azuredeploy.json

{
    "$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#",
    "contentVersion": "1.0.0.0",
    "parameters": {
        "siteName": {
            "type": "string",
            "metadata": {
                "description": "The Site name for your Fortis pipeline."
            }
        },
        "acsMasterCount": {
            "type": "int",
            "metadata": {
                "description": "The number of Kubernetes masters for the cluster."
            }
        },
        "acsAgentCount": {
            "type": "int",
            "metadata": {
                "description": "The number of agents for the cluster.  This value can be from 1 to 100 (note, for Kubernetes clusters you will also get 1 or 2 public agents in addition to these seleted masters)"
            }
        },
        "agentVMSize": {
            "type": "string",
            "allowedValues": [
                "Standard_DS1",
                "Standard_DS2",
                "Standard_DS3",
                "Standard_DS4",
                "Standard_DS11",
                "Standard_DS12",
                "Standard_DS13",
                "Standard_DS14",
                "Standard_GS1",
                "Standard_GS2",
                "Standard_GS3",
                "Standard_GS4",
                "Standard_GS5",
                "Standard_L4s",
                "Standard_L8s"
            ],
            "metadata": {
                "description": "The size of the Virtual Machine."
            }
        },
        "dnsNamePrefix": {
            "type": "string",
            "metadata": {
                "description": "Sets the Domain name prefix for the cluster.  The concatenation of the domain name and the regionalized DNS zone make up the fully qualified domain name associated with the public IP address."
            }
        },
        "adminUsername": {
            "type": "string",
            "defaultValue": "fortisadmin",
            "metadata": {
                "description": "User name for the Linux Virtual Machines."
            }
        },
        "sparkWorkers": {
            "type": "int",
            "metadata": {
                "description": "The number of Spark Worker nodes to create."
            }
        },
        "cassandraNodes": {
            "type": "int",
            "metadata": {
                "description": "The number of Cassandra nodes to create."
            }
        },
        "siteType": {
            "type": "string",
            "allowedValues": [
                "humanitarian",
                "health"
            ],
            "metadata": {
                "description": "The type of fortis site that you want to deploy. This will drive the default list of sites, topics and Public Facebook pages that Fortis will start monitoring."
            }
        },
        "sshPublicKey": {
            "type": "securestring",
            "metadata": {
                "description": "Configure all linux machines with the SSH RSA public key string.  Your key should include three parts, for example 'ssh-rsa AAAAB...snip...UcyupgH azureuser@linuxvm'"
            }
        },
        "servicePrincipalAppId": {
            "metadata": {
                "description": "Client ID (used by cloudprovider)"
            },
            "type": "securestring"
        },
        "servicePrincipalAppKey": {
            "metadata": {
                "description": "The Service Principal Client Secret."
            },
            "type": "securestring"
        }
    },
    "variables": {
        "storageAccountName": "[concat(uniquestring(resourceGroup().id), 'prstrg')]",
        "premStorageSku": "Premium_LRS",
        "vmStorageAccountType": "Standard_LRS",
        "vmName": "FortisDeployVM",
        "OSDiskName": "osdiskforlinuxsimple",
        "applicationInsightServiceName": "[concat('FortisAppInsight-', parameters('siteName'))]",
        "kubernetesName": "[concat('containerservice-', resourceGroup().name)]",
        "orchestratorType": "Kubernetes",
        "sshKeyPath": "[concat('/home/',parameters('adminUsername'),'/.ssh/authorized_keys')]",
        "fortisEventHubName": "tadawebEHTopic",
        "deploymentVmSize": "Standard_D2_v2",
        "deploymentUbuntuOSVersion": "16.04.0-LTS",
        "imagePublisher": "Canonical",
        "imageOffer": "UbuntuServer",
        "vmStorageAccountContainerName": "vhds",
        "nicName": "fortisVMNic",
        "managePolicy": "ManagePolicy",
        "sendPolicy": "SendPolicy",
        "agentOsType": "Linux",
