kitchen-azurerm 0.14.7 → 0.14.8

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c0c33abd1f9345b395675761fef0e3ae2aea83fd2719a6c9cb7b7edd44b31ff9
-  data.tar.gz: 9f9e8b53d62ec61336bc41849622f1c0f06d92eb6a15bc3c573a00e103aed1d6
+  metadata.gz: 97bbd49be5ec263bf62071763c58b4c5e1fcf9fd43032182e4129ab648d480eb
+  data.tar.gz: 61b500b1cea1e867b23380aa4768aa1a48d301dd5ecd299b80508d54af5ce214
 SHA512:
-  metadata.gz: 8cef50b5ed30cc5698b44c91a09e757ff7d56256f3e0b1f7dc05ad6e3125fc4dd33f66b03eb60217bf96d67fbd69e644708ca626c47ad6eb42edcfd49dd85d48
-  data.tar.gz: 277944a2564f3fcaf6adb7cadddd950c5166b50a271d00cab8affd46f90eb0f827e66b73eaa571b9f46e2b0614687b624302c658ca36be23b9bd3cf714c048bc
+  metadata.gz: 0f99b8ab2793552a5bf34d4264250d313284463ca409c26fd7fc899c8c9c44519a8dd1d102b3027fbe463b16ab1a4a7ed2a702005f45595ca045e45ec8dddb34
+  data.tar.gz: 824de194c5bc3ca87388acbf861d3aceef3db00adc9e66c5b1eedf7faa79836f7e113e722a838c36cef54ec2a7d213e825ddc2cf34ac77665a3ef4cca2e09281

