Merge pull request #6 from Azure/saumil-tf1

Networking resources Added

reference-implementations/LOB-ILB-ASEv3/terraform/network.tf

@@ -0,0 +1,151 @@
+
+locals {
+  // Variables
+bastionHostName ="snet-basthost-${local.resourceSuffix}"
+bastionHostPip ="${local.bastionHostName}-pip"
+hubVNetName ="vnet-hub-${local.resourceSuffix}"
+spokeVNetName ="vnet-spoke-${local.resourceSuffix}"
+bastionSubnetName ="AzureBastionSubnet"
+CICDAgentSubnetName ="snet-cicd-${local.resourceSuffix}"
+jumpBoxSubnetName ="snet-jbox-${local.resourceSuffix}"
+aseSubnetName ="snet-ase-${local.resourceSuffix}"
+
+}
+
+// Resources - VNet - SubNets
+resource "azurerm_virtual_network" "vnetHub" {
+  name                = local.hubVNetName
+  location            = var.location
+  resource_group_name = local.networkingResourceGroupName
+  address_space       = [var.hubVNetNameAddressPrefix]
+
+  subnet {
+    name           = "AzureBastionSubnet"
+    address_prefix = var.bastionAddressPrefix
+  }
+
+  subnet {
+    name           = "jumpBoxSubnetName"
+    address_prefix = var.jumpBoxAddressPrefix
+  }
+
+  subnet {
+    name           = "CICDAgentSubnetName"
+    address_prefix = var.CICDAgentNameAddressPrefix
+  }
+
+  depends_on = [azurerm_resource_group.networkrg]
+
+}
+
+// Resources - VNet - SubNets - Spoke
+resource "azurerm_virtual_network" "vnetSpoke" {
+  name                = local.spokeVNetName
+  location            = var.location
+  resource_group_name = local.networkingResourceGroupName
+  address_space       = [var.spokeVNetNameAddressPrefix]
+  depends_on = [azurerm_resource_group.networkrg]
+}
+
+resource "azurerm_subnet" "vnetSpokeSubnet" {
+  name                 = local.aseSubnetName
+  resource_group_name  = local.networkingResourceGroupName
+  virtual_network_name = azurerm_virtual_network.vnetSpoke.name
+  address_prefixes     = [var.aseAddressPrefix]
+
+  delegation {
+    name = "hostingEnvironment"
+
+    service_delegation {
+      name    = "Microsoft.Web/hostingEnvironments"
+      actions = ["Microsoft.Network/virtualNetworks/subnets/join/action", "Microsoft.Network/virtualNetworks/subnets/prepareNetworkPolicies/action"]
+    }
+  }
+  depends_on = [azurerm_virtual_network.vnetSpoke]
+}
+
+// Peering
+resource "azurerm_virtual_network_peering" "peerhubtospoke" {
+  name                      = "${azurerm_virtual_network.vnetHub.name}/${azurerm_virtual_network.vnetHub.name}-${azurerm_virtual_network.vnetSpoke.name}"
+  resource_group_name       = local.networkingResourceGroupName
+  virtual_network_name      = azurerm_virtual_network.vnetHub.name
+  remote_virtual_network_id = azurerm_virtual_network.vnetSpoke.id
+  allow_virtual_network_access = true
+  allow_forwarded_traffic      = false
+  allow_gateway_transit = false
+  use_remote_gateways = false
+  depends_on = [azurerm_virtual_network.vnetHub,azurerm_virtual_network.vnetSpoke]
+}
+
+resource "azurerm_virtual_network_peering" "peerspoketohub" {
+  name                      = "${azurerm_virtual_network.vnetSpoke.name}/${azurerm_virtual_network.vnetSpoke.name}-${azurerm_virtual_network.vnetHub.name}"
+  resource_group_name       = local.networkingResourceGroupName
+  virtual_network_name      = azurerm_virtual_network.vnetSpoke.name
+  remote_virtual_network_id = azurerm_virtual_network.vnetHub.id
+  allow_virtual_network_access = true
+  allow_forwarded_traffic      = false
+  allow_gateway_transit = false
+  use_remote_gateways = false
+  depends_on = [azurerm_virtual_network.vnetHub,azurerm_virtual_network.vnetSpoke]
+}
+
+//bastionHost
+resource "azurerm_public_ip" "bastionHostPippublicIp" {
+  name                = local.bastionHostPip
+  resource_group_name = local.networkingResourceGroupName
+  location            = var.location
+  allocation_method   = "Static"
+  sku = "Standard"
+  depends_on = [azurerm_resource_group.networkrg]
+}
+
+resource "azurerm_bastion_host" "bastionHost" {
+  name                = local.bastionHostName
+  location            = var.location
+  resource_group_name = local.networkingResourceGroupName
+
+  ip_configuration {
+    name                 = "IpConf"
+    subnet_id            = "${azurerm_virtual_network.vnetHub.id}/subnets/AzureBastionSubnet"
+    public_ip_address_id = azurerm_public_ip.bastionHostPippublicIp.id
+  }
+  depends_on = [azurerm_virtual_network.vnetHub,azurerm_virtual_network.vnetSpoke]
+}
+
+// Output section
+output "hubVNetName" {
+  value = azurerm_virtual_network.vnetHub.name
+}
+output "spokeVNetName" {
+  value = azurerm_virtual_network.vnetSpoke.name
+}
+output "hubVNetId" {
+  value = azurerm_virtual_network.vnetHub.id
+}
+output "spokeVNetId" {
+  value = azurerm_virtual_network.vnetSpoke.id
+}
+output "bastionSubnetName" {
+  value = local.bastionSubnetName
+}
+output "CICDAgentSubnetName" {
+  value = local.CICDAgentSubnetName
+}
+output "jumpBoxSubnetName" {
+  value = local.jumpBoxSubnetName
+}
+output "aseSubnetName" {
+  value = local.aseSubnetName
+}
+output "bastionSubnetId" {
+  value = "${azurerm_virtual_network.vnetHub.id}/subnets/${local.bastionSubnetName}"
+}
+output "CICDAgentSubnetId" {
+  value = "${azurerm_virtual_network.vnetHub.id}/subnets/${local.CICDAgentSubnetName}"
+}
+output "jumpBoxSubnetId" {
+  value = "${azurerm_virtual_network.vnetHub.id}/subnets/${local.jumpBoxSubnetName}"
+}
+output "aseSubnetId" {
+  value = "${azurerm_virtual_network.vnetSpoke.id}/subnets/${local.aseSubnetName}"
+}

