/azure-terraform

Azure terraform sample

Primary LanguageHCLMIT LicenseMIT

README

Script works with Terraform v0.12.10. You may need to upgrade the scripts if you want to use v0.12.12

Scripts are revised for Terraform AzureRM v1.30.0.

Sample architecture

sample architecture

N-Tier architecture service with a jumphost and a NAT instance. NAT instance is used for SNATing outbound from VMs in app-subnet.

For AKS architecture, see AKS Sample

How to run

Preparation

Download and install terraform: https://www.terraform.io/downloads.html

Update variables such as subscription_id and admin_name in variables.tf

Azure Service principal

Run following command to get a service principal info. Note that if you have multiple subscriptions then you should set right default subscription.

az account set -s <subscription_id>
az ad sp create-for-rbac --role="Contributor" --scopes="/subscriptions/<subscription_id>"

You don't need to create SP if you're using Azure CLI environment, such as Azure Shell. See Authenticating using the Azure CLI for more information

Run terraform

Initialize first,

terraform init

Then apply terraform

terraform apply

Feature highlight

  1. VM login - ssh public key or password
  2. Disk - OS disk with >30GiB and datadisk
  3. OS image - default or custom image for building custom image, refer packer
  4. Create multiple VMs
  5. Setting LB
  6. NAT instance - provision NAT instance, configure UDR and configure NAT using VM extension
  7. ASG - create and apply ASG
  8. Blob - create blob account and upload a file

For more information, please refer DOC.md

SNAT test

After provisioned, login to one of app vm through jump box and test source ip using following command

curl ipinfo.io

Reference

Azure

Terraform

Tips