зеркало из https://github.com/Azure/ARO-RP.git
203 строки
7.2 KiB
JSON
203 строки
7.2 KiB
JSON
{
|
|
"$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#",
|
|
"contentVersion": "1.0.0.0",
|
|
"parameters": {
|
|
"adminObjectId": {
|
|
"type": "string"
|
|
},
|
|
"fpServicePrincipalId": {
|
|
"type": "string"
|
|
},
|
|
"keyvaultPrefix": {
|
|
"type": "string",
|
|
"maxLength": 20
|
|
},
|
|
"rpServicePrincipalId": {
|
|
"type": "string"
|
|
}
|
|
},
|
|
"resources": [
|
|
{
|
|
"properties": {
|
|
"securityRules": [
|
|
{
|
|
"properties": {
|
|
"protocol": "Tcp",
|
|
"sourcePortRange": "*",
|
|
"destinationPortRange": "443",
|
|
"sourceAddressPrefix": "*",
|
|
"destinationAddressPrefix": "*",
|
|
"access": "Allow",
|
|
"priority": 120,
|
|
"direction": "Inbound"
|
|
},
|
|
"name": "rp_in_arm"
|
|
},
|
|
{
|
|
"properties": {
|
|
"protocol": "Tcp",
|
|
"sourcePortRange": "*",
|
|
"destinationPortRange": "22",
|
|
"sourceAddressPrefix": "*",
|
|
"destinationAddressPrefix": "*",
|
|
"access": "Allow",
|
|
"priority": 125,
|
|
"direction": "Inbound"
|
|
},
|
|
"name": "ssh_in"
|
|
}
|
|
]
|
|
},
|
|
"name": "rp-nsg",
|
|
"type": "Microsoft.Network/networkSecurityGroups",
|
|
"location": "[resourceGroup().location]",
|
|
"apiVersion": "2019-07-01"
|
|
},
|
|
{
|
|
"properties": {},
|
|
"name": "rp-pe-nsg",
|
|
"type": "Microsoft.Network/networkSecurityGroups",
|
|
"location": "[resourceGroup().location]",
|
|
"apiVersion": "2019-07-01"
|
|
},
|
|
{
|
|
"properties": {
|
|
"tenantId": "[subscription().tenantId]",
|
|
"sku": {
|
|
"family": "A",
|
|
"name": "standard"
|
|
},
|
|
"accessPolicies": [
|
|
{
|
|
"tenantId": "[subscription().tenantId]",
|
|
"objectId": "[parameters('fpServicePrincipalId')]",
|
|
"permissions": {
|
|
"secrets": [
|
|
"get"
|
|
],
|
|
"certificates": [
|
|
"create",
|
|
"delete",
|
|
"get",
|
|
"update"
|
|
]
|
|
}
|
|
},
|
|
{
|
|
"tenantId": "[subscription().tenantId]",
|
|
"objectId": "[parameters('rpServicePrincipalId')]",
|
|
"permissions": {
|
|
"secrets": [
|
|
"get"
|
|
],
|
|
"certificates": [
|
|
"create",
|
|
"delete",
|
|
"get",
|
|
"update"
|
|
]
|
|
}
|
|
},
|
|
{
|
|
"tenantId": "[subscription().tenantId]",
|
|
"objectId": "[parameters('adminObjectId')]",
|
|
"permissions": {
|
|
"certificates": [
|
|
"get",
|
|
"list"
|
|
]
|
|
}
|
|
}
|
|
],
|
|
"enableSoftDelete": true
|
|
},
|
|
"name": "[concat(parameters('keyvaultPrefix'), '-cls')]",
|
|
"type": "Microsoft.KeyVault/vaults",
|
|
"location": "[resourceGroup().location]",
|
|
"apiVersion": "2016-10-01"
|
|
},
|
|
{
|
|
"properties": {
|
|
"tenantId": "[subscription().tenantId]",
|
|
"sku": {
|
|
"family": "A",
|
|
"name": "standard"
|
|
},
|
|
"accessPolicies": [
|
|
{
|
|
"tenantId": "[subscription().tenantId]",
|
|
"objectId": "[parameters('rpServicePrincipalId')]",
|
|
"permissions": {
|
|
"secrets": [
|
|
"get"
|
|
]
|
|
}
|
|
},
|
|
{
|
|
"tenantId": "[subscription().tenantId]",
|
|
"objectId": "[parameters('adminObjectId')]",
|
|
"permissions": {
|
|
"secrets": [
|
|
"set",
|
|
"list"
|
|
],
|
|
"certificates": [
|
|
"delete",
|
|
"get",
|
|
"import",
|
|
"list"
|
|
]
|
|
}
|
|
}
|
|
],
|
|
"enableSoftDelete": true
|
|
},
|
|
"name": "[concat(parameters('keyvaultPrefix'), '-por')]",
|
|
"type": "Microsoft.KeyVault/vaults",
|
|
"location": "[resourceGroup().location]",
|
|
"apiVersion": "2016-10-01"
|
|
},
|
|
{
|
|
"properties": {
|
|
"tenantId": "[subscription().tenantId]",
|
|
"sku": {
|
|
"family": "A",
|
|
"name": "standard"
|
|
},
|
|
"accessPolicies": [
|
|
{
|
|
"tenantId": "[subscription().tenantId]",
|
|
"objectId": "[parameters('rpServicePrincipalId')]",
|
|
"permissions": {
|
|
"secrets": [
|
|
"get"
|
|
]
|
|
}
|
|
},
|
|
{
|
|
"tenantId": "[subscription().tenantId]",
|
|
"objectId": "[parameters('adminObjectId')]",
|
|
"permissions": {
|
|
"secrets": [
|
|
"set",
|
|
"list"
|
|
],
|
|
"certificates": [
|
|
"delete",
|
|
"get",
|
|
"import",
|
|
"list"
|
|
]
|
|
}
|
|
}
|
|
],
|
|
"enableSoftDelete": true
|
|
},
|
|
"name": "[concat(parameters('keyvaultPrefix'), '-svc')]",
|
|
"type": "Microsoft.KeyVault/vaults",
|
|
"location": "[resourceGroup().location]",
|
|
"apiVersion": "2016-10-01"
|
|
}
|
|
]
|
|
}
|