        "listenPolicy": "ListenPolicy",
        "ehVersion": "2015-08-01",
        "vmStorageAccountName": "[concat(uniquestring(resourceGroup().id), 'ststrg')]",
        "ehConsumerGroupName": "fortisEHConsumerGroup",
        "addressPrefix": "10.0.0.0/16",
        "publicIPAddressName": "fortisDeployPublicIP",
        "subnetName": "Subnet",
        "sbVersion": "2017-04-01",
        "subnetPrefix": "10.0.0.0/24",
        "publicIPAddressType": "Dynamic",
        "virtualNetworkName": "FortisVNet",
        "vnetID": "[resourceId('Microsoft.Network/virtualNetworks',variables('virtualNetworkName'))]",
        "subnetRef": "[concat(variables('vnetID'),'/subnets/',variables('subnetName'))]",
        "postDeploymentGithubRepoPath": "https://raw.githubusercontent.com/CatalystCode/fortisdeploy/master",
        "postDeploymentExtensionScript": "fortis-deploy.sh",
        "githubClonePath": "https://github.com/CatalystCode/fortisdeploy.git",
        "sbNamespace": "[concat(uniquestring(resourceGroup().id), 'sbns')]",
        "sbQueueNameConfiguration": "configuration",
        "sbQueueNameCommand": "command",
        "sbAuthRuleResourceId": "[resourceId('Microsoft.ServiceBus/namespaces/authorizationRules', variables('sbNamespace'), variables('defaultSASKeyName'))]",
        "defaultSASKeyName": "RootManageSharedAccessKey",
        "sbAuthRuleName": "[concat(variables('sbNamespace'),'/fortisAuthRule')]",
        "eventHubNamespace": "[concat(uniquestring(resourceGroup().id), 'ehns')]",
        "eventHubName": "published-messages",
        "eventHubMessagingUnits": "1",
        "eventHubSku": "2",
        "eventhubResource": "[resourceId('Microsoft.Eventhub/namespaces/authorizationRules', variables('eventHubNamespace'), 'fortisAuthRule')]",
        "useServicePrincipal": "[variables('useServicePrincipalDictionary')[variables('orchestratorType')]]",
        "useServicePrincipalDictionary": {
            "DCOS": 0,
            "Swarm": 0,
            "Kubernetes": 1
        },
        "servicePrincipalFields": [
            null,
            {
                "ClientId": "[parameters('servicePrincipalAppId')]",
                "Secret": "[parameters('servicePrincipalAppKey')]"
            }
        ]
    },
    "resources": [
        {
            "type": "Microsoft.Storage/storageAccounts",
            "name": "[variables('storageAccountName')]",
            "apiVersion": "2016-01-01",
            "location": "[resourceGroup().location]",
            "sku": {
                "name": "[variables('vmStorageAccountType')]"
            },
            "kind": "Storage",
            "properties": {}
        },
        {
            "apiVersion": "2015-06-15",
            "type": "Microsoft.Network/publicIPAddresses",
            "name": "[variables('publicIPAddressName')]",
            "location": "[resourceGroup().location]",
            "properties": {
                "publicIPAllocationMethod": "[variables('publicIPAddressType')]",
                "dnsSettings": {
                    "domainNameLabel": "[parameters('siteName')]"
                }
            }
        },
        {
            "apiVersion": "2015-01-01",
            "name": "eventhubPrimaryKey",
            "type": "Microsoft.Resources/deployments",
            "properties": {
                "mode": "incremental",
                "templateLink": {
                    "uri": "https://raw.githubusercontent.com/davidjrh/azurerm-newguid/master/NewGuid.json",
                    "contentVersion": "1.0.0.0"
                },
                "parameters": {
                    "seed": {
                        "value": "1"
                    }
                }
            }
        },
        {
            "apiVersion": "2015-01-01",
            "name": "eventhubSecondaryKey",
            "type": "Microsoft.Resources/deployments",
            "properties": {
                "mode": "incremental",
                "templateLink": {
                    "uri": "https://raw.githubusercontent.com/davidjrh/azurerm-newguid/master/NewGuid.json",
                    "contentVersion": "1.0.0.0"
                },
                "parameters": {
                    "seed": {
                        "value": "0"
                    }
                }
            }
        },
        {
            "type": "Microsoft.Storage/storageAccounts",
            "name": "[variables('vmStorageAccountName')]",
            "apiVersion": "2016-01-01",
            "location": "[resourceGroup().location]",
            "sku": {
                "name": "[variables('vmStorageAccountType')]"
