machv

locals {
  ike_secret = "tajneheslo"

  # Azure site
  ip_azure_range = "10.10.0.0/16"
  ip_azure_subnet_main = "10.10.0.0/24"
  ip_azure_subnet_gw = "10.10.255.240/28"
  asn_azure = "65010"

  # On-premises site

machv

Packer template for Debian with "SSH Direct" on Hyper-V

Output of this Packer template is Hyper-V Gen2 VM with Debian 10 that supports direct connection via vsock thus no internet connectivity is needed.

How to build

$key = "$env:USERPROFILE\.ssh\lab01_rsa"
$publicKey = Get-Content "$($key).pub"

machv

function Invoke-AzVMDiskSnapshot {
    param(
        [Parameter(Mandatory = $true)]
        [string]$VMResourceGroupName,
        [Parameter(Mandatory = $true)]
        [string]$VMName,
        [string]$SnapshotsResourceGroupName = $null
        [bool]$Shutdown = $true
    )

machv

Install

New-AzRoleDefinition -InputFile rbac.json

Root management group

If you want to link Custom role to the top most root management group (that is always available), use an ID that corresponds with AAD Tenant ID GUID.

FYI

machv

Azure Automation Account / Monthly deployment schedules

Configuration options

To set how far in the future (in months) to prepare deployment rings set variable $monthsToProvision

To set deployment rings populate tags to $deploymentRings hash table in format

<TagName> = <Time-Span for delayed deployment>

machv

Synchronize Azure Private DNS Zone records

Prerequisities

Make sure that in addition to Az PowerShell module you also have Az.PrivateDns module installed.

About

Function Sync-DnsZone synchronizes resource records from source DNS zone to destination DNS zone, if you want to achive two-way sync you need to execute the same function twice with switched source and destination.

Customization

machv

#region Functions
function ConvertFrom-Timestamp {
    param(
        [Parameter(Mandatory = $true)]
        [int]$Timestamp
    )

    $utc = (Get-Date 01.01.1970) + ([System.TimeSpan]::fromseconds($Timestamp))
    $datetime = [datetime]::SpecifyKind($utc, 'Utc').ToLocalTime()

machv

machv

#region Azure Automation bootstrap
try
{
    $servicePrincipalConnection = Get-AutomationConnection -Name "AzureRunAsConnection"
    "Logging in to Azure..."
    Connect-AzAccount `
        -ServicePrincipal `
        -TenantId $servicePrincipalConnection.TenantId `
        -ApplicationId $servicePrincipalConnection.ApplicationId `
        -CertificateThumbprint $servicePrincipalConnection.CertificateThumbprint 

machv

Param(
  [Parameter (Mandatory = $true)]
  [sring]$DnsName,
  [string]$RouteName
)

if($RouteName -eq "") {
    $RouteName = $DnsName
}