added 810 net gateway

810_onprem_vpn_gateway_p2s_hub_spokes/modules/spoke/output.tf

@@ -1,3 +1,3 @@
 output "vm_linux_private_ip" {
- value = azurerm_linux_virtual_machine.vm.private_ip_address
+ value = module.vm-spoke.vm_private_ip
 }

810_onprem_vpn_gateway_p2s_hub_spokes/modules/spoke/vm_linux.tf

@@ -0,0 +1,10 @@
+module "vm-spoke" {
+ source = "../vm_linux"
+
+ vm_name = "vm-linux-${var.spoke_name}"
+ resource_group_name = azurerm_resource_group.rg.name
+ location = azurerm_resource_group.rg.location
+ subnet_id = azurerm_subnet.subnet-vm.id
+ enable_public_ip = true
+ install_webapp = true
+}

810_onprem_vpn_gateway_p2s_hub_spokes/modules/vm_linux/doc.md

@@ -0,0 +1,49 @@
+<!-- BEGIN_TF_DOCS -->
+## Requirements
+
+| Name | Version |
+|------|---------|
+| <a name="requirement_terraform"></a> [terraform](#requirement\_terraform) | >= 1.2.8 |
+| <a name="requirement_azurerm"></a> [azurerm](#requirement\_azurerm) | >= 3.69.0 |
+
+## Providers
+
+| Name | Version |
+|------|---------|
+| <a name="provider_azurerm"></a> [azurerm](#provider\_azurerm) | >= 3.69.0 |
+
+## Modules
+
+No modules.
+
+## Resources
+
+| Name | Type |
+|------|------|
+| [azurerm_linux_virtual_machine.vm](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/linux_virtual_machine) | resource |
+| [azurerm_network_interface.nic_vm](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/network_interface) | resource |
+| [azurerm_public_ip.pip_vm](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/public_ip) | resource |
+| [azurerm_resource_group.rg](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/resource_group) | resource |
+| [azurerm_role_assignment.role_contributor](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/role_assignment) | resource |
+| [azurerm_user_assigned_identity.identity_vm](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/user_assigned_identity) | resource |
+| [azurerm_virtual_machine_extension.vm_extension_linux](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/virtual_machine_extension) | resource |
+
+## Inputs
+
+| Name | Description | Type | Default | Required |
+|------|-------------|------|---------|:--------:|
+| <a name="input_admin_password"></a> [admin\_password](#input\_admin\_password) | n/a | `any` | n/a | yes |
+| <a name="input_admin_username"></a> [admin\_username](#input\_admin\_username) | n/a | `any` | n/a | yes |
+| <a name="input_enable_public_ip"></a> [enable\_public\_ip](#input\_enable\_public\_ip) | n/a | `any` | n/a | yes |
+| <a name="input_location"></a> [location](#input\_location) | n/a | `any` | n/a | yes |
+| <a name="input_resource_group_name"></a> [resource\_group\_name](#input\_resource\_group\_name) | n/a | `any` | n/a | yes |
+| <a name="input_subnet_id"></a> [subnet\_id](#input\_subnet\_id) | n/a | `any` | n/a | yes |
+| <a name="input_subscription_id"></a> [subscription\_id](#input\_subscription\_id) | n/a | `any` | n/a | yes |
+| <a name="input_tags"></a> [tags](#input\_tags) | n/a | `any` | n/a | yes |
+| <a name="input_vm_name"></a> [vm\_name](#input\_vm\_name) | n/a | `any` | n/a | yes |
+| <a name="input_vm_size"></a> [vm\_size](#input\_vm\_size) | n/a | `any` | n/a | yes |
+
+## Outputs
+
+No outputs.
+<!-- END_TF_DOCS -->

810_onprem_vpn_gateway_p2s_hub_spokes/modules/vm_linux/main.tf

@@ -0,0 +1,53 @@
+resource "azurerm_public_ip" "pip_vm" {
+ count = var.enable_public_ip ? 1 : 0
+ name = "pip-${var.vm_name}"
+ resource_group_name = var.resource_group_name
+ location = var.location
+ allocation_method = "Static"
+ sku = "Standard"
+ sku_tier = "Regional"
+}
+
+resource "azurerm_network_interface" "nic_vm" {
+ name = "nic-${var.vm_name}"
+ resource_group_name = var.resource_group_name
+ location = var.location
+
+ ip_configuration {
+ name = "internal"
+ subnet_id = var.subnet_id
+ private_ip_address_allocation = "Dynamic"
+ public_ip_address_id = var.enable_public_ip ? azurerm_public_ip.pip_vm.0.id : null
+ }
+}
+
+resource "azurerm_linux_virtual_machine" "vm" {
+ name = var.vm_name
+ resource_group_name = var.resource_group_name
+ location = var.location
+ size = "Standard_B2ats_v2" # "Standard_B2als_v2"
+ disable_password_authentication = false
+ admin_username = "azureuser"
+ admin_password = "@Aa123456789"
+ network_interface_ids = [azurerm_network_interface.nic_vm.id]
+ priority = "Spot"
+ eviction_policy = "Deallocate"
+
+ custom_data = var.install_webapp ? filebase64("./install-webapp.sh") : null
+
+ os_disk {
+ caching = "ReadWrite"
+ storage_account_type = "Standard_LRS"
+ }
+
+ source_image_reference {
+ publisher = "canonical"
+ offer = "0001-com-ubuntu-server-jammy"
+ sku = "22_04-lts-gen2"
+ version = "latest"
+ }
+
+ boot_diagnostics {
+ storage_account_uri = null
+ }
+}

810_onprem_vpn_gateway_p2s_hub_spokes/modules/vm_linux/output.tf

@@ -0,0 +1,3 @@
+output "vm_private_ip" {
+ value = azurerm_linux_virtual_machine.vm.private_ip_address
+}

810_onprem_vpn_gateway_p2s_hub_spokes/modules/vm_linux/variables.tf

@@ -0,0 +1,12 @@
+variable "resource_group_name" {}
+variable "location" {}
+variable "subnet_id" {}
+variable "vm_name" {}
+variable "enable_public_ip" {
+ type = bool
+ default = false
+}
+variable "install_webapp" {
+ type = bool
+ default = false
+}

810_onprem_vpn_gateway_p2s_hub_spokes/output.tf

@@ -1,5 +1,5 @@
 output "vm_linux_hub_private_ip" {
- value = azurerm_linux_virtual_machine.vm.private_ip_address
+ value = module.vm-hub.vm_private_ip
 }
 
 output "storage_account_url" {

810_onprem_vpn_gateway_p2s_hub_spokes/private_dns_zone.tf

@@ -8,7 +8,7 @@ resource "azurerm_private_dns_a_record" "a-record" {
  zone_name = azurerm_private_dns_zone.private-dns-zone.name
  resource_group_name = azurerm_private_dns_zone.private-dns-zone.resource_group_name
  ttl = 300
- records = [azurerm_linux_virtual_machine.vm.private_ip_address] # just example IP address
+ records = [module.vm-hub.vm_private_ip] # just example IP address
 }
 
 resource "azurerm_private_dns_zone_virtual_network_link" "link-dns-vnet" {