            },
            "kind": "Storage",
            "properties": {}
        },
        {
            "apiVersion": "[variables('sbVersion')]",
            "name": "[variables('sbNamespace')]",
            "type": "Microsoft.ServiceBus/namespaces",
            "location": "[resourceGroup().location]",
            "resources": [
                {
                    "apiVersion": "[variables('sbVersion')]",
                    "name": "[variables('sbQueueNameCommand')]",
                    "type": "Queues",
                    "dependsOn": [
                        "[concat('Microsoft.ServiceBus/namespaces/', variables('sbNamespace'))]"
                    ]
                },
                {
                    "apiVersion": "[variables('sbVersion')]",
                    "name": "[variables('sbQueueNameConfiguration')]",
                    "type": "Queues",
                    "dependsOn": [
                        "[concat('Microsoft.ServiceBus/namespaces/', variables('sbNamespace'))]"
                    ]
                },
                {
                    "apiVersion": "[variables('sbVersion')]",
                    "name": "[variables('sbAuthRuleName')]",
                    "type": "Microsoft.ServiceBus/namespaces/authorizationRules",
                    "dependsOn": [
                        "[concat('Microsoft.ServiceBus/namespaces/', variables('sbNamespace'))]"
                    ],
                    "location": "[resourceGroup().location]",
                    "properties": {
                        "Rights": [
                            "Send",
                            "Listen",
                            "Manage"
                        ]
                    }
                }
            ]
        },
        {
            "apiVersion": "[variables('ehVersion')]",
            "name": "[variables('eventHubNamespace')]",
            "type": "Microsoft.EventHub/namespaces",
            "location": "[resourceGroup().location]",
            "properties": {
                "MessagingSku": "[variables('eventHubSku')]",
                "MessagingSKUPlan": {
                    "MessagingUnits": "[variables('eventHubMessagingUnits')]",
                    "SKU": "[variables('eventHubSku')]"
                }
            },
            "resources": [
                {
                    "apiVersion": "[variables('ehVersion')]",
                    "name": "[variables('eventHubName')]",
                    "location": "[resourceGroup().location]",
                    "type": "eventhubs",
                    "dependsOn": [
                        "[concat('Microsoft.EventHub/namespaces/', variables('eventHubNamespace'))]"
                    ],
                    "properties": {
                        "path": "[variables('eventHubName')]"
                    }
                },
                {
                    "apiVersion": "[variables('ehVersion')]",
                    "name": "[concat(variables('eventHubNamespace'),'/fortisAuthRule')]",
                    "type": "Microsoft.EventHub/namespaces/authorizationRules",
                    "dependsOn": [
                        "[concat('Microsoft.EventHub/namespaces/', variables('eventHubNamespace'))]"
                    ],
                    "location": "[resourceGroup().location]",
                    "properties": {
                        "PrimaryKey": "[reference('eventhubPrimaryKey').outputs.guid.value]",
                        "SecondaryKey": "[reference('eventhubSecondaryKey').outputs.guid.value]",
                        "Rights": [
                            "Send",
                            "Listen",
                            "Manage"
                        ]
                    }
                }
            ]
        },
        {
            "apiVersion": "2015-06-15",
            "type": "Microsoft.Network/virtualNetworks",
            "name": "[variables('virtualNetworkName')]",
            "location": "[resourceGroup().location]",
            "properties": {
                "addressSpace": {
                    "addressPrefixes": [
                        "[variables('addressPrefix')]"
                    ]
                },
                "subnets": [
                    {
                        "name": "[variables('subnetName')]",
                        "properties": {
                            "addressPrefix": "[variables('subnetPrefix')]"
                        }
                    }
                ]
            }
        },
