Skip to content

Instantly share code, notes, and snippets.

Embed
What would you like to do?
One Node Role Infrastructure ASDK Netsed edit
<?xml version="1.0" encoding="utf-8"?>
<Role Id="BareMetal" PSClass="Classes\BareMetal\BareMetal.psm1" xmlns:pp="http://schemas.microsoft.com/ece/2015/preprocessor">
<PublicInfo>
<Logs Enabled ="True">
<FileLog Location="$env:SystemDrive\CloudDeployment\Logs\" />
<FileLog Location="$env:windir\Panther\" />
<FileLog Location="$env:SystemDrive\Windows\Logs\WindowsUpdate\*.etl" />
<FileLog Location="D:\AzureStack\MiniDump\*.dmp" />
<FileLog Location="$env:SystemRoot\*.dmp" />
<FileLog Location="$env:SystemDrive\MASLogs\" />
<FileLog Location="D:\AzureStack\CrashDumps\*.dmp" />
<FileLog Location="$env:SystemDrive\Windows\ServiceProfiles\NetworkService\AppData\Local\CrashDumps\*.dmp" />
<FileLog Location="$env:SystemDrive\Windows\System32\Config\SystemProfile\AppData\Local\CrashDumps\*.dmp" />
<FileLog Location="$env:SystemDrive\Windows\SetupComplete.log" />
<FileLog Location="$env:SystemDrive\Windows\Temp\WaitResultLogs\" />
<FileLog Location="$env:SystemDrive\AzureStack\Logs\IPInformation.txt" />
<FileLog Location="$env:windir\tracing\" />
<FileLog Location="$env:SystemDrive\Monitoring\Data\Configuration\MonAgentHost*.log" />
<FileLog Location="$env:SystemDrive\Monitoring\Data\Tables\V2Faults*.tsf" />
<FileLog Location="$env:SystemDrive\vstoretrace\*.etl" />
<FileLog Location="$env:SystemDrive\Logs\WireServerLogs\" />
<FileLog Location="$env:SystemDrive\AzureStackPackageMangager\Logs\" />
<FileLog Location="$env:SystemDrive\Windows\System32\Configuration\ConfigurationStatus\*.mof" />
<FileLog Location="$env:SystemDrive\Windows\System32\Configuration\ConfigurationStatus\*.json" />
<FileLog Location="$env:SystemDrive\Windows\debug\" />
<FileLog Location="$env:ProgramData\Microsoft\Windows Defender\Support\MpSupportFiles.cab" />
<FileLog Location="$env:SystemDrive\Temp\SDN\" />
<ShareLog Location="[DiagnosticsShare]\BareMetal\*" />
<ShareLog Location="[DiagnosticsShare]\CPI\HostAgent\*" />
<WindowsEventLog Pattern="System" />
<WindowsEventLog Pattern="Application" />
<WindowsEventLog Pattern="*TraceCollector*" />
<WindowsEventLog Pattern="*Microsoft-Windows-DSC*" />
<WindowsEventLog Pattern="Microsoft-Windows-GroupPolicy/Operational" />
<WindowsEventLog Pattern="Microsoft-Windows-NTLM/Operational" />
<WindowsEventLog Pattern="Microsoft-Windows Azure-Fabric-Agent/Operational" />
<WindowsEventLog Pattern="Microsoft-Windows Azure-Fabric-Agent/Admin" />
</Logs>
<NugetStore Path="$env:SystemDrive\CloudDeployment\NuGetStore" />
<SecurityInfo>
<DomainGroups>
<Group Id="BMCAdminGroup" Name="AzS-Bmc-AdmnSG" Scope="DomainLocal" Category="Security" />
</DomainGroups>
<ServiceAccounts>
<Account Name="AzS-Host-TCSA" ManagedPasswordIntervalInDays="1" PrincipalsAllowedToRetrieveManagedPassword="AzS-Sto-SG">
<Membership>
<MemberOf GroupName="AzS-FsAcl-InfraSG" />
</Membership>
</Account>
<Account Name="AzS-Host-HASA" ManagedPasswordIntervalInDays="1" PrincipalsAllowedToRetrieveManagedPassword="AzS-Sto-SG">
<Membership>
<MemberOf GroupName="AzS-HA-R-SrvSG" />
</Membership>
</Account>
