Azure DevOps 與 Terraform 基礎設施自動化實踐

$SALTMASTER = 'x.x.x.x' # 必填欄位
$MINIONNAME = $env:COMPUTERNAME
echo $MINIONNAME

# 若系統已安裝 SaltStack 則不再佈署
if ([System.IO.File]::Exists("c:\salt\bin\python.exe")) {
    Write-output "nothing to do: Salt is already installed"
    #exit 0
}

Write-output "Salt is not installed, Starting Salt Deployment script"

# 下載 Salt 安裝包到臨時資料夾
[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12
[System.Net.ServicePointManager]::ServerCertificateValidationCallback = { $true }
$webclient = New-Object system.net.webclient
$tempfolder = $env:TEMP
Write-output "Downloading Salt Minion to $tempfolder"
$webclient.DownloadFile("https://repo.saltproject.io/salt/py3/windows/latest/Salt-Minion-3006.3-Py3-AMD64-Setup.exe", "$tempfolder\Salt-Minion-3006.3-Py3-AMD64-Setup.exe")

$tempfolder = "C:\temp"
$MINIONNAME = "minion1"
$SALTMASTER = "saltmaster.example.com"

# 下載 Salt Minion 可執行檔
Invoke-WebRequest -Uri "https://repo.saltproject.io/salt/py3/windows/latest/Salt-Minion-3006.3-Py3-AMD64-Setup.exe" -OutFile "$tempfolder\saltminion.exe"

# 檢查下載是否成功
if (![System.IO.File]::Exists("$tempfolder\saltminion.exe")) {
    Write-Output "FAILED - Failed to find $tempfolder\saltminion.exe, was supposed to download from https://repo.saltproject.io/salt/py3/windows/latest/Salt-Minion-3006.3-Py3-AMD64-Setup.exe, please investigate, exiting script."
    exit 1
}

Write-Output "SALT executable download successful"

# 組態 Salt Minion 設定
$MINIONCONF = @"
id: $MINIONNAME
master: $SALTMASTER
tcp_keepalive: True
tcp_keepalive_idle: 60
"@

# 建立必要的目錄
New-Item -Path "C:\ProgramData\Salt Project\Salt\conf" -ItemType Directory
New-Item -Path "C:\ProgramData\Salt Project\Salt\conf\minion.d" -ItemType Directory

# 建立 minion.conf 設定檔
Set-Content "C:\ProgramData\Salt Project\Salt\conf\minion.d\minion.conf" $MINIONCONF

# 安裝 Salt Minion
Start-Process -FilePath "$tempfolder\saltminion.exe" -ArgumentList "/S /master=$SALTMASTER /minion-name=$MINIONNAME", "/install-dir='C:\salt'" -Wait

# 建立符號連結
New-Item -ItemType SymbolicLink -Path "C:\salt\conf" -Target "C:\ProgramData\Salt Project\Salt\conf"
New-Item -ItemType SymbolicLink -Path "C:\salt\var" -Target "C:\ProgramData\Salt Project\Salt\var"

sleep 5

# 檢查 Salt Minion 服務是否啟動
if (-not (Get-Service 'salt-minion' -ErrorAction SilentlyContinue)) {
    Write-Output "Did not find salt-minion service, sleeping 30 seconds and retrying."
    sleep 30

    if (-not (Get-Service 'salt-minion' -ErrorAction SilentlyContinue)) {
        Write-Output "FAILED - Did not find salt-minion service."
        Write-Output "Removing C:\salt because salt installed failed"
        Remove-Item -Path "C:\salt" -Force -Recurse
        Write-Output "FAILED - Salt Minion Failed to Install, please investigate, exiting script."
        exit 1
    }
}

Write-Output "Salt Service is running"
Write-Output "
---
-
---
-
---
-
---
-
---
-
---
-
---
-
---
-
---
-
---
-
---
"
Write-Output "Installation of SaltMinion was successful!"
Write-Output "
---
-
---
-
---
-
---
-
---
-
---
-
---
-
---
-
---
-
---
-
---
"
exit 0

provider "vsphere" {
  vsphere_server   = "vcslab01.dc.com"
  user             = "administrator@vsphere.local"
  password         = "XXXXX"
  allow_unverified_ssl = true
}

data "vsphere_datacenter" "dc" {
  name = "Lab"
}

data "vsphere_resource_pool" "pool" {
  name              = "vcslab01.dc.com/Resources"
  datacenter_id     = "${data.vsphere_datacenter.dc.id}"
}

data "vsphere_datastore" "datastore" {
  name              = "XYZ"
  datacenter_id     = "${data.vsphere_datacenter.dc.id}"
}

data "vsphere_network" "network" {
  name              = "VM Network"
  datacenter_id     = "${data.vsphere_datacenter.dc.id}"
}

data "vsphere_virtual_machine" "template" {
  name              = "Win2K16"
  datacenter_id     = "${data.vsphere_datacenter.dc.id}"
}

resource "vsphere_virtual_machine" "vm" {
  name             = "Windows2016_terraform"
  resource_pool_id = "${data.vsphere_resource_pool.pool.id}"
  datastore_id     = "${data.vsphere_datastore.datastore.id}"
  num_cpus         = 4
  cpu_hot_add_enabled   = true
  memory           = 12288
  memory_hot_add_enabled   = true
  wait_for_guest_net_timeout = 0
  wait_for_guest_ip_timeout = 0
  firmware         = "efi"
  guest_id         = "${data.vsphere_virtual_machine.template.guest_id}"
  scsi_type        = "${data.vsphere_virtual_machine.template.scsi_type}"

  network_interface {
    network_id   = "${data.vsphere_network.network.id}"
    adapter_type = "${data.vsphere_virtual_machine.template.network_interface_types[0]}"
  }

disk {
      label            = "${var.name}-disk1"
      size             = var.size_gb # Disk size in GB (must be >=1)
      thin_provisioned =
      eagerly_scrub     =
}
}
clone {
template_uuid =
customize {

windows_options {
computer_name =
admin_password =
full_name =
auto_logon =
auto_logon_count =
}
network_interface {
ipv4_address =
ipv4_netmask =
}
ipv4_gateway =
}
}
provisioner “local-exec”{
command=“copy-item C:\\terraform\\Test\\Install_Minion.ps1-destination C:\\\
-Credential (new-object typename System.Management.Automation.PSCredential argumentlist local\\Administrator, (convertto-securestring-AsPlainText-Force-Str XXXX)))”
interpreter=[“PowerShell”,“-Command”]
}
provisioner “local-exec”{
command=“Invoke-Command-ComputerName-Credential (new-object-typename System.Management.Automation.PSCredential argumentlist local\\Administrator, (convertto-securestring-AsPlainText-Force-Str XXXX))-\ScriptBlock{C:\\Install_Minion.ps1}”
interpreter=[“PowerShell”,“-Command”]
}}