-
Notifications
You must be signed in to change notification settings - Fork 24
/
Copy pathrollout.ps1
82 lines (72 loc) · 3.67 KB
/
rollout.ps1
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
$hub = [SubscriptionDetails]::new("","","","","")
$preProd = [SubscriptionDetails]::new("","","","","")
$prod = [SubscriptionDetails]::new("","","","","")
$nonProd = [SubscriptionDetails]::new("","","","","")
Class SubscriptionDetails
{
[String]$_subscriptionId
[string]$_resourceGroup
[String]$_spnUser
[string]$_spnPassword
[String]$_tenantId
SubscriptionDetails([String]$SubscriptionId,[string]$ResourceGroup,[String]$SpnUser,[string]$SpnPassword,[String]$tenantId)
{
$this._subscriptionId = $SubscriptionId
$this._resourceGroup = $ResourceGroup
$this._spnUser = $SpnUser
$this._spnPassword = $SpnPassword
$this._tenantId = $tenantId
}
}
<# Login #>
Function Login($subscriptionDetails) {
$psCred = New-Object System.Management.Automation.PSCredential($subscriptionDetails._spnUser , (ConvertTo-SecureString $subscriptionDetails._spnPassword -AsPlainText -Force) )
Connect-AzAccount -Credential $psCred -TenantId $subscriptionDetails._tenantId -ServicePrincipal
}
Function Logout(){
Disconnect-AzAccount
}
<# rollout nonprod #>
Login($nonProd)
Set-AzContext -Subscription $nonProd._subscriptionId
New-AzResourceGroupDeployment -ResourceGroupName $nonProd._resourceGroup -TemplateFile nonprod/azureDeploy_nonprod_vnet.json -verbose
$nonProdVnetObject = Get-AzVirtualNetwork -ResourceGroupName $nonProd._resourceGroup
Logout
<# rollout preprod #>
Login($preProd)
Set-AzContext -Subscription $preProd._subscriptionId
New-AzResourceGroupDeployment -ResourceGroupName $preProd._resourceGroup -TemplateFile preprod/azureDeploy_preprod_vnet.json -verbose
$preProdVnetObject = Get-AzVirtualNetwork -ResourceGroupName $preProd._resourceGroup
Logout
<# rollout prod #>
Login($prod)
Set-AzContext -Subscription $prod._subscriptionId
New-AzResourceGroupDeployment -ResourceGroupName $Prod._resourceGroup -TemplateFile prod/azureDeploy_prod_vnet.json -verbose
$prodVnetObject = Get-AzVirtualNetwork -ResourceGroupName $prod._resourceGroup
Logout
<# rollout hub #>
Login($hub)
Set-AzContext -Subscription $hub._subscriptionId
New-AzResourceGroupDeployment -ResourceGroupName $hub._resourceGroup -TemplateFile hub/azureDeploy_hub.json -verbose
<# peering hub with other networks #>
$hubVnetObject = Get-AzVirtualNetwork -ResourceGroupName $hub._resourceGroup
Add-AzVirtualNetworkPeering -Name ($hubVnetObject.name + "to" + $prodVnetObject.name) -VirtualNetwork $hubVnetObject -RemoteVirtualNetworkId $prodVnetObject.Id -AllowGatewayTransit
Add-AzVirtualNetworkPeering -Name ($hubVnetObject.name + "to" + $preProdVnetObject.name) -VirtualNetwork $hubVnetObject -RemoteVirtualNetworkId $preProdVnetObject.Id -AllowGatewayTransit
Add-AzVirtualNetworkPeering -Name ($hubVnetObject.name + "to" + $nonProdVnetObject.name) -VirtualNetwork $hubVnetObject -RemoteVirtualNetworkId $nonProdVnetObject.Id -AllowGatewayTransit
Logout
<# peering other networks with hub#>
<# rollout nonprod #>
Login($nonProd)
Set-AzContext -Subscription $nonProd._subscriptionId
Add-AzVirtualNetworkPeering -Name $hubVnetObject.name -VirtualNetwork $nonProdVnetObject -RemoteVirtualNetworkId $hubVnetObject.Id -UseRemoteGateways
Logout
<# rollout preprod #>
Login($preProd)
Set-AzContext -Subscription $preProd._subscriptionId
Add-AzVirtualNetworkPeering -Name $hubVnetObject.name -VirtualNetwork $preProdVnetObject -RemoteVirtualNetworkId $hubVnetObject.Id -UseRemoteGateways
Logout
<# rollout prod #>
Login($prod)
Set-AzContext -Subscription $prod._subscriptionId
Add-AzVirtualNetworkPeering -Name $hubVnetObject.name -VirtualNetwork $prodVnetObject -RemoteVirtualNetworkId $hubVnetObject.Id -UseRemoteGateways
Logout