-
-
Save jofultz/1d27fb3877ccc4c18c4c1c73355d9dfa to your computer and use it in GitHub Desktop.
ARM for Security hardened Service Fabric cluster (ALB + ILB)
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| { | |
| "$schema": "http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json", | |
| "contentVersion": "1.0.0.0", | |
| "parameters": { | |
| "clusterLocation": { | |
| "type": "string", | |
| "metadata": { | |
| "description": "Location of the Cluster" | |
| } | |
| }, | |
| "clusterName": { | |
| "type": "string", | |
| "defaultValue": "sfcluster", | |
| "metadata": { | |
| "description": "Name of your cluster - Between 3 and 23 characters. Letters and numbers only" | |
| } | |
| }, | |
| "adminUserName": { | |
| "type": "string", | |
| "metadata": { | |
| "description": "Remote desktop user Id" | |
| } | |
| }, | |
| "adminPassword": { | |
| "type": "securestring", | |
| "metadata": { | |
| "description": "Remote desktop user password. Must be a strong password" | |
| } | |
| }, | |
| "vmImagePublisher": { | |
| "type": "string", | |
| "defaultValue": "MicrosoftWindowsServer", | |
| "metadata": { | |
| "description": "VM image Publisher" | |
| } | |
| }, | |
| "vmImageOffer": { | |
| "type": "string", | |
| "defaultValue": "WindowsServer", | |
| "metadata": { | |
| "description": "VM image offer" | |
| } | |
| }, | |
| "vmImageSku": { | |
| "type": "string", | |
| "defaultValue": "2012-R2-Datacenter", | |
| "metadata": { | |
| "description": "VM image SKU" | |
| } | |
| }, | |
| "vmImageVersion": { | |
| "type": "string", | |
| "defaultValue": "latest", | |
| "metadata": { | |
| "description": "VM image version" | |
| } | |
| }, | |
| "loadBalancedAppPort1": { | |
| "type": "int", | |
| "defaultValue": 80, | |
| "metadata": { | |
| "description": "Input endpoint1 for the application to use. Replace it with what your application uses" | |
| } | |
| }, | |
| "loadBalancedAppPort2": { | |
| "type": "int", | |
| "defaultValue": 8081, | |
| "metadata": { | |
| "description": "Input endpoint2 for the application to use. Replace it with what your application uses" | |
| } | |
| }, | |
| "certificateStoreValue": { | |
| "type": "string", | |
| "allowedValues": [ | |
| "My" | |
| ], | |
| "defaultValue": "My", | |
| "metadata": { | |
| "description": "The store name where the cert will be deployed in the virtual machine" | |
| } | |
| }, | |
| "certificateThumbprint": { | |
| "type": "string", | |
| "metadata": { | |
| "description": "Certificate Thumbprint" | |
| } | |
| }, | |
| "sourceVaultValue": { | |
| "type": "string", | |
| "metadata": { | |
| "description": "Resource Id of the key vault, is should be in the format of /subscriptions/<Sub ID>/resourceGroups/<Resource group name>/providers/Microsoft.KeyVault/vaults/<vault name>" | |
| } | |
| }, | |
| "certificateUrlValue": { | |
| "type": "string", | |
| "metadata": { | |
| "description": "Refers to the location URL in your key vault where the certificate was uploaded, it is should be in the format of https://<name of the vault>.vault.azure.net:443/secrets/<exact location>" | |
| } | |
| }, | |
| "clusterProtectionLevel": { | |
| "type": "string", | |
| "allowedValues": [ | |
