skmkzyk

1. アカウント作成
2. 後で使うので Customer Portal の右上 → プロファイル編集 → Personal API Key を発行しておく
3. Ubuntu の server を立てる

• Public IPv4 アドレスはつけておく (= あまりいじらずにデプロイすればこうなる)

4. Public IP アドレス越しでログインする (SOS から入ってもいい)
5. Doorman (https://github.com/equinix/doorman) のセットアップ

• apt-get update して apt-get install git して git clone して quickstart.sh するだけなので簡単
• 途中で冒頭に作った Personal API Key がいる

6. ~/doorman/xxx@gmail.com.ovpn みたいなやつを手元に SCP する
7. 手元のマシンで OpenVPN をインストールする

skmkzyk

apt:
  preserve_sources_list: true
datasource_list: [Ec2]
datasource:
  Ec2:
    timeout: 60
    max_wait: 120
    metadata_urls:
      - https://metadata.packet.net
      - http://metadata.packet.net

skmkzyk

# ref. https://docs.microsoft.com/en-us/rest/api/virtualwan/virtual-hubs/get-effective-virtual-hub-routes

$Payload = [PSCustomObject]@{
  resourceId = "/subscriptions/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/resourceGroups/virtual-wan/providers/Microsoft.Network/virtualHubs/vhub01/hubRouteTables/defaultRouteTable"
  virtualWanResourceType = "RouteTable"
} | ConvertTo-Json

Invoke-AzRestMethod -Method post -Path '/subscriptions/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/resourceGroups/virtual-wan/providers/Microsoft.Network/virtualHubs/vhub01/effectiveRoutes?api-version=2021-01-01' -Payload $Payload -Debug

# To get location URL from its HTTP response header, `-Debug` option is required.

skmkzyk

Function Add-AzWvdApplicationGroupUser() {
    [CmdletBinding()]
    param (
        [Parameter(Mandatory = $true)] [string] $ResourceGroupName,
        [Parameter(Mandatory = $true)] [string] $ApplicationGroupName,
        [Parameter(Mandatory = $true)] [string] $SignInName
    )

    $subscriptionId = (Get-AzContext).Subscription.Id

skmkzyk

Function New-AzVMFromExistingResource() {
    [CmdletBinding()]
    param (
        [Parameter(Mandatory = $true)] [string] $ResourceGroupName,
        [Parameter(Mandatory = $true)] [string] $LocationName,
        [Parameter(Mandatory = $true)] [string] $VMName,
        [Parameter(Mandatory = $true)] [string] $VMSize,
        [Parameter(Mandatory = $true)] [string] $AVSetName,
        [Parameter(Mandatory = $true)] [string] $OSDiskName,
        [Parameter(Mandatory = $true)] [string] $NICName

skmkzyk

$ResourceGroupName = "rds-s2d"
$LocationName = "southeastasia"

$VMName = "fsn1"
$VMSize = "Standard_D2s_v3"
$AVSetName = "avset-fsn"

# 既存の OS Disk をつかむ
$OSDisk = Get-AzDisk -DiskName fsn01_OsDisk_1_4391c3850a5847ba8a4753316ddfee89 -ResourceGroupName $ResourceGroupName

skmkzyk

$ResourceGroupName = "rds-s2d"
$LBName = "blb-fsn"
$NICName = "fsn01896"

# LB をつかむ
$BEPool = Get-AzLoadBalancer -ResourceGroupName $ResourceGroupName -Name $LBName | Get-AzLoadBalancerBackendAddressPoolConfig

# 既存の NIC をつかむ
$NIC = Get-AzNetworkInterface -Name $NICName -ResourceGroupName $ResourceGroupName
$NIC = Set-AzNetworkInterfaceIpConfig -Name ipconfig1 -NetworkInterface $NIC -LoadBalancerBackendAddressPoolId $BEPool.Id

skmkzyk

$ResourceGroupName = "rds-s2d"
$LocationName = "southeastasia"

$VMName = "fsn1"
$VMSize = "Standard_D2s_v3"

# 既存の OS Disk をつかむ
$OSDisk = Get-AzDisk -DiskName fsn01_OsDisk_1_4391c3850a5847ba8a4753316ddfee89 -ResourceGroupName $ResourceGroupName

# 既存の Data Disk をつかむ

skmkzyk

{
    "definition": {
        "$schema": "https://schema.management.azure.com/providers/Microsoft.Logic/schemas/2016-06-01/workflowdefinition.json#",
        "actions": {
            "create_base64_PAT": {
                "inputs": "@base64(':xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx')",
                "runAfter": {
                    "end_time": [
                        "Succeeded"
                    ]

skmkzyk

{
  "name": "sample2",
  "properties": {
    "defaultEncryptionScope": "$account-encryption-key",
    "deleted": false,
    "denyEncryptionScopeOverride": false,
    "hasImmutabilityPolicy": false,
    "hasLegalHold": false,
    "leaseState": "Available",
    "leaseStatus": "Unlocked",