109 lines
3.1 KiB
JSON
109 lines
3.1 KiB
JSON
|
{
|
||
|
|
"$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#",
|
||
|
|
"contentVersion": "1.0.0.0",
|
||
|
|
"parameters": {
|
||
|
|
},
|
||
|
|
"variables": {
|
||
|
|
},
|
||
|
|
"resources": [
|
||
|
|
{
|
||
|
|
"apiVersion": "{{apiVersion}}",
|
||
|
|
"type": "Microsoft.Network/routeTables",
|
||
|
|
"name": "{{routeTableName}}",
|
||
|
|
"location": "[resourceGroup().location]",
|
||
|
|
"properties": {
|
||
|
|
"routes": [
|
||
|
|
]
|
||
|
|
}
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "Microsoft.Network/virtualNetworks",
|
||
|
|
"name": "{{virtualNetworkName}}",
|
||
|
|
"location": "[resourceGroup().location]",
|
||
|
|
"apiVersion": "{{apiVersion}}",
|
||
|
|
"dependsOn": [
|
||
|
|
"[concat('Microsoft.Network/routeTables/', '{{routeTableName}}')]"
|
||
|
|
],
|
||
|
|
"properties": {
|
||
|
|
"addressSpace": {
|
||
|
|
"addressPrefixes": [
|
||
|
|
"{{azure_vnet_cidr}}"
|
||
|
|
]
|
||
|
|
},
|
||
|
|
"subnets": [
|
||
|
|
{
|
||
|
|
"name": "{{subnetMastersName}}",
|
||
|
|
"properties": {
|
||
|
|
"addressPrefix": "{{azure_masters_cidr}}",
|
||
|
|
"routeTable": {
|
||
|
|
"id": "[resourceId('Microsoft.Network/routeTables', '{{routeTableName}}')]"
|
||
|
|
}
|
||
|
|
}
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"name": "{{subnetMinionsName}}",
|
||
|
|
"properties": {
|
||
|
|
"addressPrefix": "{{azure_minions_cidr}}",
|
||
|
|
"routeTable": {
|
||
|
|
"id": "[resourceId('Microsoft.Network/routeTables', '{{routeTableName}}')]"
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
{% if use_bastion %}
|
||
|
|
,{
|
||
|
|
"name": "{{subnetAdminName}}",
|
||
|
|
"properties": {
|
||
|
|
"addressPrefix": "{{azure_admin_cidr}}",
|
||
|
|
"routeTable": {
|
||
|
|
"id": "[resourceId('Microsoft.Network/routeTables', '{{routeTableName}}')]"
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
{% endif %}
|
||
|
|
]
|
||
|
|
}
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"apiVersion": "{{apiVersion}}",
|
||
|
|
"type": "Microsoft.Network/networkSecurityGroups",
|
||
|
|
"name": "{{securityGroupName}}",
|
||
|
|
"location": "[resourceGroup().location]",
|
||
|
|
"properties": {
|
||
|
|
"securityRules": [
|
||
|
|
{% if not use_bastion %}
|
||
|
|
{
|
||
|
|
"name": "ssh",
|
||
|
|
"properties": {
|
||
|
|
"description": "Allow SSH",
|
||
|
|
"protocol": "Tcp",
|
||
|
|
"sourcePortRange": "*",
|
||
|
|
"destinationPortRange": "22",
|
||
|
|
"sourceAddressPrefix": "Internet",
|
||
|
|
"destinationAddressPrefix": "*",
|
||
|
|
"access": "Allow",
|
||
|
|
"priority": 100,
|
||
|
|
"direction": "Inbound"
|
||
|
|
}
|
||
|
|
},
|
||
|
|
{% endif %}
|
||
|
|
{
|
||
|
|
"name": "kube-api",
|
||
|
|
"properties": {
|
||
|
|
"description": "Allow secure kube-api",
|
||
|
|
"protocol": "Tcp",
|
||
|
|
"sourcePortRange": "*",
|
||
|
|
"destinationPortRange": "443",
|
||
|
|
"sourceAddressPrefix": "Internet",
|
||
|
|
"destinationAddressPrefix": "*",
|
||
|
|
"access": "Allow",
|
||
|
|
"priority": 101,
|
||
|
|
"direction": "Inbound"
|
||
|
|
}
|
||
|
|
}
|
||
|
|
]
|
||
|
|
},
|
||
|
|
"resources": [],
|
||
|
|
"dependsOn": []
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|