| "None", | |
| "Sign", | |
| "EncryptAndSign" | |
| ], | |
| "defaultValue": "EncryptAndSign", | |
| "metadata": { | |
| "description": "Protection level.Three values are allowed - EncryptAndSign, Sign, None. It is best to keep the default of EncryptAndSign, unless you have a need not to" | |
| } | |
| }, | |
| "storageAccountType": { | |
| "type": "string", | |
| "allowedValues": [ | |
| "Standard_LRS", | |
| "Standard_GRS" | |
| ], | |
| "defaultValue": "Standard_LRS", | |
| "metadata": { | |
| "description": "Replication option for the VM image storage account" | |
| } | |
| }, | |
| "supportLogStorageAccountType": { | |
| "type": "string", | |
| "allowedValues": [ | |
| "Standard_LRS", | |
| "Standard_GRS" | |
| ], | |
| "defaultValue": "Standard_LRS", | |
| "metadata": { | |
| "description": "Replication option for the support log storage account" | |
| } | |
| }, | |
| "applicationDiagnosticsStorageAccountType": { | |
| "type": "string", | |
| "allowedValues": [ | |
| "Standard_LRS", | |
| "Standard_GRS" | |
| ], | |
| "defaultValue": "Standard_LRS", | |
| "metadata": { | |
| "description": "Replication option for the application diagnostics storage account" | |
| } | |
| }, | |
| "nt0InstanceCount": { | |
| "type": "int", | |
| "defaultValue": 5, | |
| "metadata": { | |
| "description": "Instance count for node type" | |
| } | |
| } | |
| }, | |
| "variables": { | |
| "computeLocation": "[parameters('clusterLocation')]", | |
| "dnsName": "[parameters('clusterName')]", | |
| "vmStorageAccountName": "[toLower(concat(uniqueString(resourceGroup().id), '1' ))]", | |
| "vmName": "vm", | |
| "publicIPAddressName": "PublicIP-VM", | |
| "publicIPAddressType": "Dynamic", | |
| "vmStorageAccountContainerName": "vhds", | |
| "virtualNetworkName": "VNet", | |
| "addressPrefix": "10.0.0.0/16", | |
| "nicName": "NIC", | |
| "lbName": "LoadBalancer", | |
| "lbIPName": "PublicIP-LB-FE", | |
| "availSetName": "AvailabilitySet", | |
| "maxPercentUpgradeDomainDeltaUnhealthyNodes": "100", | |
| "vnetID": "[resourceId('Microsoft.Network/virtualNetworks',variables('virtualNetworkName'))]", | |
| "overProvision": "false", | |
| "vmssApiVersion": "2016-03-30", | |
| "lbApiVersion": "2015-06-15", | |
| "vNetApiVersion": "2015-06-15", | |
| "storageApiVersion": "2016-01-01", | |
| "publicIPApiVersion": "2015-06-15", | |
| "nt0applicationStartPort": "20000", | |
| "nt0applicationEndPort": "30000", | |
| "nt0ephemeralStartPort": "49152", | |
| "nt0ephemeralEndPort": "65534", | |
| "nt0fabricTcpGatewayPort": "19000", | |
| "nt0fabricHttpGatewayPort": "19080", | |
| "subnet0Name": "Subnet-0", | |
| "subnet0Prefix": "10.0.0.0/24", | |
| "subnet0Ref": "[concat(variables('vnetID'),'/subnets/',variables('subnet0Name'))]", | |
| "subnet1Name": "ServiceSubnet", | |
| "subnet1Prefix": "10.0.1.0/24", | |
| "subnet1Ref": "[concat(variables('vnetID'),'/subnets/',variables('subnet1Name'))]", | |
| "ilbIPAddress": "10.0.1.10", | |
| "supportLogStorageAccountName": "[toLower( concat( uniqueString(resourceGroup().id),'2'))]", | |
| "applicationDiagnosticsStorageAccountName": "[toLower(concat(uniqueString(resourceGroup().id), '3' ))]", | |