</ServiceAccounts>
</SecurityInfo>
<SKU>Full</SKU>
<Model>[Model]</Model>
<DeploymentGuid>[Deployment_Guid]</DeploymentGuid>
<BootImage Path="" Index="" VHDName="" />
<InstallImage Path="" Index="" VHDName="" />
<VhdImageTargetDir Path="[CloudMediaPath]\Images\en-us" />
<WindowsUpdateStagingFolder Path="[CloudMediaPath]\WindowsUpdates" />
<DefenderUpdates Path="[CloudMediaPath]\Updates\DefenderUpdates\x64" />
<CodeIntegrityPolicy Audit="True" StagingFolder="[CloudMediaPath]\Security\CodeIntegrity" FileName="MASPolicy.bin" FileNameForHost="MASPolicyForHost.bin" />
<SkipDriverInjection>False</SkipDriverInjection>
<Drivers Build="14393" Path="[CloudMediaPath]\Drivers" />
<Drivers Build="17763" Path="[CloudMediaPath]\DriversRS5" />
<pp:Import Path=".\HardwareInventoryInformaton.xml" />
<DumpMinimumPhysicalDiskBytes>18446744073709551615</DumpMinimumPhysicalDiskBytes> <!-- [UInt64]::MaxValue. Effectively disabled on ASDK. If re-enabling, checks for boot disk should change to IsBoot rather than BootFromDisk. -->
<JEA>
<Endpoints>
<Endpoint Name="BareMetalShutdownEndpoint" RunAsAccountID="DomainAdminSA" RunAsGmsa="True">
<TargetRoles>
<TargetRole Id="BareMetal" />
<TargetRole Id="Storage" />
</TargetRoles>
<SessionConfiguration Name="BareMetalShutdownEndpoint">
<SecurityGroup Name="[PREFIX]-OpsAdmin">
<Whitelist Value="BareMetalShutdownEndpointWhitelist" />
</SecurityGroup>
<EnableTranscript Value="False" />
</SessionConfiguration>
<Whitelist Name="BareMetalShutdownEndpointWhitelist">
<VisibleFunctions>
<Function Name="Stop-LocalPhysicalComputer" />
</VisibleFunctions>
</Whitelist>
</Endpoint>
<Endpoint Name="StorageSubsystemEndpoint" RunAsAccountID="DomainAdminSA" RunAsGmsa="True">
<TargetRoles>
<TargetRole Id="BareMetal" />
<TargetRole Id="Storage" />
</TargetRoles>
<SessionConfiguration Name="StorageSubsystemEndpoint">
<SecurityGroup Name="[PREFIX]-OpsAdmin">
<Whitelist Value="StorageSubsystemEndpointWhitelist" />
</SecurityGroup>
<EnableTranscript Value="False" />
</SessionConfiguration>
<Whitelist Name="StorageSubsystemEndpointWhitelist">
<VisibleFunctions>
<Function Name="Get-VolumesFromStorageSubsystem" />
</VisibleFunctions>
</Whitelist>
</Endpoint>
</Endpoints>
</JEA>
<DeploymentContent>
<!-- Deployment content is injected into the bare metal image. -->
<NugetArtifact Name="Microsoft.AzureStack.Solution.Diagnostics.TraceCollector" SourcePath="lib\net46" DestinationPath="TraceCollector" />
<NugetArtifact Name="Microsoft.AzureStack.Common.Infrastructure.TraceCollectorConfiguration" SourcePath="content\TraceCollector\Client" DestinationPath="TraceCollector\Configuration" />
<NugetArtifact Name="Microsoft.AzureStack.Solution.Diagnostics.TraceCollector" SourcePath="content\PerfCollector\BareMetal" DestinationPath="TraceCollector\PerfCounterConfiguration" />
<NugetArtifact Name="Microsoft.AzureStack.Infrastructure.Agent" SourcePath="content\Pluto" DestinationPath="Pluto" />
<NugetArtifact Name="Microsoft.AzureStack.Common.Tools.Diagnostics" SourcePath="lib\net46" DestinationPath="Program Files\WindowsPowerShell\Modules" />
<NugetArtifact Name="Microsoft.AzureStack.Deployment.ACSDSC" SourcePath="content" DestinationPath="Program Files\WindowsPowerShell\Modules" />
