Skip to content

Commit

Permalink
Added VWAN changes
Browse files Browse the repository at this point in the history
  • Loading branch information
@oZakari
oZakari committed Sep 26, 2024
1 parent 8b5b256 commit 07bc5a9
Show file tree
Hide file tree
Showing 2 changed files with 244 additions and 0 deletions.
14 changes: 14 additions & 0 deletions accelerator/.config/ALZ-Powershell-Auto.config.json
View file
Original file line number Diff line number Diff line change
Expand Up @@ -224,6 +224,20 @@
"firstRunWhatIf": false,
"order": 12,
"group": "connectivity"
},
{
"name": "vwan_multi_region",
"displayName": "Hub (VWAN) Multi-Region Deployment",
"templateFilePath": "./infra-as-code/bicep/modules/vwanConnectivity/vwanConnectivity.bicep",
"templateParametersFilePath": "./config/custom-parameters/vwanConnectivity.parameters.multiRegion.all.json",
"templateParametersSourceFilePath": "./infra-as-code/bicep/modules/vwanConnectivity/parameters/vwanConnectivity.parameters.az.multiRegion.all.json",
"subscriptionId": "CONNECTIVITY_SUBSCRIPTION_ID",
"resourceGroupName": "CONNECTIVITY_RESOURCE_GROUP",
"networkType": "vwanConnectivityMultiRegion",
"deploymentType": "resourceGroup",
"firstRunWhatIf": false,
"order": 13,
"group": "connectivity"
}
],
"inputs": {
Expand Down
230 changes: 230 additions & 0 deletions ...p/modules/vwanConnectivity/parameters/vwanConnectivity.parameters.az.multiRegion.all.json
View file
Original file line number Diff line number Diff line change
@@ -0,0 +1,230 @@
{
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentParameters.json#",
"contentVersion": "1.0.0.0",
"parameters": {
"parLocation": {
"value": "eastus"
},
"parCompanyPrefix": {
"value": "alz"
},
"parVirtualHubEnabled": {
"value": true
},
"parVirtualWanName": {
"value": "alz-vwan"
},
"parVirtualWanHubName": {
"value": "alz-vhub"
},
"parVirtualWanHubDefaultRouteName": {
"value": "default-to-azfw"
},
"parVpnGatewayName": {
"value": "alz-vpngw"
},
"parExpressRouteGatewayName": {
"value": "alz-ergw"
},
"parAzFirewallName": {
"value": "alz-fw"
},
"parAzFirewallPoliciesName": {
"value": "alz-azfwpolicy"
},
"parVirtualWanHubs": {
"value": [
{
"parVpnGatewayEnabled": true,
"parExpressRouteGatewayEnabled": true,
"parAzFirewallEnabled": true,
"parVirtualHubAddressPrefix": "10.100.0.0/23",
"parHubLocation": "eastus",
"parHubRoutingPreference": "ExpressRoute",
"parVirtualRouterAutoScaleConfiguration": 2,
"parVirtualHubRoutingIntentDestinations": [],
"parAzFirewallDnsServers": [],
"parAzFirewallIntelMode": "Alert",
"parAzFirewallDnsProxyEnabled": true,
"parAzFirewallTier": "Standard",
"parAzFirewallAvailabilityZones": [
"1",
"2",
"3"
]
},
{
"parVpnGatewayEnabled": true,
"parExpressRouteGatewayEnabled": true,
"parAzFirewallEnabled": true,
"parVirtualHubAddressPrefix": "10.200.0.0/23",
"parHubLocation": "westus2",
"parHubRoutingPreference": "ExpressRoute",
"parVirtualRouterAutoScaleConfiguration": 2,
"parVirtualHubRoutingIntentDestinations": [],
"parAzFirewallDnsServers": [],
"parAzFirewallIntelMode": "Alert",
"parAzFirewallDnsProxyEnabled": true,
"parAzFirewallTier": "Standard",
"parAzFirewallAvailabilityZones": [
"1",
"2",
"3"
]
}
]
},
"parVpnGatewayScaleUnit": {
"value": 1
},
"parExpressRouteGatewayScaleUnit": {
"value": 1
},
"parDdosEnabled": {
"value": false
},
"parDdosPlanName": {
"value": "alz-ddos-plan"
},
"parPrivateDnsZonesEnabled": {
"value": true
},
"parPrivateDnsZones": {
"value": [
"privatelink.westus.azmk8s.io", // Replace xxxxxx with target region (i.e. eastus)
"privatelink.westus.batch.azure.com", // Replace xxxxxx with target region (i.e. eastus)
"privatelink.westus.kusto.windows.net", // Replace xxxxxx with target region (i.e. eastus)
"privatelink.westus.backup.windowsazure.com", // Replace xxxxxx with target region geo code (i.e. for eastus, the geo code is eus)
"privatelink.adf.azure.com",
"privatelink.afs.azure.net",
"privatelink.agentsvc.azure-automation.net",
"privatelink.analysis.windows.net",