| "lbID0": "[resourceId('Microsoft.Network/loadBalancers',concat('LB','-', parameters('clusterName'),'-',variables('vmNodeType0Name')))]", | |
| "lbIPConfig0": "[concat(variables('lbID0'),'/frontendIPConfigurations/LoadBalancerIPConfig')]", | |
| "lbPoolID0": "[concat(variables('lbID0'),'/backendAddressPools/LoadBalancerBEAddressPool')]", | |
| "lbProbeID0": "[concat(variables('ilbID0'),'/probes/FabricGatewayProbe')]", | |
| "lbHttpProbeID0": "[concat(variables('ilbID0'),'/probes/FabricHttpGatewayProbe')]", | |
| "ilbID0": "[resourceId('Microsoft.Network/loadBalancers',concat('ILB','-', parameters('clusterName'),'-',variables('vmNodeType0Name')))]", | |
| "ilbIPConfig0": "[concat(variables('ilbID0'),'/frontendIPConfigurations/LoadBalancerIPConfig')]", | |
| "ilbPoolID0": "[concat(variables('ilbID0'),'/backendAddressPools/LoadBalancerBEAddressPool')]", | |
| "vmNodeType0Name": "[toLower(concat('NT1', variables('vmName')))]", | |
| "vmNodeType0Size": "Standard_D2", | |
| "vmStorageAccountName0": "[toLower(concat(uniqueString(resourceGroup().id), '1', '0' ))]", | |
| "uniqueStringArray0": [ | |
| "[concat(variables('vmStorageAccountName0'), '0')]", | |
| "[concat(variables('vmStorageAccountName0'), '1')]", | |
| "[concat(variables('vmStorageAccountName0'), '2')]", | |
| "[concat(variables('vmStorageAccountName0'), '3')]", | |
| "[concat(variables('vmStorageAccountName0'), '4')]" | |
| ] | |
| }, | |
| "resources": [{ | |
| "apiVersion": "[variables('storageApiVersion')]", | |
| "type": "Microsoft.Storage/storageAccounts", | |
| "name": "[variables('supportLogStorageAccountName')]", | |
| "location": "[variables('computeLocation')]", | |
| "dependsOn": [], | |
| "properties": {}, | |
| "kind": "Storage", | |
| "sku": { | |
| "name": "[parameters('supportLogStorageAccountType')]" | |
| }, | |
| "tags": { | |
| "resourceType": "Service Fabric", | |
| "clusterName": "[parameters('clusterName')]" | |
| } | |
| }, | |
| { | |
| "apiVersion": "[variables('storageApiVersion')]", | |
| "type": "Microsoft.Storage/storageAccounts", | |
| "name": "[variables('applicationDiagnosticsStorageAccountName')]", | |
| "location": "[variables('computeLocation')]", | |
| "dependsOn": [], | |
| "properties": {}, | |
| "kind": "Storage", | |
| "sku": { | |
| "name": "[parameters('applicationDiagnosticsStorageAccountType')]" | |
| }, | |
| "tags": { | |
| "resourceType": "Service Fabric", | |
| "clusterName": "[parameters('clusterName')]" | |
| } | |
| }, | |
| { | |
| "apiVersion": "[variables('vNetApiVersion')]", | |
| "type": "Microsoft.Network/virtualNetworks", | |
| "name": "[variables('virtualNetworkName')]", | |
| "location": "[variables('computeLocation')]", | |
| "properties": { | |
| "addressSpace": { | |
| "addressPrefixes": [ | |
| "[variables('addressPrefix')]" | |
| ] | |
| }, | |
| "subnets": [{ | |
| "name": "[variables('subnet0Name')]", | |
| "properties": { | |
| "addressPrefix": "[variables('subnet0Prefix')]" | |
| } | |
| }, | |
| { | |
| "name": "[variables('subnet1Name')]", | |
| "properties": { | |
| "addressPrefix": "[variables('subnet1Prefix')]" | |
| } | |
| } | |
| ] | |
| }, | |
| "tags": { | |
| "resourceType": "Service Fabric", | |
| "clusterName": "[parameters('clusterName')]" | |