data/README.md

@@ -479,6 +479,42 @@ Example postdeploy.json to enable MSI extention on VM:
 }
 ```
 
+### .kitchen.yml example 10 - Enabling Managed Service Identities
+
+This example demonstrates how to enable a System Assigned Identity and User Assigned Identities on a Kitchen VM.
+Any combination of System and User assigned identities may be enabled, and multiple User Assigned Identities can be supplied.
+
+See the [Managed identities for Azure resources](https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overview) documentation for more information on using Managed Service Identities.
+
+```yaml
+---
+driver:
+  name: azurerm
+  subscription_id: '4801fa9d-YOUR-GUID-HERE-b265ff49ce21'
+  location: 'West Europe'
+  machine_size: 'Standard_D1'
+
+transport:
+  ssh_key: ~/.ssh/id_kitchen-azurerm
+
+provisioner:
+  name: chef_zero
+
+platforms:
+  - name: ubuntu-1404
+    driver:
+      image_urn: Canonical:UbuntuServer:14.04.4-LTS:latest
+      system_assigned_identity: true
+      user_assigned_identities:
+        - /subscriptions/4801fa9d-YOUR-GUID-HERE-b265ff49ce21/resourcegroups/test-kitchen-user/providers/Microsoft.ManagedIdentity/userAssignedIdentities/test-kitchen-user
+
+suites:
+  - name: default
+    run_list:
+      - recipe[kitchentesting::default]
+    attributes:
+```
+
 
 ## Support for Government and Sovereign Clouds (China and Germany)
 

data/lib/kitchen/driver/azurerm.rb

@@ -146,6 +146,14 @@ module Kitchen
         false
       end
 
+      default_config(:system_assigned_identity) do |_config|
+        false
+      end
+
+      default_config(:user_assigned_identities) do |_config|
+        []
+      end
+
       default_config(:destroy_explicit_resource_group) do |_config|
         true
       end
@@ -166,6 +174,8 @@ module Kitchen
           adminPassword: state[:password] || "P2ssw0rd",
           dnsNameForPublicIP: "kitchen-#{state[:uuid]}",
           vmName: state[:vm_name],
+          systemAssignedIdentity: config[:system_assigned_identity],
+          userAssignedIdentities: config[:user_assigned_identities],
         }
 
         if config[:subscription_id].to_s == ""

data/templates/internal.erb

@@ -143,6 +143,20 @@
                 "description": "The type of storage to use (e.g. Standard_LRS or Premium_LRS)."
             }
         },
+        "systemAssignedIdentity": {
+            "type": "bool",
+            "defaultValue": false,
+            "metadata": {
+                "description": "Whether to enable system assigned identity for the vm."
+            }
+        },
+        "userAssignedIdentities": {
+            "type": "array",
+            "defaultValue": [],
+            "metadata": {
+                "description": "A list of resource IDs for user identities to associate with the Virtual Machine, or empty to disable user assigned identities."
+            }
+        },
         "bootDiagnosticsEnabled": {
             "type": "string",
             "defaultValue": "true",
@@ -164,6 +178,7 @@
         "vmStorageAccountContainerName": "vhds",
         "vmName": "[parameters('vmName')]",
         "vmSize": "[parameters('vmSize')]",
+        "vmIdentityType": "[if(parameters('systemAssignedIdentity'), if(empty(parameters('userAssignedIdentities')), 'SystemAssigned', 'SystemAssigned, UserAssigned'), if(empty(parameters('userAssignedIdentities')), 'None', 'UserAssigned'))]",
         "virtualNetworkName": "vnet",
         "vnetID": "<%= vnet_id %>",
         "subnetRef": "[concat(variables('vnetID'),'/subnets/',variables('subnetName'))]"     
@@ -193,6 +208,7 @@
                 "accountType": "[variables('storageAccountType')]"
             },
             "tags": {
+                <%= vm_tags unless vm_tags.empty? %>
             }
         },
         <%- end -%>
@@ -210,6 +226,7 @@
                 }
             },
             "tags": {
+                <%= vm_tags unless vm_tags.empty? %>
             }
         },
         <%- end -%>
@@ -242,6 +259,7 @@
                 ]
             },
             "tags": {
+                <%= vm_tags unless vm_tags.empty? %>
             }
         },
         {
@@ -342,6 +360,10 @@
                     <%- end -%>
                 }
             },
+            "identity": {
+                "type": "[variables('vmIdentityType')]",
+                "identityIds": "[if(empty(parameters('userAssignedIdentities')), json('null'), parameters('userAssignedIdentities'))]"
+            },
             "tags": {
                 <%= vm_tags unless vm_tags.empty? %>
             }

data/templates/public.erb

@@ -143,6 +143,20 @@
                 "description": "The type of storage to use (e.g. Standard_LRS or Premium_LRS)."
             }
         },
+        "systemAssignedIdentity": {
+            "type": "bool",
+            "defaultValue": false,
+            "metadata": {
+                "description": "Whether to enable system assigned identity for the vm."
+            }
+        },
+        "userAssignedIdentities": {
+            "type": "array",
+            "defaultValue": [],
+            "metadata": {
+                "description": "A list of resource IDs for user identities to associate with the Virtual Machine, or empty to disable user assigned identities."
+            }
+        },
         "bootDiagnosticsEnabled": {
             "type": "string",
             "defaultValue": "true",
@@ -164,6 +178,7 @@
         "vmStorageAccountContainerName": "vhds",
         "vmName": "[parameters('vmName')]",
         "vmSize": "[parameters('vmSize')]",
+        "vmIdentityType": "[if(parameters('systemAssignedIdentity'), if(empty(parameters('userAssignedIdentities')), 'SystemAssigned', 'SystemAssigned, UserAssigned'), if(empty(parameters('userAssignedIdentities')), 'None', 'UserAssigned'))]",
         "virtualNetworkName": "vnet",
         "vnetID": "[resourceId('Microsoft.Network/virtualNetworks',variables('virtualNetworkName'))]",
         "subnetRef": "[concat(variables('vnetID'),'/subnets/',variables('subnetName'))]"
@@ -193,6 +208,7 @@
                 "accountType": "[variables('storageAccountType')]"
             },
             "tags": {
+                <%= vm_tags unless vm_tags.empty? %>
             }
         },
         <%- end -%>
@@ -209,6 +225,7 @@
                 }
             },
             "tags": {
+                <%= vm_tags unless vm_tags.empty? %>
             }
         },
         {
@@ -232,6 +249,7 @@
                 ]
             },
             "tags": {
+                <%= vm_tags unless vm_tags.empty? %>
             }
         },
         {
@@ -260,6 +278,7 @@
                 ]
             },
             "tags": {
+                <%= vm_tags unless vm_tags.empty? %>
             }
         },
         {
@@ -360,6 +379,10 @@
                     <%- end -%>
                 }
             },
+            "identity": {
+                "type": "[variables('vmIdentityType')]",
+                "identityIds": "[if(empty(parameters('userAssignedIdentities')), json('null'), parameters('userAssignedIdentities'))]"
+            },
             "tags": {
                 <%= vm_tags unless vm_tags.empty? %>
             }

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: kitchen-azurerm
 version: !ruby/object:Gem::Version
-  version: 0.14.7
+  version: 0.14.8
 platform: ruby
 authors:
 - Stuart Preston
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2018-12-18 00:00:00.000000000 Z
+date: 2018-12-30 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: azure_mgmt_network
@@ -54,42 +54,42 @@ dependencies:
   name: inifile
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '3.0'
     - - ">="
       - !ruby/object:Gem::Version
         version: 3.0.0
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.0'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '3.0'
     - - ">="
       - !ruby/object:Gem::Version
         version: 3.0.0
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.0'
 - !ruby/object:Gem::Dependency
   name: sshkey
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '1'
     - - ">="
       - !ruby/object:Gem::Version
         version: 1.0.0
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '1'
     - - ">="
       - !ruby/object:Gem::Version
         version: 1.0.0
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1'
 - !ruby/object:Gem::Dependency
   name: bundler
   requirement: !ruby/object:Gem::Requirement
@@ -165,8 +165,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubyforge_project: 
-rubygems_version: 2.7.6
+rubygems_version: 3.0.1
 signing_key: 
 specification_version: 4
 summary: Test Kitchen driver for Azure Resource Manager.