        {
            "apiVersion": "2015-06-15",
            "type": "Microsoft.Network/networkInterfaces",
            "name": "[variables('nicName')]",
            "location": "[resourceGroup().location]",
            "dependsOn": [
                "[concat('Microsoft.Network/publicIPAddresses/', variables('publicIPAddressName'))]",
                "[concat('Microsoft.Network/virtualNetworks/', variables('virtualNetworkName'))]"
            ],
            "properties": {
                "ipConfigurations": [
                    {
                        "name": "ipconfig1",
                        "properties": {
                            "privateIPAllocationMethod": "Dynamic",
                            "publicIPAddress": {
                                "id": "[resourceId('Microsoft.Network/publicIPAddresses',variables('publicIPAddressName'))]"
                            },
                            "subnet": {
                                "id": "[variables('subnetRef')]"
                            }
                        }
                    }
                ]
            }
        },
        {
            "apiVersion": "2016-03-30",
            "type": "Microsoft.Compute/virtualMachines",
            "name": "[variables('vmName')]",
            "location": "[resourceGroup().location]",
            "dependsOn": [
                "[concat('Microsoft.Storage/storageAccounts/', variables('storageAccountName'))]",
                "[concat('Microsoft.Network/networkInterfaces/', variables('nicName'))]",
                "[concat('Microsoft.Insights/components/', variables('applicationInsightServiceName'))]",
                "[concat('Microsoft.Storage/storageAccounts/', variables('vmStorageAccountName'))]",
                "[concat('Microsoft.EventHub/namespaces/', variables('eventHubNamespace'))]"
            ],
            "properties": {
                "hardwareProfile": {
                    "vmSize": "[variables('deploymentVmSize')]"
                },
                "osProfile": {
                    "computerName": "[variables('vmName')]",
                    "adminUsername": "[parameters('adminUsername')]",
                    "linuxConfiguration": {
                        "disablePasswordAuthentication": "true",
                        "ssh": {
                            "publicKeys": [
                                {
                                    "path": "[variables('sshKeyPath')]",
                                    "keyData": "[parameters('sshPublicKey')]"
                                }
                            ]
                        }
                    }
                },
                "storageProfile": {
                    "imageReference": {
                        "publisher": "[variables('imagePublisher')]",
                        "offer": "[variables('imageOffer')]",
                        "sku": "[variables('deploymentUbuntuOSVersion')]",
                        "version": "latest"
                    },
                    "osDisk": {
                        "name": "osdisk",
                        "vhd": {
                            "uri": "[concat('http://', variables('vmStorageAccountName'),'.blob.core.windows.net/',variables('vmStorageAccountContainerName'),'/',variables('OSDiskName'),'.vhd')]"
                        },
                        "caching": "ReadWrite",
                        "createOption": "FromImage"
                    }
                },
                "networkProfile": {
                    "networkInterfaces": [
                        {
                            "id": "[resourceId('Microsoft.Network/networkInterfaces',variables('nicName'))]"
                        }
                    ]
                },
                "diagnosticsProfile": {
                    "bootDiagnostics": {
                        "enabled": "true",
                        "storageUri": "[concat('http://', variables('vmStorageAccountName'),'.blob.core.windows.net')]"
                    }
                }
            }
        },
        {
            "name": "[variables('applicationInsightServiceName')]",
            "type": "Microsoft.Insights/components",
            "location": "eastus",
            "apiVersion": "2014-04-01",
            "tags": {
                "displayName": "Component ApplicationInsight"
            },
            "properties": {
                "Application_Type": "other",
                "applicationId": "[variables('applicationInsightServiceName')]"
            }