| } | |
| }, | |
| { | |
| "apiVersion": "[variables('publicIPApiVersion')]", | |
| "type": "Microsoft.Network/publicIPAddresses", | |
| "name": "[concat(variables('lbIPName'),'-','0')]", | |
| "location": "[variables('computeLocation')]", | |
| "properties": { | |
| "dnsSettings": { | |
| "domainNameLabel": "[variables('dnsName')]" | |
| }, | |
| "publicIPAllocationMethod": "Dynamic" | |
| }, | |
| "tags": { | |
| "resourceType": "Service Fabric", | |
| "clusterName": "[parameters('clusterName')]" | |
| } | |
| }, | |
| { | |
| "apiVersion": "[variables('lbApiVersion')]", | |
| "type": "Microsoft.Network/loadBalancers", | |
| "name": "[concat('LB','-', parameters('clusterName'),'-',variables('vmNodeType0Name'))]", | |
| "location": "[variables('computeLocation')]", | |
| "dependsOn": [ | |
| "[concat('Microsoft.Network/publicIPAddresses/',concat(variables('lbIPName'),'-','0'))]" | |
| ], | |
| "properties": { | |
| "frontendIPConfigurations": [{ | |
| "name": "LoadBalancerIPConfig", | |
| "properties": { | |
| "publicIPAddress": { | |
| "id": "[resourceId('Microsoft.Network/publicIPAddresses',concat(variables('lbIPName'),'-','0'))]" | |
| } | |
| } | |
| }], | |
| "backendAddressPools": [{ | |
| "name": "LoadBalancerBEAddressPool", | |
| "properties": {} | |
| }], | |
| "loadBalancingRules": [{ | |
| "name": "AppPortLBRule1", | |
| "properties": { | |
| "backendAddressPool": { | |
| "id": "[variables('lbPoolID0')]" | |
| }, | |
| "backendPort": "[parameters('loadBalancedAppPort1')]", | |
| "enableFloatingIP": "false", | |
| "frontendIPConfiguration": { | |
| "id": "[variables('lbIPConfig0')]" | |
| }, | |
| "frontendPort": "[parameters('loadBalancedAppPort1')]", | |
| "idleTimeoutInMinutes": "5", | |
| "probe": { | |
| "id": "[concat(variables('lbID0'),'/probes/AppPortProbe1')]" | |
| }, | |
| "protocol": "tcp" | |
| } | |
| }, | |
| { | |
| "name": "AppPortLBRule2", | |
| "properties": { | |
| "backendAddressPool": { | |
| "id": "[variables('lbPoolID0')]" | |
| }, | |
| "backendPort": "[parameters('loadBalancedAppPort2')]", | |
| "enableFloatingIP": "false", | |
| "frontendIPConfiguration": { | |
| "id": "[variables('lbIPConfig0')]" | |
| }, | |
| "frontendPort": "[parameters('loadBalancedAppPort2')]", | |
| "idleTimeoutInMinutes": "5", | |
| "probe": { | |
| "id": "[concat(variables('lbID0'),'/probes/AppPortProbe2')]" | |
| }, | |
| "protocol": "tcp" | |
| } | |
| } | |
| ], | |
| "probes": [{ | |
| "name": "AppPortProbe1", | |
| "properties": { | |
| "intervalInSeconds": 5, | |
| "numberOfProbes": 2, | |
| "port": "[parameters('loadBalancedAppPort1')]", | |
| "protocol": "tcp" | |
| } | |
| }, | |
| { | |
| "name": "AppPortProbe2", | |
| "properties": { | |
| "intervalInSeconds": 5, | |
| "numberOfProbes": 2, | |
| "port": "[parameters('loadBalancedAppPort2')]", | |
| "protocol": "tcp" | |
| } | |
| } | |
| ], | |
| "inboundNatPools": [] | |
| }, | |
| "tags": { | |
| "resourceType": "Service Fabric", | |
| "clusterName": "[parameters('clusterName')]" | |
| } | |
| }, | |
| { | |
| "apiVersion": "[variables('lbApiVersion')]", | |
| "type": "Microsoft.Network/loadBalancers", | |
