Practical Exercises: Infrastructure as Code

Transcription

1 Practical Exercises: Infrastructure as Code Module 1: Azure Automation Create an Automation Account (Portal) 1. From the Azure portal, create a new Automation account with the following settings: Name: DevOpsLabs1 Subscription: your Azure subscription Resource Group: DevOpsLab1RG Location: East US 2 Create Azure Run As Account: Yes Configure Automation assets (Portal) 1. From the Azure portal, update Azure modules in the Automation Account assets. Wait until the update completes. 2. Import the AzureRM.Network module. Make sure to wait until the import completes. 3. From the Azure portal, create Automation variables in the Automation account you created in the previous exercise with the following settings: Name: VM1Name iii. Value: vm1 Name: VM2Name iii. Value: vm2

2 Name: ResourceGroupName iii. Value: DevOpsLab2RG Name: UserName iii. Value: Student Name: Password iii. Value: Pa55w.rd1234 iv. Encrypted: Yes Name: Location iii. Value: eastus2 Create and run an Automation Windows PowerShell workflow-based textual runbook that provisions two load-balanced Azure VM in parallel (Portal) 1. From the Azure portal, in the Automation account you created in the first exercise of this lab, create and publish an Automation runbook with the following settings: Name: Provision-lab-textual-workflow Runbook type: PowerShell Workflow Runbook code: workflow Provision-lab-textual-workflow { $c = Get-AutomationConnection -Name 'AzureRunAsConnection' Add-AzureRmAccount -ServicePrincipal -Tenant $c.tenantid -ApplicationID $c.applicationid -CertificateThumbprint $c.certificatethumbprint $vm1name = Get-AutomationVariable -Name 'VM1Name' $vm2name = Get-AutomationVariable -Name 'VM2Name' $resourcegroupname = Get-AutomationVariable -Name 'ResourceGroupName' $location = Get-AutomationVariable -Name 'Location' $username = Get-AutomationVariable -Name 'UserName'

3 $password = Get-AutomationVariable -Name 'Password' $vmsize = 'Standard_D1_v2' $vnetname = $resourcegroupname + '-vnet1' $vnetprefix = ' /16' $subnet1name = 'subnet1' $subnet1prefix = ' /24' $avsetname = $resourcegroupname + '-avset1' $publishername = 'MicrosoftWindowsServer' $offer = 'WindowsServer' $sku = '2016-Datacenter' $version = 'latest' $vmosdisksize = 128 $publicipvm1name = $resourcegroupname + $vm1name + '-pip1' $publicipvm2name = $resourcegroupname + $vm2name + '-pip1' $nic1name = $resourcegroupname + $vm1name + '-nic1' $nic2name = $resourcegroupname + $vm2name + '-nic1' $vm1osdiskname = $resourcegroupname + $vm1name + 'osdisk' $vm2osdiskname = $resourcegroupname + $vm2name + 'osdisk' $resourcegroup = New-AzureRmResourceGroup -Name $resourcegroupname - Location $location $securepassword = ConvertTo-SecureString -String $password -AsPlainText -Force $credentials = New-Object System.Management.Automation.PSCredential - ArgumentList $username,$securepassword $avset = New-AzureRmAvailabilitySet -ResourceGroupName $resourcegroupname -Name $avsetname -Location $location - PlatformUpdateDomainCount 5 -PlatformFaultDomainCount 3 $subnet = New-AzureRmVirtualNetworkSubnetConfig -Name $using:subnet1name -AddressPrefix $using:subnet1prefix $vnet = New-AzureRmVirtualNetwork -Name $using:vnetname - AddressPrefix $using:vnetprefix -Subnet $using:subnet

4 Parallel { $vnet = Get-AzureRmVirtualNetwork -Name $using:vnetname - $publicipvm1 = New-AzureRmPublicIpAddress -Name $using:publicipvm1name - AllocationMethod Dynamic $nic1 = New-AzureRmNetworkInterface -Name $using:nic1name - SubnetId $vnet.subnets[0].id -PublicIpAddressId $publicipvm1.id $vm1 = New-AzureRmVMConfig -VMName $using:vm1name -VMSize $using:vmsize -AvailabilitySetId $using:avset.id $randomnumber1 = Get-Random -Minimum 0 -Maximum $tempname1 = ($using:resourcegroupname + $using:vm1name + $randomnumber1).tolower() $nameavail1 = Get-AzureRmStorageAccountNameAvailability -Name $tempname1 If ($nameavail1.nameavailable -ne $true) { Do { $randomnumber1 = Get-Random -Minimum 0 -Maximum $tempname1 = $using:resourcegroupname + $using:vm1name + $randomnumber1 $nameavail1 = Get-AzureRmStorageAccountNameAvailability -Name $tempname1 Until ($nameavail1.nameavailable -eq $True) $storageaccountname1 = $tempname1 $storageaccount1 = New-AzureRmStorageAccount -ResourceGroupName $using:resourcegroupname -Name $storageaccountname1 -SkuName "Standard_LRS" -Kind "Storage" -Location $using:location $vm1 = Set-AzureRmVMOperatingSystem -VM $vm1 -Windows -ComputerName $using:vm1name -Credential $using:credentials -ProvisionVMAgent - EnableAutoUpdate $vm1 = Set-AzureRmVMSourceImage -VM $vm1 -PublisherName $using:publishername -Offer $using:offer -Skus $using:sku -Version $using:version $blobpath1 = 'vhds/' + $using:vm1osdiskname + '.vhd' $osdiskuri1 = $storageaccount1.primaryendpoints.blob.tostring() + $blobpath1

