vwan/landingZone.bicep at master · mmMantas/vwan · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
targetScope = 'subscription'

param VWanSubscriptionId string = '6247f2f5-c221-464d-afd3-3ad763a9fc5e'
param hubName string = 'hub'

var landingZone = [
  {
    lzName: 'lz1'
    vnetAddressPrefix: '10.10.20.0/24'
    subnetAddressPrefix: '10.10.20.0/27'
    privateEndpointNetworkPolicies: 'Disabled'
  }
  {
    lzName: 'lz2'
    vnetAddressPrefix: '10.10.30.0/24'
    subnetAddressPrefix: '10.10.30.0/27'
    privateEndpointNetworkPolicies: 'Enabled'
  }
  {
    lzName: 'lz3'
    vnetAddressPrefix: '10.10.40.0/24'
    subnetAddressPrefix: '10.10.40.0/27'
    privateEndpointNetworkPolicies: 'Disabled'
  }
]

resource rg 'Microsoft.Resources/resourceGroups@2021-04-01' = [for (item, lz) in landingZone: {
  name: item.lzName
  location: 'westeurope'
}]

@description('deploy vnet, keyvault and privateEndpoints. There is no DNS at the moment, use host file')
module resources 'modules/lz.bicep' = [for (item, lz) in landingZone: {
  name: '${item.lzName}-deployment'
  scope: rg[lz]
  params:{
    VWanSubscriptionId: VWanSubscriptionId
    virtualHubName: hubName
    lzName: item.lzName
    subnetAddressPrefix: item.subnetAddressPrefix
    vnetAddressPrefix: item.vnetAddressPrefix
    privateEndpointNetworkPolicies: item.privateEndpointNetworkPolicies
    blobPrivateDnsZoneId: '/subscriptions/6247f2f5-c221-464d-afd3-3ad763a9fc5e/resourceGroups/dns/providers/Microsoft.Network/privateDnsZones/privatelink.blob.core.windows.net'
    vaultPrivateDnsZoneId: '/subscriptions/6247f2f5-c221-464d-afd3-3ad763a9fc5e/resourceGroups/dns/providers/Microsoft.Network/privateDnsZones/privatelink.vaultcore.azure.net'
  }
}]