| "name": "[concat('ILB','-', parameters('clusterName'),'-',variables('vmNodeType0Name'))]", | |
| "location": "[variables('computeLocation')]", | |
| "properties": { | |
| "frontendIPConfigurations": [{ | |
| "name": "LoadBalancerIPConfig", | |
| "properties": { | |
| "privateIPAllocationMethod": "Static", | |
| "subnet": { | |
| "id": "[variables('subnet1Ref')]" | |
| }, | |
| "privateIPAddress": "[variables('ilbIPAddress')]" | |
| } | |
| }], | |
| "backendAddressPools": [{ | |
| "name": "LoadBalancerBEAddressPool", | |
| "properties": {} | |
| }], | |
| "loadBalancingRules": [{ | |
| "name": "LBRule", | |
| "properties": { | |
| "backendAddressPool": { | |
| "id": "[variables('ilbPoolID0')]" | |
| }, | |
| "backendPort": "[variables('nt0fabricTcpGatewayPort')]", | |
| "enableFloatingIP": "false", | |
| "frontendIPConfiguration": { | |
| "id": "[variables('ilbIPConfig0')]" | |
| }, | |
| "frontendPort": "[variables('nt0fabricTcpGatewayPort')]", | |
| "idleTimeoutInMinutes": "5", | |
| "probe": { | |
| "id": "[variables('lbProbeID0')]" | |
| }, | |
| "protocol": "tcp" | |
| } | |
| }, | |
| { | |
| "name": "LBHttpRule", | |
| "properties": { | |
| "backendAddressPool": { | |
| "id": "[variables('ilbPoolID0')]" | |
| }, | |
| "backendPort": "[variables('nt0fabricHttpGatewayPort')]", | |
| "enableFloatingIP": "false", | |
| "frontendIPConfiguration": { | |
| "id": "[variables('ilbIPConfig0')]" | |
| }, | |
| "frontendPort": "[variables('nt0fabricHttpGatewayPort')]", | |
| "idleTimeoutInMinutes": "5", | |
| "probe": { | |
| "id": "[variables('lbHttpProbeID0')]" | |
| }, | |
| "protocol": "tcp" | |
| } | |
| } | |
| ], | |
| "probes": [{ | |
| "name": "FabricGatewayProbe", | |
| "properties": { | |
| "intervalInSeconds": 5, | |
| "numberOfProbes": 2, | |
| "port": "[variables('nt0fabricTcpGatewayPort')]", | |
| "protocol": "tcp" | |
| } | |
| }, | |
| { | |
| "name": "FabricHttpGatewayProbe", | |
| "properties": { | |
| "intervalInSeconds": 5, | |
| "numberOfProbes": 2, | |
| "port": "[variables('nt0fabricHttpGatewayPort')]", | |
| "protocol": "tcp" | |
| } | |
| } | |
| ] | |
| }, | |
| "tags": { | |
| "resourceType": "Service Fabric", | |
| "clusterName": "[parameters('clusterName')]" | |
| } | |
| }, | |
| { | |
| "apiVersion": "[variables('storageApiVersion')]", | |
| "type": "Microsoft.Storage/storageAccounts", | |
| "name": "[variables('uniqueStringArray0')[copyIndex()]]", | |
| "location": "[variables('computeLocation')]", | |
| "dependsOn": [], | |
| "properties": {}, | |
| "copy": { | |
| "name": "storageLoop", | |
| "count": 5 | |
| }, | |
| "kind": "Storage", | |
| "sku": { | |
| "name": "[parameters('storageAccountType')]" | |
| }, | |
| "tags": { | |
| "resourceType": "Service Fabric", | |
| "clusterName": "[parameters('clusterName')]" | |
| } | |
| }, | |
| { | |
| "apiVersion": "[variables('vmssApiVersion')]", | |
| "type": "Microsoft.Compute/virtualMachineScaleSets", | |
| "name": "[variables('vmNodeType0Name')]", | |
| "location": "[variables('computeLocation')]", | |
| "dependsOn": [ | |
| "[concat('Microsoft.Network/virtualNetworks/', variables('virtualNetworkName'))]", | |
| "[concat('Microsoft.Storage/storageAccounts/', variables('uniqueStringArray0')[0])]", | |