5 $vm1 = Set-AzureRmVMOSDisk -VM $vm1 -Name $using:vm1osdiskname - VhdUri $osdiskuri1 -CreateOption fromimage $vm1 = Add-AzureRmVMNetworkInterface -VM $vm1 -Id $nic1.id New-AzureRmVM - -Location $using:location -VM $vm1 $vnet = Get-AzureRmVirtualNetwork -Name $using:vnetname - $publicipvm2 = New-AzureRmPublicIpAddress -Name $using:publicipvm2name - AllocationMethod Dynamic $nic2 = New-AzureRmNetworkInterface -Name $using:nic2name - SubnetId $vnet.subnets[0].id -PublicIpAddressId $publicipvm2.id $vm2 = New-AzureRmVMConfig -VMName $using:vm2name -VMSize $using:vmsize -AvailabilitySetId $using:avset.id $randomnumber2 = Get-Random -Minimum 0 -Maximum $tempname2 = ($using:resourcegroupname + $using:vm2name + $randomnumber2).tolower() $nameavail2 = Get-AzureRmStorageAccountNameAvailability -Name $tempname2 If ($nameavail2.nameavailable -ne $true) { Do { $randomnumber2 = Get-Random -Minimum 0 -Maximum $tempname2 = $using:resourcegroupname + $using:vm2name + $randomnumber2 $nameavail2 = Get-AzureRmStorageAccountNameAvailability -Name $tempname2 Until ($nameavail2.nameavailable -eq $True) $storageaccountname2 = $tempname2 $storageaccount2 = New-AzureRmStorageAccount -ResourceGroupName $using:resourcegroupname -Name $storageaccountname2 -SkuName "Standard_LRS" -Kind "Storage" -Location $using:location $vm2 = Set-AzureRmVMOperatingSystem -VM $vm2 -Windows -ComputerName $using:vm2name -Credential $using:credentials -ProvisionVMAgent - EnableAutoUpdate $vm2 = Set-AzureRmVMSourceImage -VM $vm2 -PublisherName $using:publishername -Offer $using:offer -Skus $using:sku -Version $using:version

6 $vm2 = Set-AzureRmVMOSDisk -VM $vm2 -Name $using:vm2osdiskname - StorageAccountType StandardLRS -DiskSizeInGB $using:vmosdisksize -CreateOption FromImage -Caching ReadWrite $blobpath2 = 'vhds/' + $using:vm2osdiskname + '.vhd' $osdiskuri2 = $storageaccount2.primaryendpoints.blob.tostring() + $blobpath2 $vm2 = Set-AzureRmVMOSDisk -VM $vm2 -Name $using:vm2osdiskname - VhdUri $osdiskuri2 -CreateOption fromimage $vm2 = Add-AzureRmVMNetworkInterface -VM $vm2 -Id $nic2.id New-AzureRmVM - -Location $using:location -VM $vm2 $publiciplbname = $using:resourcegroupname + 'lb-pip1' $feiplbconfigname = $using:resourcegroupname + '-felbipconfig' $beaddresspoolconfigname = $using:resourcegroupname + '-beipapconfig' $lbname = $using:resourcegroupname + 'lb' $publiciplb = New-AzureRmPublicIpAddress -Name $publiciplbname - AllocationMethod Dynamic $feiplbconfig = New-AzureRmLoadBalancerFrontendIpConfig -Name $feiplbconfigname -PublicIpAddress $publiciplb $beipaaddresspoolconfig = New- AzureRmLoadBalancerBackendAddressPoolConfig -Name $beaddresspoolconfigname $healthprobeconfig = New-AzureRmLoadBalancerProbeConfig -Name HealthProbe -RequestPath '\' -Protocol http -Port 80 -IntervalInSeconds 15 - ProbeCount 2 $lbrule = New-AzureRmLoadBalancerRuleConfig -Name HTTP - FrontendIpConfiguration $feiplbconfig -BackendAddressPool $beipaaddresspoolconfig -Probe $healthprobe -Protocol Tcp -FrontendPort 80 - BackendPort 80 $lb = New-AzureRmLoadBalancer -ResourceGroupName $using:resourcegroupname -Name $lbname -Location $using:location - FrontendIpConfiguration $feiplbconfig -LoadBalancingRule $lbrule - BackendAddressPool $beipaaddresspoolconfig -Probe $healthprobeconfig $nic1 = Get-AzureRmNetworkInterface -Name $using:nic1name - $nic1.ipconfigurations[0].loadbalancerbackendaddresspools = $beipaaddresspoolconfig

7 $nic2 = Get-AzureRmNetworkInterface -Name $using:nic2name - $nic2.ipconfigurations[0].loadbalancerbackendaddresspools = $beipaaddresspoolconfig Set-AzureRmNetworkInterface -NetworkInterface $nic1 Set-AzureRmNetworkInterface -NetworkInterface $nic2 2. Start the runbook and ensure that it successfully provisions two virtual machines and an external load balancer. Create and run an Automation Windows PowerShell-based textual runbook that de-provisions the lab environment (Portal) 1. From the Azure portal, in the Automation account you created in the first exercise of this lab, create and publish an Automation runbook with the following settings: Name: Deprovision-lab-textual-runbook Runbook type: PowerShell Runbook code: $c = Get-AutomationConnection -Name 'AzureRunAsConnection' Add-AzureRmAccount -ServicePrincipal -Tenant $c.tenantid -ApplicationID $c.applicationid -CertificateThumbprint $c.certificatethumbprint $resourcegroupname = Get-AutomationVariable -Name 'ResourceGroupName' Remove-AzureRmResourceGroup -Name $resourcegroupname -Force 2. The purpose of the runbook is to remove the resource group containing all of our lab resources. Do NOT run the runbook, since you will be using these resources in upcoming labs of this course.