This commit is contained in:
2023-06-13 15:28:45 +02:00
parent 3dd31b0489
commit 072e82fae1

112
02_azure_tower.yml Normal file
View File

@@ -0,0 +1,112 @@
---
- name: Azure Webserver
hosts: localhost
connection: local
vars:
user: alex
location: northeurope
virtual_network_name: "webserver_{{ user }}"
subnet: Webserver
resource_group: "webserver_{{ user }}"
domain_sub: "domain{{ user }}"
tasks:
- name: Create a virtual network
azure.azcollection.azure_rm_virtualnetwork:
resource_group: "{{ resource_group }}"
name: "{{ virtual_network_name }}"
address_prefixes_cidr: "10.99.0.0/16"
tags:
solution: "webserver_{{ user }}"
delete: ansibletraining
- name: Create a subnet
azure.azcollection.azure_rm_subnet:
resource_group: "{{ resource_group }}"
virtual_network_name: "{{ virtual_network_name }}"
name: "{{ subnet }}"
address_prefix_cidr: "10.99.0.0/24"
- name: Create a public ip address for webserver
azure_rm_publicipaddress:
resource_group: "{{ resource_group }}"
name: public_ip_webserver
allocation_method: static
domain_name: "webserver{{ domain_sub }}"
tags:
solution: "webserver_{{ user }}"
delete: ansibletraining
register: webserver_pub_ip
- name: Create Security Group for webserver
azure_rm_securitygroup:
resource_group: "{{ resource_group }}"
name: "webserver_securitygroup"
purge_rules: true
rules:
- name: Allow_SSH
protocol: Tcp
destination_port_range: 22
access: Allow
priority: 100
direction: Inbound
- name: Allow_HTTP
protocol: Tcp
destination_port_range: 80
access: Allow
priority: 101
direction: Inbound
tags:
solution: "webserver_{{ user }}"
delete: ansibletraining
- name: Create a network interface for webserver
azure_rm_networkinterface:
name: "webserver_nic01"
resource_group: "{{ resource_group }}"
virtual_network: "{{ virtual_network_name }}"
subnet_name: "{{ subnet }}"
security_group: "webserver_securitygroup"
ip_configurations:
- name: "webserver_nic01_ipconfig"
public_ip_address_name: "public_ip_webserver"
primary: True
tags:
solution: "webserver_{{ user }}"
delete: ansibletraining
- name: Create a VM webserver
azure_rm_virtualmachine:
resource_group: "{{ resource_group }}"
name: "webserver"
os_type: Linux
admin_username: "{{ user }}"
ssh_password_enabled: false
ssh_public_keys:
- path: "/home/{{ user }}/.ssh/authorized_keys"
key_data: "{{ ssh_public_key }}"
managed_disk_type: Standard_LRS
state: present
image:
offer: RHEL
publisher: RedHat
sku: "8_4"
version: latest
vm_size: Standard_A1_v2
network_interfaces: "webserver_nic01"
tags:
solution: "webserver_{{ user }}"
delete: ansibletraining
- name: Show webserver public ip
debug:
msg: "{{ webserver_pub_ip.state.ip_address }}"
- name: Wait for ssh on webserver
ansible.builtin.wait_for:
host: "{{ webserver_pub_ip.state.ip_address }}"
port: 22
delay: 10
timeout: 600