| "[concat('Microsoft.Storage/storageAccounts/', variables('uniqueStringArray0')[1])]", | |
| "[concat('Microsoft.Storage/storageAccounts/', variables('uniqueStringArray0')[2])]", | |
| "[concat('Microsoft.Storage/storageAccounts/', variables('uniqueStringArray0')[3])]", | |
| "[concat('Microsoft.Storage/storageAccounts/', variables('uniqueStringArray0')[4])]", | |
| "[concat('Microsoft.Network/loadBalancers/', concat('LB','-', parameters('clusterName'),'-',variables('vmNodeType0Name')))]", | |
| "[concat('Microsoft.Network/loadBalancers/', concat('ILB','-', parameters('clusterName'),'-',variables('vmNodeType0Name')))]", | |
| "[concat('Microsoft.Storage/storageAccounts/', variables('supportLogStorageAccountName'))]", | |
| "[concat('Microsoft.Storage/storageAccounts/', variables('applicationDiagnosticsStorageAccountName'))]" | |
| ], | |
| "properties": { | |
| "overprovision": "[variables('overProvision')]", | |
| "upgradePolicy": { | |
| "mode": "Automatic" | |
| }, | |
| "virtualMachineProfile": { | |
| "extensionProfile": { | |
| "extensions": [{ | |
| "name": "[concat('ServiceFabricNodeVmExt','_vmNodeType0Name')]", | |
| "properties": { | |
| "type": "ServiceFabricNode", | |
| "autoUpgradeMinorVersion": false, | |
| "protectedSettings": { | |
| "StorageAccountKey1": "[listKeys(resourceId('Microsoft.Storage/storageAccounts', variables('supportLogStorageAccountName')),'2015-05-01-preview').key1]", | |
| "StorageAccountKey2": "[listKeys(resourceId('Microsoft.Storage/storageAccounts', variables('supportLogStorageAccountName')),'2015-05-01-preview').key2]" | |
| }, | |
| "publisher": "Microsoft.Azure.ServiceFabric", | |
| "settings": { | |
| "clusterEndpoint": "[reference(parameters('clusterName')).clusterEndpoint]", | |
| "nodeTypeRef": "[variables('vmNodeType0Name')]", | |
| "dataPath": "D:\\\\SvcFab", | |
| "durabilityLevel": "Bronze", | |
| "nicPrefixOverride": "[variables('subnet0Prefix')]", | |
| "certificate": { | |
| "thumbprint": "[parameters('certificateThumbprint')]", | |
| "x509StoreName": "[parameters('certificateStoreValue')]" | |
| } | |
| }, | |
| "typeHandlerVersion": "1.0" | |
| } | |
| }, | |
| { | |
| "name": "[concat('VMDiagnosticsVmExt','_vmNodeType0Name')]", | |
| "properties": { | |
| "type": "IaaSDiagnostics", | |
| "autoUpgradeMinorVersion": true, | |
| "protectedSettings": { | |
| "storageAccountName": "[variables('applicationDiagnosticsStorageAccountName')]", | |
| "storageAccountKey": "[listKeys(resourceId('Microsoft.Storage/storageAccounts', variables('applicationDiagnosticsStorageAccountName')),'2015-05-01-preview').key1]", | |
| "storageAccountEndPoint": "https://core.windows.net/" | |
| }, | |
| "publisher": "Microsoft.Azure.Diagnostics", | |
| "settings": { | |
| "WadCfg": { | |
| "DiagnosticMonitorConfiguration": { | |
| "overallQuotaInMB": "50000", | |
| "EtwProviders": { | |
| "EtwEventSourceProviderConfiguration": [{ | |
| "provider": "Microsoft-ServiceFabric-Actors", | |
| "scheduledTransferKeywordFilter": "1", | |
| "scheduledTransferPeriod": "PT5M", | |
| "DefaultEvents": { | |
| "eventDestination": "ServiceFabricReliableActorEventTable" | |
| } | |
| }, | |
| { | |