<NugetArtifact Name="Microsoft.AzureStack.Deployment.DSC" SourcePath="content" DestinationPath="Program Files\WindowsPowerShell\Modules" />
<NugetArtifact Name="Microsoft.AzureStack.Deployment.NCDSC" SourcePath="content" DestinationPath="Program Files\WindowsPowerShell\Modules" />
<NugetArtifact Name="Microsoft.AzureStack.Fabric.Compute.HostInstaller" SourcePath="content\TraceCollector" DestinationPath="TraceCollector\Configuration" />
<NugetArtifact Name="Microsoft.AzureStack.Fabric.Health.MAConfig" SourcePath="Monitoring" DestinationPath="Monitoring" />
<NugetArtifact Name="Microsoft.AzureStack.Fabric.HostAgent" SourcePath="TraceCollector" DestinationPath="TraceCollector\Configuration" />
<NugetArtifact Name="Microsoft.AzureStack.Fabric.Storage.SCPSModule" SourcePath="content" DestinationPath="Windows\System32\WindowsPowerShell\v1.0\Modules" />
<NugetArtifact Name="Microsoft.AzureStack.Fabric.MonitoringAgent" SourcePath="Monitoring" DestinationPath="Monitoring" />
<NugetArtifact Name="Microsoft.AzureStack.Services.Storage" SourcePath="lib\net46\TraceCollector\Blob" DestinationPath="TraceCollector\Configuration" />
<NugetArtifact Name="Microsoft.AzureStack.Services.Storage" SourcePath="lib\net46\Deployment" DestinationPath="ACS\Deployment" />
<NugetArtifact Name="Microsoft.AzureStack.Services.Storage" SourcePath="lib\net46\BlobService" DestinationPath="ACS\BlobService" />
<NugetArtifact Name="Microsoft.AzureStack.Services.Storage" SourcePath="lib\net46\MonitoringAgent\MAConfig" DestinationPath="Monitoring\agent\initconfig\2.0\Standard" />
<NugetArtifact Name="Microsoft.AzureStack.Solution.Deploy.Security" SourcePath="content\PrivilegedEndpoint\JEAModules" DestinationPath="Program Files\WindowsPowerShell\Modules"/>
<NugetArtifact Name="Microsoft.AzureStack.Solution.Deploy.Security" SourcePath="content\PrivilegedEndpoint\REPCerts" DestinationPath="Program Files\WindowsPowerShell\Modules\Microsoft.AzureStack.PrivilegedEndpointSecurity"/>
<NugetArtifact Name="Microsoft.AzureStack.Solution.Deploy.Security" SourcePath="content\GP\Modules" DestinationPath="Program Files\WindowsPowerShell\Modules" />
<NugetArtifact Name="Microsoft.AzureStack.Fabric.Backup.IBCAdapterClient" SourcePath="" DestinationPath="NugetStore" NugetInstall="true" />
<NugetArtifact Name="Microsoft.AzureStack.Fabric.Backup.IBCAdapterClient" SourcePath="content\TraceCollector" DestinationPath="TraceCollector\Configuration" />
<NugetArtifact Name="Microsoft.AzureStack.Fabric.Health" SourcePath="Deployment\BareMetalTraceCollector" DestinationPath="TraceCollector\Configuration" />
<NugetArtifact Name="Microsoft.AzureStack.Fabric.Health.HealthAgent" SourcePath="Content\HealthAgent" DestinationPath="HealthAgent"/>
<NugetArtifact Name="Microsoft.AzureStack.Fabric.Health.HealthAgent" SourcePath="TraceCollector" DestinationPath="TraceCollector\Configuration"/>
<NuGetArtifact Name="Microsoft.AzureStack.Solution.Deploy.CloudDeployment" SourcePath="content\AzureStackDiagnostics" DestinationPath="Program Files\WindowsPowerShell\Modules" />
