Add a virtual machine

Author: moazrai

.terraform.lock.hcl

@@ -0,0 +1,36 @@
+resource "azurerm_linux_virtual_machine" "vm" {
+  name                = "tutorial-vm"
+  location            = azurerm_resource_group.rg.location
+  resource_group_name = azurerm_resource_group.rg.name
+  size                = "Standard_D2ads_v5"
+  admin_username      = var.vm_admin_username
+  network_interface_ids = [
+    azurerm_network_interface.nic.id
+  ]
+
+  admin_ssh_key {
+    username   = var.vm_admin_username
+    public_key = tls_private_key.vm_ssh_pk.public_key_openssh
+  }
+
+  os_disk {
+    caching              = "ReadWrite"
+    storage_account_type = "Standard_LRS"
+  }
+
+  source_image_reference {
+    publisher = "Canonical"
+    offer     = "UbuntuServer"
+    sku       = "18.04-LTS"
+    version   = "latest"
+  }
+
+  computer_name                   = "tutorial-vm"
+  disable_password_authentication = true
+}
+
+# RSA key of size 4096 bits
+resource "tls_private_key" "vm_ssh_pk" {
+  algorithm = "RSA"
+  rsa_bits  = 4096
+}

computes.tf

@@ -4,19 +4,40 @@ resource "azurerm_virtual_network" "vnet" {
   location            = azurerm_resource_group.rg.location
   resource_group_name = azurerm_resource_group.rg.name
   address_space       = ["10.0.0.0/16"]
+  tags                = var.tags
+}
 
-  subnet {
-    name           = "subnet1"
-    address_prefix = "10.0.1.0/24"
-  }
-
-  tags = var.tags
+resource "azurerm_subnet" "subnet" {
+  name                 = "tutorial-subnet"
+  resource_group_name  = azurerm_resource_group.rg.name
+  virtual_network_name = azurerm_virtual_network.vnet.name
+  address_prefixes     = ["10.0.1.0/24"]
 }
 
-resource "azurerm_public_ip" "vm-public-ip" {
+resource "azurerm_public_ip" "vm_public_ip" {
   name                = "vm-public-ip"
-  resource_group_name = azurerm_resource_group.rg.name
   location            = azurerm_resource_group.rg.location
-  allocation_method   = "Static"
+  resource_group_name = azurerm_resource_group.rg.name
+  allocation_method   = "Dynamic"
   tags                = var.tags
 }
+
+resource "azurerm_network_interface" "nic" {
+  name                = "vm-nic"
+  location            = azurerm_resource_group.rg.location
+  resource_group_name = azurerm_resource_group.rg.name
+
+  ip_configuration {
+    name                          = "internal"
+    subnet_id                     = azurerm_subnet.subnet.id
+    private_ip_address_allocation = "Dynamic"
+    public_ip_address_id          = azurerm_public_ip.vm_public_ip.id
+  }
+
+  tags = var.tags
+}
+
+resource "azurerm_network_interface_security_group_association" "nic_nsg" {
+  network_interface_id      = azurerm_network_interface.nic.id
+  network_security_group_id = azurerm_network_security_group.nsg.id
+}

networks.tf

@@ -1,3 +1,12 @@
 output "resource_group_id" {
   value = azurerm_resource_group.rg.id
 }
+
+output "tls_private_key" {
+  value     = tls_private_key.vm_ssh_pk.private_key_pem
+  sensitive = true
+}
+
+output "vm_public_ip" {
+  value = azurerm_public_ip.vm_public_ip.ip_address
+}

outputs.tf

@@ -3,3 +3,23 @@ resource "azurerm_resource_group" "rg" {
   location = var.location
   tags     = var.tags
 }
+
+resource "azurerm_network_security_group" "nsg" {
+  name                = "tutorial-network-security-group"
+  location            = azurerm_resource_group.rg.location
+  resource_group_name = azurerm_resource_group.rg.name
+
+  security_rule {
+    name                       = "allow-ssh"
+    priority                   = 100
+    direction                  = "Inbound"
+    access                     = "Allow"
+    protocol                   = "Tcp"
+    source_port_range          = "*"
+    destination_port_range     = "22"
+    source_address_prefix      = "*"
+    destination_address_prefix = "*"
+  }
+
+  tags = var.tags
+}

resource-groups.tf

@@ -0,0 +1,14 @@
+resource "random_id" "rg_storage_account" {
+  keepers = {
+    resource_group = azurerm_resource_group.rg.name
+  }
+  byte_length = 8
+}
+resource "azurerm_storage_account" "storage_account" {
+  name                     = "storage${random_id.rg_storage_account.hex}"
+  location                 = azurerm_resource_group.rg.location
+  resource_group_name      = azurerm_resource_group.rg.name
+  account_tier             = "Standard"
+  account_replication_type = "LRS"
+  tags                     = var.tags
+}

storage.tf

@@ -1,6 +1,7 @@
 resource_group_name = "my-rg"
-location            = "westus"
+location            = "centralus"
 tags = {
   environment = "dev"
   team        = "DevOps"
 }
+vm_admin_username = "moazshorbagy"

terraform.tfvars

@@ -15,3 +15,8 @@ variable "tags" {
     team        = "DevOps"
   }
 }
+
+variable "vm_admin_username" {
+  type    = string
+  default = "adminuser"
+}