reference-implementations/LOB-ILB-ASEv3/terraform/variables.tf

@@ -1,17 +1,53 @@
-variable "workloadName" {
-  description = "A short name for the workload being deployed"
-  type        = string
-  default     = "ase"
-}
-
-variable "environment" {
-  description = "The environment for which the deployment is being executed"
-  type        = string
-  default     = "dev"
-}
-
-variable "location" {
-  description = "The Azure location where all resources should be created"
-  type        = string
-  default     = "westus2"
-}
+variable "workloadName" {
+  description = "A short name for the workload being deployed"
+  type        = string
+  default     = "ase"
+}
+
+variable "environment" {
+  description = "The environment for which the deployment is being executed"
+  type        = string
+  default     = "dev"
+}
+
+variable "location" {
+  description = "The Azure location where all resources should be created"
+  type        = string
+  default     = "westus2"
+}
+
+variable "hubVNetNameAddressPrefix" {
+  description = "CIDR prefix to use for Hub VNet"
+  type        = string
+  default     = "10.0.0.0/16"
+}
+
+variable "spokeVNetNameAddressPrefix" {
+  description = "CIDR prefix to use for Spoke VNet"
+  type        = string
+  default     = "10.1.0.0/16"
+}
+
+variable "bastionAddressPrefix" {
+  description = "CIDR prefix to use for Hub VNet"
+  type        = string
+  default     = "10.0.1.0/24"
+}
+
+variable "CICDAgentNameAddressPrefix" {
+  description = "CIDR prefix to use for Spoke VNet"
+  type        = string
+  default     = "10.0.2.0/24"
+}
+
+variable "jumpBoxAddressPrefix" {
+  description = "CIDR prefix to use for Jumpbox VNet"
+  type        = string
+  default     = "10.0.3.0/24"
+}
+
+variable "aseAddressPrefix" {
+  description = "CIDR prefix to use for ASE"
+  type        = string
+  default     = "10.1.1.0/24"
+}