"privatelink.api.azureml.ms",
"privatelink.azconfig.io",
"privatelink.azure-api.net",
"privatelink.azure-automation.net",
"privatelink.azurecr.io",
"privatelink.azure-devices.net",
"privatelink.azure-devices-provisioning.net",
"privatelink.azuredatabricks.net",
"privatelink.azurehdinsight.net",
"privatelink.azurehealthcareapis.com",
"privatelink.azurestaticapps.net",
"privatelink.azuresynapse.net",
"privatelink.azurewebsites.net",
"privatelink.batch.azure.com",
"privatelink.blob.core.windows.net",
"privatelink.cassandra.cosmos.azure.com",
"privatelink.cognitiveservices.azure.com",
"privatelink.database.windows.net",
"privatelink.datafactory.azure.net",
"privatelink.dev.azuresynapse.net",
"privatelink.dfs.core.windows.net",
"privatelink.dicom.azurehealthcareapis.com",
"privatelink.digitaltwins.azure.net",
"privatelink.directline.botframework.com",
"privatelink.documents.azure.com",
"privatelink.eventgrid.azure.net",
"privatelink.file.core.windows.net",
"privatelink.gremlin.cosmos.azure.com",
"privatelink.guestconfiguration.azure.com",
"privatelink.his.arc.azure.com",
"privatelink.dp.kubernetesconfiguration.azure.com",
"privatelink.managedhsm.azure.net",
"privatelink.mariadb.database.azure.com",
"privatelink.media.azure.net",
"privatelink.mongo.cosmos.azure.com",
"privatelink.monitor.azure.com",
"privatelink.mysql.database.azure.com",
"privatelink.notebooks.azure.net",
"privatelink.ods.opinsights.azure.com",
"privatelink.oms.opinsights.azure.com",
"privatelink.pbidedicated.windows.net",
"privatelink.postgres.database.azure.com",
"privatelink.prod.migration.windowsazure.com",
"privatelink.purview.azure.com",
"privatelink.purviewstudio.azure.com",
"privatelink.queue.core.windows.net",
"privatelink.redis.cache.windows.net",
"privatelink.redisenterprise.cache.azure.net",
"privatelink.search.windows.net",
"privatelink.service.signalr.net",
"privatelink.servicebus.windows.net",
"privatelink.siterecovery.windowsazure.com",
"privatelink.sql.azuresynapse.net",
"privatelink.table.core.windows.net",
"privatelink.table.cosmos.azure.com",
"privatelink.tip1.powerquery.microsoft.com",
"privatelink.token.botframework.com",
"privatelink.vaultcore.azure.net",
"privatelink.web.core.windows.net",
"privatelink.webpubsub.azure.com"
]
},
"parPrivateDnsZoneAutoMergeAzureBackupZone": {
"value": true
},
"parVirtualNetworkIdToLink": {
"value": "/subscriptions/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/resourceGroups/HUB_Networking_POC/providers/Microsoft.Network/virtualNetworks/alz-hub-eastus"
},
"parTags": {
"value": {
"Environment": "Live"
}
},
"parVirtualNetworkIdToLinkFailover": {
"value": "/subscriptions/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/resourceGroups/HUB_Networking_POC/providers/Microsoft.Network/virtualNetworks/alz-hub-eastus-failover"
},
"parTelemetryOptOut": {
"value": false
},
"parGlobalResourceLock": {
"value": {
"kind": "None",
"notes": "This lock was created by the ALZ Bicep vWAN Connectivity Module."
}
},
"parVirtualWanLock": {
"value": {
"kind": "None",
"notes": "This lock was created by the ALZ Bicep vWAN Connectivity Module."
}
},
"parVirtualWanHubsLock": {
"value": {
"kind": "None",
"notes": "This lock was created by the ALZ Bicep vWAN Connectivity Module."
}
},
"parDdosLock": {
"value": {
"kind": "None",
"notes": "This lock was created by the ALZ Bicep vWAN Connectivity Module."
}
},
"parAzureFirewallLock": {
"value": {
"kind": "None",
"notes": "This lock was created by the ALZ Bicep vWAN Connectivity Module."
}
},
"parVpnGatewayLock": {
"value": {
"kind": "None",
"notes": "This lock was created by the ALZ Bicep vWAN Connectivity Module."
}
},
"parPrivateDNSZonesLock": {
"value": {
"kind": "None",
"notes": "This lock was created by the ALZ Bicep vWAN Connectivity Module."
}
},
"parExpressRouteGatewayLock": {
"value": {
"kind": "None",
"notes": "This lock was created by the ALZ Bicep vWAN Connectivity Module."
}
}
}
}

0 comments on commit 07bc5a9

Please sign in to comment.