<NuGetArtifact Name="Microsoft.AzureStack.Solution.Diagnostics.StorageDiagnostic" SourcePath="content" DestinationPath="Program Files\WindowsPowerShell\Modules" />
<NugetArtifact Name="Microsoft.AzureStack.Deployment.ExternalDNSDSC" SourcePath="content\TraceCollector\VMSIF" DestinationPath="TraceCollector\Configuration" />
<NugetArtifact Name="Microsoft.AzureStack.Deployment.ExternalDNSDSC" SourcePath="content\TraceCollector\VFPHostProxy\BareMetal" DestinationPath="TraceCollector\Configuration" />
<NugetArtifact Name="Microsoft.AzureStack.Common.Infrastructure.Telemetry.TelemetryReporter" SourcePath="lib\net46" DestinationPath="Program Files\WindowsPowerShell\Modules\Microsoft.AzureStack.Diagnostics.DataCollection\TelemetryReporter" />
<NuGetArtifact Name="Microsoft.AzureStack.Solution.Diagnostics.LogTransporter.Functions" SourcePath="" DestinationPath="NugetStore" NugetInstall="true" />
<NuGetArtifact Name="Microsoft.AzureStack.Solution.Diagnostics.LogTransporter.Functions" SourcePath="content" DestinationPath="Program Files\WindowsPowerShell\Modules\Microsoft.AzureStack.Solution.Diagnostics.LogTransporter.Functions" />
<NuGetArtifact Name="Microsoft.AzureStack.Solution.Diagnostics.LogTransporter.Workflows" SourcePath="" DestinationPath="NugetStore" NugetInstall="true" />
<NuGetArtifact Name="Microsoft.AzureStack.Solution.Diagnostics.LogTransporter.Workflows" SourcePath="content" DestinationPath="Program Files\WindowsPowerShell\Modules\Microsoft.AzureStack.Solution.Diagnostics.LogTransporter.Workflows" />
<!-- RS5 CTL files -->
<NugetArtifact Name="Microsoft.AzureStack.Solution.Deploy.Security" SourcePath="content\WuCTLFiles" DestinationPath="WuCTLFiles" />
</DeploymentContent>
<WindowsFeature>
<Feature Name="BitLocker" />
<Feature Name="DataCenterBridging" />
<Feature Name="FailoverCluster-AdminPak" />
<Feature Name="FailoverCluster-FullServer" />
<Feature Name="FailoverCluster-Mgmt" />
<Feature Name="FailoverCluster-PowerShell" />
<Feature Name="FileServerVSSAgent" />
<Feature Name="SMBBW" />
<Feature Name="Microsoft-Hyper-V-Management-PowerShell" />
<Feature Name="Microsoft-Hyper-V-Offline" />
<Feature Name="Microsoft-Hyper-V-Online" />
<Feature Name="RSAT-Hyper-V-Tools-Feature" />
<Feature Name="Server-Gui-Shell" />
<Feature Name="ServerManager-Core-RSAT" />
<Feature Name="ServerManager-Core-RSAT-Feature-Tools" />
<Feature Name="ServerManager-Core-RSAT-Role-Tools" />
<Feature Name="DamgmtTools" />
<Feature Name="NPAS-Role" />
<Feature Name="NPSMMC" />
<Feature Name="RasRoutingProtocols" />
<Feature Name="RemoteAccess" />
<Feature Name="RemoteAccessMgmtTools" />
<Feature Name="RemoteAccessPowerShell" />
<Feature Name="RemoteAccessServer" />
<RemoveFeature Name="ADCertificateServicesRole" />
<RemoveFeature Name="BITS" />
<RemoveFeature Name="BITSExtensions-Upload" />
<RemoveFeature Name="CertificateEnrollmentPolicyServer" />
<RemoveFeature Name="CertificateEnrollmentServer" />
<RemoveFeature Name="CertificateServices" />
<RemoveFeature Name="ClientForNFS-Infrastructure" />
<RemoveFeature Name="DFSN-Server" />
<RemoveFeature Name="DFSR-Infrastructure-ServerEdition" />
<RemoveFeature Name="DHCPServer" />
<RemoveFeature Name="DHCPServer-Tools" />