| "provider": "Microsoft-ServiceFabric-Services", | |
| "scheduledTransferPeriod": "PT5M", | |
| "DefaultEvents": { | |
| "eventDestination": "ServiceFabricReliableServiceEventTable" | |
| } | |
| } | |
| ], | |
| "EtwManifestProviderConfiguration": [{ | |
| "provider": "cbd93bc2-71e5-4566-b3a7-595d8eeca6e8", | |
| "scheduledTransferLogLevelFilter": "Information", | |
| "scheduledTransferKeywordFilter": "4611686018427387904", | |
| "scheduledTransferPeriod": "PT5M", | |
| "DefaultEvents": { | |
| "eventDestination": "ServiceFabricSystemEventTable" | |
| } | |
| }] | |
| } | |
| } | |
| }, | |
| "StorageAccount": "[variables('applicationDiagnosticsStorageAccountName')]" | |
| }, | |
| "typeHandlerVersion": "1.5" | |
| } | |
| } | |
| ] | |
| }, | |
| "networkProfile": { | |
| "networkInterfaceConfigurations": [{ | |
| "name": "[concat(variables('nicName'), '-0')]", | |
| "properties": { | |
| "ipConfigurations": [{ | |
| "name": "[concat(variables('nicName'),'-',0)]", | |
| "properties": { | |
| "loadBalancerBackendAddressPools": [{ | |
| "id": "[variables('lbPoolID0')]" | |
| }, | |
| { | |
| "id": "[variables('ilbPoolID0')]" | |
| } | |
| ], | |
| "loadBalancerInboundNatPools": [], | |
| "subnet": { | |
| "id": "[variables('subnet0Ref')]" | |
| } | |
| } | |
| }], | |
| "primary": true | |
| } | |
| }] | |
| }, | |
| "osProfile": { | |
| "adminPassword": "[parameters('adminPassword')]", | |
| "adminUsername": "[parameters('adminUsername')]", | |
| "computernamePrefix": "[variables('vmNodeType0Name')]", | |
| "secrets": [{ | |
| "sourceVault": { | |
| "id": "[parameters('sourceVaultValue')]" | |
| }, | |
| "vaultCertificates": [{ | |
| "certificateStore": "[parameters('certificateStoreValue')]", | |
| "certificateUrl": "[parameters('certificateUrlValue')]" | |
| }] | |
| }] | |
| }, | |
| "storageProfile": { | |
| "imageReference": { | |
| "publisher": "[parameters('vmImagePublisher')]", | |
| "offer": "[parameters('vmImageOffer')]", | |
| "sku": "[parameters('vmImageSku')]", | |
| "version": "[parameters('vmImageVersion')]" | |
| }, | |
| "osDisk": { | |
| "vhdContainers": [ | |
| "[concat(reference(concat('Microsoft.Storage/storageAccounts/', variables('uniqueStringArray0')[0]), variables('storageApiVersion')).primaryEndpoints.blob, variables('vmStorageAccountContainerName'))]", | |
| "[concat(reference(concat('Microsoft.Storage/storageAccounts/', variables('uniqueStringArray0')[1]), variables('storageApiVersion')).primaryEndpoints.blob, variables('vmStorageAccountContainerName'))]", | |
| "[concat(reference(concat('Microsoft.Storage/storageAccounts/', variables('uniqueStringArray0')[2]), variables('storageApiVersion')).primaryEndpoints.blob, variables('vmStorageAccountContainerName'))]", | |
| "[concat(reference(concat('Microsoft.Storage/storageAccounts/', variables('uniqueStringArray0')[3]), variables('storageApiVersion')).primaryEndpoints.blob, variables('vmStorageAccountContainerName'))]", | |
| "[concat(reference(concat('Microsoft.Storage/storageAccounts/', variables('uniqueStringArray0')[4]), variables('storageApiVersion')).primaryEndpoints.blob, variables('vmStorageAccountContainerName'))]" | |
| ], | |
| "name": "vmssosdisk", | |
