgt-sub01', virtual_network: 'jdongmohub-eca1-gen-vnet01', state: 'present'}, {name: 'jdongmohub-eca1-trust-prod-nic02', resource_group: 'jdongmohub-nonprod-eca1-gen-rg01', create_with_security_group: true, enable_accelerated_networking: false, enable_ip_forwarding: false, security_group: 'jdongmohub-eca1-nsg01', subnet_name: 'jdongmohub-eca1-trust-prod-sub02', virtual_network: 'jdongmohub-eca1-gen-vnet01', state: 'present'}]}"

nics:
  - name: "jdongmohub-eca1-mgt-nic01"
    dns_servers: []
    create_with_security_group: true
    enable_accelerated_networking: false
    enable_ip_forwarding: false
    resource_group: "{{ base_name }}-rg01"
    security_group: "{{ base_name }}-allowtcp22"
    subnet_name: "spi-dns-caea-sim-ssh-subnet01"
    virtual_network: 'jdongmohub-eca1-gen-vnet01'
    state: "present"
  - name: "jdongmohub-eca1-trust-prod-nic02"
    dns_servers: []
    create_with_security_group: true
    enable_accelerated_networking: false
    enable_ip_forwarding: false
    resource_group: "jdongmohub-nonprod-eca1-gen-rg01"
    security_group: "jdongmohub-eca1-nsg01"
    subnet_name: ""
    virtual_network:
      name: ""
      resource_group: ""
    state: "present"
    tags:
      "env": "test"
      "provisioner": "ansible"

User defined route

Virtual machine

ANSIBLE_PLAYBOOK_FILE=playbook_virtual_machine.yml ./run.sh -vv -e "{vms: [{name: 'jdongmohub-eca1-relay-vm01', resource_group: 'jdongmohub-nonprod-eca1-gen-rg01', network_interfaces: ['jdongmohub-eca1-trust-prod-nic02'], managed_disk_type: 'StandardSSD_LRS', os_disk_size_gb: 200, ip_allocation: 'Disabled', remove_on_absent: ['virtual_storage'], restarted: false, ssh_password_enabled: true, storage_account_name: 'jdongmohubeca1gensa01', subnet_name: 'jdongmohub-eca1-trust-prod-sub02', virtual_network: 'jdongmohub-eca1-gen-vnet01', vm_size: 'Standard_B1s', image: {publisher: 'OpenLogic', offer: 'CentOS', sku: '7.1', version: 'latest'}, admin_username: 'admin', admin_password: '********', state: 'present'}]}" 
vms:
  - name: "{{ base_name }}-vm-syslog"
    admin_username: admin
    admin_password: ********
    image:
      publisher: 'OpenLogic'
      offer: "CentOS"
      sku: '7.5'
      version: 'latest'
    resource_group: '{{ base_name }}-rg01'
    network_interfaces:
      - "{{ base_name }}-nic06"
    managed_disk_type: "StandardSSD_LRS"
    os_disk_size_gb: 500
    ip_allocation: "Disabled"
    remove_on_absent:
      - "virtual_storage"
    restarted: false
    ssh_password_enabled: true
    storage_account_name: 'jdongmocaeasa03'
    subnet_name: "spi-dns-caea-sim-ssh-subnet01"
    virtual_network: "spi-dns-caea-sim-vnet01"
    vm_size: 'Standard_B1s'
    state: 'present'
    tags:
      "env": "dev"
      "provisioner": "ansible"

Load balancer