<RemoveFeature Name="FabricShieldedTools" />
<RemoveFeature Name="FRS-Infrastructure" />
<RemoveFeature Name="HardenedFabricEncryptionTask" />
<RemoveFeature Name="IdentityServer-SecurityTokenService" />
<RemoveFeature Name="IPAMClientFeature" />
<RemoveFeature Name="IPAMServerFeature" />
<RemoveFeature Name="iSCSITargetServer" />
<RemoveFeature Name="iSCSITargetServer-PowerShell" />
<RemoveFeature Name="iSCSITargetStorageProviders" />
<RemoveFeature Name="iSNS_Service" />
<RemoveFeature Name="Licensing" />
<RemoveFeature Name="LightweightServer" />
<RemoveFeature Name="MicrosoftWindowsPowerShellV2" />
<RemoveFeature Name="MSMQ" />
<RemoveFeature Name="MSMQ-ADIntegration" />
<RemoveFeature Name="MSMQ-DCOMProxy" />
<RemoveFeature Name="MSMQ-HTTP" />
<RemoveFeature Name="MSMQ-Multicast" />
<RemoveFeature Name="MSMQ-RoutingServer" />
<RemoveFeature Name="MSMQ-Server" />
<RemoveFeature Name="MSMQ-Services" />
<RemoveFeature Name="MSMQ-Triggers" />
<RemoveFeature Name="MSRDC-Infrastructure" />
<RemoveFeature Name="MultipathIo" />
<RemoveFeature Name="MultiPoint-Connector" />
<RemoveFeature Name="MultiPoint-Connector-Services" />
<RemoveFeature Name="MultiPoint-Role" />
<RemoveFeature Name="MultiPoint-Tools" />
<RemoveFeature Name="NetworkController" />
<RemoveFeature Name="NetworkControllerTools" />
<RemoveFeature Name="NetworkDeviceEnrollmentServices" />
<RemoveFeature Name="NetworkLoadBalancingFullServer" />
<RemoveFeature Name="OnlineRevocationServices" />
<RemoveFeature Name="P2P-PnrpOnly" />
<RemoveFeature Name="PeerDist" />
<RemoveFeature Name="Printing-Client" />
<RemoveFeature Name="Printing-Client-Gui" />
<RemoveFeature Name="Printing-LPDPrintService" />
<RemoveFeature Name="Printing-PrintToPDFServices-Features" />
<RemoveFeature Name="Printing-Server-Foundation-Features" />
<RemoveFeature Name="Printing-Server-Role" />
<RemoveFeature Name="Printing-XPSServices-Features" />
<RemoveFeature Name="QWAVE" />
<RemoveFeature Name="RightsManagementServices" />
<RemoveFeature Name="RightsManagementServices-AdminTools" />
<RemoveFeature Name="RightsManagementServices-Role" />
<RemoveFeature Name="RMS-Federation" />
<RemoveFeature Name="RPC-HTTP_Proxy" />
<RemoveFeature Name="SBMgr-UI" />
<RemoveFeature Name="ServerForNFS-Infrastructure" />
<RemoveFeature Name="ServerMediaFoundation" />
<RemoveFeature Name="ServicesForNFS-ServerAndClient" />
<RemoveFeature Name="SessionDirectory" />
<RemoveFeature Name="SMBHashGeneration" />
<RemoveFeature Name="Smtpsvc-Admin-Update-Name" />
<RemoveFeature Name="Smtpsvc-Service-Update-Name" />
<RemoveFeature Name="SoftwareLoadBalancer" />
<RemoveFeature Name="Storage-Replica" />
<RemoveFeature Name="Storage-Replica-AdminPack" />
<RemoveFeature Name="TelnetClient" />
<RemoveFeature Name="VmHostAgent" />
<RemoveFeature Name="WebAccess" />
<RemoveFeature Name="Web-Application-Proxy" />
<RemoveFeature Name="WebEnrollmentServices" />
<RemoveFeature Name="WindowsPowerShellWebAccess" />
<RemoveFeature Name="WINSRuntime" />
<RemoveFeature Name="WorkFolders-Server" />
<RemoveFeature Name="WSS-Product-Package" />
</WindowsFeature>
<Health>