| "caching": "ReadOnly", | |
| "createOption": "FromImage" | |
| } | |
| } | |
| } | |
| }, | |
| "sku": { | |
| "name": "[variables('vmNodeType0Size')]", | |
| "capacity": "[parameters('nt0InstanceCount')]", | |
| "tier": "Standard" | |
| }, | |
| "tags": { | |
| "resourceType": "Service Fabric", | |
| "clusterName": "[parameters('clusterName')]" | |
| } | |
| }, | |
| { | |
| "apiVersion": "2016-09-01", | |
| "type": "Microsoft.ServiceFabric/clusters", | |
| "name": "[parameters('clusterName')]", | |
| "location": "[parameters('clusterLocation')]", | |
| "dependsOn": [ | |
| "[concat('Microsoft.Storage/storageAccounts/', variables('supportLogStorageAccountName'))]" | |
| ], | |
| "properties": { | |
| "certificate": { | |
| "thumbprint": "[parameters('certificateThumbprint')]", | |
| "x509StoreName": "[parameters('certificateStoreValue')]" | |
| }, | |
| "clientCertificateCommonNames": [], | |
| "clientCertificateThumbprints": [], | |
| "clusterState": "Default", | |
| "diagnosticsStorageAccountConfig": { | |
| "blobEndpoint": "[reference(concat('Microsoft.Storage/storageAccounts/', variables('supportLogStorageAccountName')), variables('storageApiVersion')).primaryEndpoints.blob]", | |
| "protectedAccountKeyName": "StorageAccountKey1", | |
| "queueEndpoint": "[reference(concat('Microsoft.Storage/storageAccounts/', variables('supportLogStorageAccountName')), variables('storageApiVersion')).primaryEndpoints.queue]", | |
| "storageAccountName": "[variables('supportLogStorageAccountName')]", | |
| "tableEndpoint": "[reference(concat('Microsoft.Storage/storageAccounts/', variables('supportLogStorageAccountName')), variables('storageApiVersion')).primaryEndpoints.table]" | |
| }, | |
| "fabricSettings": [{ | |
| "parameters": [{ | |
| "name": "ClusterProtectionLevel", | |
| "value": "[parameters('clusterProtectionLevel')]" | |
| }], | |
| "name": "Security" | |
| }], | |
| "managementEndpoint": "[concat('https://',reference(concat(variables('lbIPName'),'-','0')).dnsSettings.fqdn,':',variables('nt0fabricHttpGatewayPort'))]", | |
| "nodeTypes": [{ | |
| "name": "[variables('vmNodeType0Name')]", | |
| "applicationPorts": { | |
| "endPort": "[variables('nt0applicationEndPort')]", | |
| "startPort": "[variables('nt0applicationStartPort')]" | |
| }, | |
| "clientConnectionEndpointPort": "[variables('nt0fabricTcpGatewayPort')]", | |
| "durabilityLevel": "Bronze", | |
| "ephemeralPorts": { | |
| "endPort": "[variables('nt0ephemeralEndPort')]", | |
| "startPort": "[variables('nt0ephemeralStartPort')]" | |
| }, | |
| "httpGatewayEndpointPort": "[variables('nt0fabricHttpGatewayPort')]", | |
| "isPrimary": true, | |
| "vmInstanceCount": "[parameters('nt0InstanceCount')]" | |
| }], | |
| "provisioningState": "Default", | |
| "reliabilityLevel": "Silver", | |
| "upgradeMode": "Automatic", | |
| "vmImage": "Windows" | |
| }, | |
| "tags": { | |
| "resourceType": "Service Fabric", | |
| "clusterName": "[parameters('clusterName')]" | |
| } | |
| } | |
| ], | |
| "outputs": { | |
| "clusterProperties": { | |
| "value": "[reference(parameters('clusterName'))]", | |
| "type": "object" | |
| } | |
| } | |
| } |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment