provider update | jumpbox module

Author: kolosovpetro

modules/jumpbox-vm/main.tf

@@ -0,0 +1,68 @@
+resource "azurerm_network_interface" "public" {
+  name                = var.network_interface_name
+  location            = var.resource_group_location
+  resource_group_name = var.resource_group_name
+
+  ip_configuration {
+    name                          = var.ip_configuration_name
+    subnet_id                     = var.subnet_id
+    private_ip_address_allocation = "Dynamic"
+  }
+}
+
+data "azurerm_image" "search" {
+  name                = var.custom_image_sku
+  resource_group_name = var.custom_image_resource_group_name
+}
+
+# Assume a Linux VM with a user-assigned managed identity
+resource "azurerm_user_assigned_identity" "vm_mi" {
+  name                = "vm-mi-d01"
+  resource_group_name = var.resource_group_name
+  location            = var.resource_group_location
+}
+
+resource "azurerm_virtual_machine" "public" {
+  name                  = var.vm_name
+  location              = var.resource_group_location
+  resource_group_name   = var.resource_group_name
+  network_interface_ids = [azurerm_network_interface.public.id]
+  vm_size               = var.vm_size
+
+  delete_os_disk_on_termination = true
+
+  storage_image_reference {
+    id = data.azurerm_image.search.id
+  }
+
+  identity {
+    type         = "UserAssigned"
+    identity_ids = [azurerm_user_assigned_identity.vm_mi.id]
+  }
+
+  storage_os_disk {
+    name              = var.storage_os_disk_name
+    caching           = var.storage_os_disk_caching
+    create_option     = var.storage_os_disk_create_option
+    managed_disk_type = var.storage_os_disk_managed_disk_type
+  }
+
+  os_profile_linux_config {
+    disable_password_authentication = false
+  }
+
+  os_profile {
+    computer_name  = var.os_profile_computer_name
+    admin_username = var.os_profile_admin_username
+    admin_password = var.os_profile_admin_password
+  }
+
+  depends_on = [
+    azurerm_network_interface_security_group_association.nic_association
+  ]
+}
+
+resource "azurerm_network_interface_security_group_association" "nic_association" {
+  network_interface_id      = azurerm_network_interface.public.id
+  network_security_group_id = var.network_security_group_id
+}

modules/jumpbox-vm/output.tf

@@ -0,0 +1,24 @@
+output "username" {
+  value = var.os_profile_admin_username
+}
+
+output "password" {
+  value     = var.os_profile_admin_password
+  sensitive = true
+}
+
+output "network_interface_id" {
+  value = azurerm_network_interface.public.id
+}
+
+output "ip_configuration_name" {
+  value = var.ip_configuration_name
+}
+
+output "id" {
+  value = azurerm_virtual_machine.public.id
+}
+
+output "user_assigned_identity_principal_id" {
+  value = azurerm_user_assigned_identity.vm_mi.principal_id
+}

modules/jumpbox-vm/variables.tf

@@ -0,0 +1,96 @@
+#################################################################################################################
+# REQUIRED VARIABLES
+#################################################################################################################
+
+variable "resource_group_name" {
+  type        = string
+  description = "The name of the Azure resource group in which resources will be deployed."
+}
+
+variable "resource_group_location" {
+  type        = string
+  description = "The Azure region where the resource group will be created."
+}
+
+variable "subnet_id" {
+  type        = string
+  description = "The ID of the subnet where the virtual machine will be deployed."
+}
+
+variable "network_interface_name" {
+  type        = string
+  description = "The name of the network interface to associate with the virtual machine."
+}
+
+variable "ip_configuration_name" {
+  type        = string
+  description = "The name of the IP configuration for the network interface."
+}
+
+variable "vm_name" {
+  type        = string
+  description = "The name of the virtual machine instance."
+}
+
+variable "storage_os_disk_name" {
+  type        = string
+  description = "The name assigned to the OS disk."
+}
+
+variable "os_profile_computer_name" {
+  type        = string
+  description = "The hostname of the virtual machine."
+}
+
+variable "os_profile_admin_username" {
+  type        = string
+  description = "The administrator username for the virtual machine."
+}
+
+variable "os_profile_admin_password" {
+  type        = string
+  description = "The administrator password for the virtual machine. Use environment variables or a secret manager instead."
+}
+
+variable "network_security_group_id" {
+  type        = string
+  description = "ID of network security group"
+}
+
+#################################################################################################################
+# OPTIONAL VARIABLES (WITH DEFAULT VALUES)
+#################################################################################################################
+
+variable "vm_size" {
+  type        = string
+  description = "Specifies the size of the virtual machine."
+  default     = "Standard_B4ms"
+}
+
+variable "storage_os_disk_caching" {
+  type        = string
+  description = "Defines the caching policy for the OS disk (e.g., ReadOnly, ReadWrite)."
+  default     = "ReadWrite"
+}
+
+variable "storage_os_disk_create_option" {
+  type        = string
+  description = "Determines how the OS disk should be created (e.g., FromImage, Attach, Empty)."
+  default     = "FromImage"
+}
+
+variable "storage_os_disk_managed_disk_type" {
+  type        = string
+  description = "Defines the type of managed disk for the OS disk (e.g., Premium_LRS, Standard_LRS)."
+  default     = "Premium_LRS"
+}
+
+variable "custom_image_sku" {
+  type        = string
+  description = "The custom image SKU (name)."
+}
+
+variable "custom_image_resource_group_name" {
+  type        = string
+  description = "The custom image resource group."
+}

modules/module/main.tf

@@ -3,6 +3,10 @@ provider "azurerm" {
     resource_group {
       prevent_deletion_if_contains_resources = false
     }
+    key_vault {
+      purge_soft_delete_on_destroy    = true
+      recover_soft_deleted_key_vaults = true
+    }
   }
   subscription_id = var.subscription_id
 }