<HealthAgent CategoryType="Core" CategoryName="PhysicalNode" />
</Health>
</PublicInfo>
<PrivateInfo>
<!-- Do not change the Deployment Guid. For re-deploying update 'IdempotentRun' property to "False"-->
<ExecutionContext IdempotentRun="True" />
<BmdWaitTimeoutMinutes>90</BmdWaitTimeoutMinutes>
<BMCWinPETimeOutInMinutes>30</BMCWinPETimeOutInMinutes>
<TimeServiceStartTimeoutInMinutes>3</TimeServiceStartTimeoutInMinutes>
<UseWimBoot>False</UseWimBoot>
<IgnoreOldOSCheckResult>False</IgnoreOldOSCheckResult>
<LibraryShareImageFolder Path="{Infrastructure_2}\CloudMedia\Images\en-us" />
<StartupTimeoutInMinutes>10</StartupTimeoutInMinutes>
<ShutdownTimeoutInMinutes>10</ShutdownTimeoutInMinutes>
<Accounts>
<LocalAdminAccountID>MgmtLocalAdmin</LocalAdminAccountID>
<LocalCloudAdminAccountID>LocalCloudAdmin</LocalCloudAdminAccountID>
<RunAsAccountID>Fabric</RunAsAccountID>
<DomainAdminAccountID>DomainAdmin</DomainAdminAccountID>
<DeploymentDomainAdminAccountID>DeploymentDomainAdmin</DeploymentDomainAdminAccountID>
<BuiltInAdminAccountID>LocalAdmin</BuiltInAdminAccountID>
<VHDShareAccountID>Fabric</VHDShareAccountID>
<CACertAccountID>CACertificateUser</CACertAccountID>
</Accounts>
<ValidationRequirements>
<MinimumOperatingSystemVersion>10.0.14300</MinimumOperatingSystemVersion>
<MinimumNumberOfCoresPerMachine>12</MinimumNumberOfCoresPerMachine>
<MinimumPhysicalMemoryPerMachineGB>32</MinimumPhysicalMemoryPerMachineGB>
<MinimumNumberOfAdaptersPerMachine>0</MinimumNumberOfAdaptersPerMachine>
<MinimumAdapterSpeedBitsPerSecond>0</MinimumAdapterSpeedBitsPerSecond>
<MinimumSizeOfDataDisksGB>100</MinimumSizeOfDataDisksGB>
<MinimumSizeOfSystemDiskGB>100</MinimumSizeOfSystemDiskGB>
<MinimumNumberOfDataDisksPerMachine>3</MinimumNumberOfDataDisksPerMachine>
<MaximumNumberOfMissingDisksPerMachine>0</MaximumNumberOfMissingDisksPerMachine>
<SizeComparisonTolerancePercentage>1</SizeComparisonTolerancePercentage>
</ValidationRequirements>
</PrivateInfo>
<Nodes>
<!-- Attribute Deployed describes the physical machine deployment status. Possible values are:
'true' - machine is sucessfully deployed in intended role
'false' - machine is not yet deployed, but it is ready to be deployed by a scale-out interface
'' - machine information is in the CustomerConfiguration.xml file, but no further actions will be taken
-->
</Nodes>
<Actions>
<Action Type="MarkAllPhysicalMachineStatusComplete">
<Steps>
<PerNode RolePath="Cloud\Infrastructure\BareMetal">
<Step Index="0" Name="MarkPhysicalMachineStatusComplete" Description="Update the XML to mark the new nodes as deployed.">
<Task RolePath="BuiltIn" InterfaceType="MarkPhysicalMachineStatusComplete" />
</Step>
</PerNode>
</Steps>
</Action>
<Action Type="MarkAllPhysicalMachineStatusProvisioning">
<Steps>
<PerNode RolePath="Cloud\Infrastructure\BareMetal">
<Step Index="0" Name="MarkPhysicalMachineStatusProvisioning" Description="Update the XML to mark the new nodes as provisioning.">
<Task RolePath="BuiltIn" InterfaceType="MarkPhysicalMachineStatusProvisioning" />
</Step>
</PerNode>
</Steps>
</Action>
</Actions>
</Role>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
You can’t perform that action at this time.