        },
        {
            "apiVersion": "2017-01-31",
            "type": "Microsoft.ContainerService/containerServices",
            "location": "[resourceGroup().location]",
            "name": "[variables('kubernetesName')]",
            "properties": {
                "orchestratorProfile": {
                    "orchestratorType": "[variables('orchestratorType')]"
                },
                "masterProfile": {
                    "count": "[parameters('acsMasterCount')]",
                    "dnsPrefix": "[parameters('dnsNamePrefix')]"
                },
                "agentPoolProfiles": [
                    {
                        "name": "agentpools",
                        "count": "[parameters('acsAgentCount')]",
                        "vmSize": "[parameters('agentVMSize')]",
                        "dnsPrefix": "[concat(parameters('dnsNamePrefix'),'agents')]"
                    }
                ],
                "linuxProfile": {
                    "adminUsername": "[parameters('adminUsername')]",
                    "ssh": {
                        "publicKeys": [
                            {
                                "keyData": "[parameters('sshPublicKey')]"
                            }
                        ]
                    }
                },
                "servicePrincipalProfile": "[variables('servicePrincipalFields')[variables('useServicePrincipal')]]"
            }
        },
        {
            "type": "Microsoft.Compute/virtualMachines/extensions",
            "name": "[concat(variables('vmName'),'/deploysite')]",
            "apiVersion": "2016-03-30",
            "location": "[resourceGroup().location]",
            "dependsOn": [
                "[resourceId('Microsoft.Compute/virtualMachines/', variables('vmName'))]",
                "[resourceId('Microsoft.ContainerService/containerServices/', variables('kubernetesName'))]"
            ],
            "properties": {
                "publisher": "Microsoft.Azure.Extensions",
                "type": "CustomScript",
                "typeHandlerVersion": "2.0",
                "autoUpgradeMinorVersion": true,
                "settings": {
                    "fileUris": [
                        "[concat(variables('postDeploymentGithubRepoPath'),'/', variables('postDeploymentExtensionScript'))]"
                    ],
                    "commandToExecute": "[concat('./', variables('postDeploymentExtensionScript'), ' -lo \"', resourceGroup().location, '\" -ak \"', parameters('servicePrincipalAppKey'), '\" -si \"', subscription().subscriptionId, '\" -ti \"', subscription().tenantId, '\" -sn \"', parameters('siteName'), '\" -un \"', parameters('adminUsername'), '\" -aii \"', reference(resourceId('Microsoft.Insights/components', variables('applicationInsightServiceName')), '2014-04-01').InstrumentationKey,'\" -rg \"', resourceGroup().name, '\" -mf \"', reference(resourceId('Microsoft.ContainerService/containerServices', variables('kubernetesName'))).masterProfile.fqdn, '\" -san \"', variables('storageAccountName'), '\" -sak \"', listKeys(resourceId('Microsoft.Storage/storageAccounts', variables('storageAccountName')), '2016-01-01').keys[0].value,'\" -sty \"', parameters('siteType'), '\" -ai \"', parameters('servicePrincipalAppId'), '\" -sw \"', parameters('sparkWorkers'), '\" -cn \"', parameters('cassandraNodes'), '\" -kn \"', variables('kubernetesName'), '\" -pf \"', parameters('dnsNamePrefix'), '\" -ec \"', listKeys(variables('eventhubResource'), variables('ehVersion')).primaryConnectionString, '\" -sb \"', listkeys(variables('sbAuthRuleResourceId'), variables('sbVersion')).primaryConnectionString, '\" -gc \"', variables('githubClonePath'), '\" -avms \"', parameters('agentVMSize'), '\"')]"
                }
            }
        }
    ],
    "outputs": {
        "kubernetesMasterFQDN": {
            "type": "string",
            "value": "[reference(resourceId('Microsoft.ContainerService/containerServices', variables('kubernetesName'))).masterProfile.fqdn]"
        },
        "fortisAdminSiteURL": {
            "type": "string",
            "value": "[resourceGroup().tags.FORTIS_ADMIN_INTERFACE_URL]"
        },
        "fortisSiteURL": {
            "type": "string",
            "value": "[resourceGroup().tags.FORTIS_INTERFACE_URL]"
        },
        "agentFQDN": {
            "type": "string",
            "value": "[reference(concat('Microsoft.ContainerService/containerServices/', variables('kubernetesName'))).agentPoolProfiles[0].fqdn]"
        }
    }
}