saltext.azurerm.clouds.azurerm#

Azure Resource Manager Cloud Module#

New in version 2016.11.0.

Changed in version 2019.2.0.

The Azure Resource Manager cloud module is used to control access to Microsoft Azure Resource Manager

configuration:

Required provider parameters:

if using username and password:

  • subscription_id

  • username

  • password

if using a service principal:

  • subscription_id

  • tenant

  • client_id

  • secret

if using Managed Service Identity authentication:

  • subscription_id

Optional provider parameters:

cloud_environment:
Used to point the cloud driver to different API endpoints, such as Azure GovCloud. Possible values:

  • AZURE_PUBLIC_CLOUD (default)

  • AZURE_CHINA_CLOUD

  • AZURE_US_GOV_CLOUD

  • AZURE_GERMAN_CLOUD

  • HTTP base URL for a custom endpoint, such as Azure Stack. The /metadata/endpoints path will be added to the URL.

userdata and userdata_file:

Azure Resource Manager uses a separate VirtualMachineExtension object to pass userdata scripts to the virtual machine. Arbitrary shell commands can be passed via the userdata parameter, or via a file local to the Salt Cloud system using the userdata_file parameter. Note that the local file is not treated as a script by the extension, so “one-liners” probably work best. If greater functionality is desired, a web-hosted script file can be specified via userdata_file: https://raw.githubusercontent.com/account/repo/master/azure-script.py, which will be executed on the system after VM creation. For Windows systems, script files ending in .ps1 will be executed with powershell.exe. The userdata parameter takes precedence over the userdata_file parameter when creating the custom script extension.

win_installer:

This parameter, which holds the local path to the Salt Minion installer package, is used to determine if the virtual machine type will be “Windows”. Only set this parameter on profiles which install Windows operating systems.

Example /etc/salt/cloud.providers or /etc/salt/cloud.providers.d/azure.conf configuration:

my-azure-config with username and password:
  driver: azurerm
  subscription_id: 3287abc8-f98a-c678-3bde-326766fd3617
  username: larry
  password: 123pass

Or my-azure-config with service principal:
  driver: azurerm
  subscription_id: 3287abc8-f98a-c678-3bde-326766fd3617
  tenant: ABCDEFAB-1234-ABCD-1234-ABCDEFABCDEF
  client_id: ABCDEFAB-1234-ABCD-1234-ABCDEFABCDEF
  secret: XXXXXXXXXXXXXXXXXXXXXXXX
  cloud_environment: AZURE_US_GOV_CLOUD

The Service Principal can be created with the new Azure CLI with:

az ad sp create-for-rbac -n "http://<yourappname>" --role <role> --scopes <scope>

For example, this creates a service principal with ‘owner’ role for the whole subscription:

az ad sp create-for-rbac           -n "http://mysaltapp"           --role owner           --scopes /subscriptions/3287abc8-f98a-c678-3bde-326766fd3617

Note: review the details of Service Principals. Owner role is more than you normally need, and you can restrict scope to a resource group or individual resources.

Functions

avail_images([call])

Return a dict of all available images on the provider

avail_locations([call])

Return a dict of all available regions.

avail_sizes([call])

Return a list of sizes available from the provider

create(vm_)

Create a single VM from a data dict.

create_network_interface([call, kwargs])

Create a network interface.

create_or_update_vmextension([call, kwargs])

New in version 2019.2.0.

delete_blob([call, kwargs])

Delete a blob from a container.

delete_interface([call, kwargs])

Delete a network interface.

delete_managed_disk([call, kwargs])

Delete a managed disk from a resource group.

destroy(name[, call, kwargs])

Destroy a VM.

get_api_versions([call, kwargs])

Get a resource type api versions

get_configured_provider()

Return the first configured provider instance.

get_conn(client_type)

Return a connection object for a client type.

get_conn_dict()

Return a connection auth dictionary.

get_dependencies()

Warn if dependencies aren't met.

get_location([call, kwargs])

Return the location that is configured for this provider

get_resource_by_id(resource_id, api_version)

Get an Azure Resource Manager resource by id

list_blobs([call, kwargs])

List blobs.

list_nodes([call])

List VMs on this Azure account

list_nodes_full([call])

List all VMs on the subscription with full information

list_resource_groups([call])

List resource groups associated with the subscription

list_storage_accounts([call])

List storage accounts within the subscription.

list_subnets([call, kwargs])

List subnets in a virtual network.

list_virtual_networks([call])

List virtual networks.

request_instance(vm_[, kwargs])

Request a VM from Azure.

show_instance(name[, call])

Show the details from Azure Resource Manager concerning an instance

start(name[, call])

New in version 2019.2.0.

stop(name[, call])

New in version 2019.2.0.