@drunk-pulumi/azure 0.0.19

package/VNet/NSGRules/AzADService.js

@@ -0,0 +1,45 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const network = require("@pulumi/azure-native/network");
+exports.default = ({ group, securityGroupName, startPriority = 300, dependsOn, }) => {
+    const rs = new Array();
+    //Allows RD
+    rs.push(new network.SecurityRule('AllowRD', {
+        name: 'AllowRD',
+        networkSecurityGroupName: securityGroupName,
+        ...group,
+        sourceAddressPrefix: 'CorpNetSaw',
+        sourcePortRange: '*',
+        destinationAddressPrefix: '*',
+        destinationPortRange: '3389',
+        protocol: 'Tcp',
+        access: 'Allow',
+        direction: 'Inbound',
+        priority: startPriority++,
+    }, { dependsOn }), new network.SecurityRule('AllowPSRemove', {
+        name: 'AllowPSRemove',
+        networkSecurityGroupName: securityGroupName,
+        ...group,
+        sourceAddressPrefix: 'AzureActiveDirectoryDomainServices',
+        sourcePortRange: '*',
+        destinationAddressPrefix: '*',
+        destinationPortRange: '5986',
+        protocol: 'Tcp',
+        access: 'Allow',
+        direction: 'Inbound',
+        priority: startPriority++,
+    }, { dependsOn }), new network.SecurityRule('AllowPort636', {
+        name: 'AllowPort636',
+        networkSecurityGroupName: securityGroupName,
+        ...group,
+        sourceAddressPrefix: '*',
+        sourcePortRange: '*',
+        destinationAddressPrefix: '*',
+        destinationPortRange: '636',
+        protocol: 'Tcp',
+        access: 'Allow',
+        direction: 'Inbound',
+        priority: startPriority++,
+    }, { dependsOn }));
+};
+//# sourceMappingURL=data:application/json;base64,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

package/VNet/NetworkPeering.d.ts

@@ -0,0 +1,10 @@
+import { Input } from '@pulumi/pulumi';
+export interface VNetPeeringProps {
+    name: string;
+    firstVNetName: Input<string>;
+    firstVNetResourceGroupName: Input<string>;
+    secondVNetName: Input<string>;
+    secondVNetResourceGroupName: Input<string>;
+}
+declare const _default: ({ name, firstVNetName, firstVNetResourceGroupName, secondVNetName, secondVNetResourceGroupName, }: VNetPeeringProps) => void;
+export default _default;

package/VNet/NetworkPeering.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const StackEnv_1 = require("../Common/StackEnv");
+const network = require("@pulumi/azure-native/network");
+const AzureEnv_1 = require("../Common/AzureEnv");
+const pulumi_1 = require("@pulumi/pulumi");
+exports.default = ({ name, firstVNetName, firstVNetResourceGroupName, secondVNetName, secondVNetResourceGroupName, }) => {
+    new network.VirtualNetworkPeering(`${StackEnv_1.stack}-${name}-first-vlk`, {
+        virtualNetworkPeeringName: `${StackEnv_1.stack}-${name}-first-vlk`,
+        virtualNetworkName: firstVNetName,
+        resourceGroupName: firstVNetResourceGroupName,
+        allowForwardedTraffic: true,
+        allowVirtualNetworkAccess: true,
+        remoteVirtualNetwork: {
+            id: (0, pulumi_1.interpolate) `/subscriptions/${AzureEnv_1.subscriptionId}/resourceGroups/${secondVNetResourceGroupName}/providers/Microsoft.Network/virtualNetworks/${secondVNetName}`,
+        },
+    });
+    new network.VirtualNetworkPeering(`${StackEnv_1.stack}-${name}-second-vlk`, {
+        virtualNetworkPeeringName: `${StackEnv_1.stack}-${name}-second-vlk`,
+        virtualNetworkName: secondVNetName,
+        resourceGroupName: secondVNetResourceGroupName,
+        allowForwardedTraffic: true,
+        allowVirtualNetworkAccess: true,
+        remoteVirtualNetwork: {
+            id: (0, pulumi_1.interpolate) `/subscriptions/${AzureEnv_1.subscriptionId}/resourceGroups/${firstVNetResourceGroupName}/providers/Microsoft.Network/virtualNetworks/${firstVNetName}`,
+        },
+    });
+};
+//# sourceMappingURL=data:application/json;base64,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

package/VNet/PrivateDns.d.ts

@@ -0,0 +1,33 @@
+import * as native from '@pulumi/azure-native';
+import { Input, Resource } from '@pulumi/pulumi';
+import { ResourceGroupInfo } from '../types';
+interface RecordProps {
+    zoneName: Input<string>;
+    /**Default is Global Resource Group*/
+    group?: ResourceGroupInfo;
+    recordName: string;
+    ipAddresses: Input<string[]>;
+    dependsOn?: Input<Input<Resource>[]> | Input<Resource>;
+}
+export declare const addARecord: ({ zoneName, group, recordName, ipAddresses, dependsOn, }: RecordProps) => import("@pulumi/azure-native/network/privateRecordSet").PrivateRecordSet;
+interface VnetToPrivateDnsProps {
+    zoneName: string;
+    vnetId: string;
+    registrationEnabled?: boolean;
+    group?: ResourceGroupInfo;
+    dependsOn?: Input<Input<Resource>[]> | Input<Resource>;
+}
+export declare const linkVnetToPrivateDns: ({ zoneName, group, vnetId, registrationEnabled, dependsOn, }: VnetToPrivateDnsProps) => import("@pulumi/azure-native/network/virtualNetworkLink").VirtualNetworkLink;
+interface Props {
+    name: string;
+    vnetIds?: Input<string>[];
+    group?: ResourceGroupInfo;
+    records?: {
+        aRecords: Array<Pick<RecordProps, 'recordName' | 'ipAddresses'>>;
+    };
+    dependsOn?: Input<Input<Resource>[]> | Input<Resource>;
+}
+/** Create Private DNS zone. This should be created in the Global resource group. */
+declare const _default: ({ name, group, vnetIds, records, dependsOn, }: Props) => import("@pulumi/azure-native/network/privateZone").PrivateZone;
+export default _default;
+export declare const getPrivateZone: ({ name, group, }: Omit<Props, 'vnetIds'>) => Promise<native.network.GetPrivateZoneResult>;

package/VNet/PrivateDns.js

@@ -0,0 +1,64 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getPrivateZone = exports.linkVnetToPrivateDns = exports.addARecord = void 0;
+const native = require("@pulumi/azure-native");
+const pulumi_1 = require("@pulumi/pulumi");
+const global = require("../Common/GlobalEnv");
+const AzureEnv_1 = require("../Common/AzureEnv");
+const addARecord = ({ zoneName, group = global.groupInfo, recordName, ipAddresses, dependsOn, }) => {
+    recordName = recordName.replace('https://', '').replace('http://', '');
+    //.replace(`.${zoneName}`, "");
+    return new native.network.PrivateRecordSet(recordName === '*'
+        ? 'All-ARecord'
+        : recordName === '@'
+            ? 'Root-ARecord'
+            : `${recordName}-ARecord`, {
+        privateZoneName: zoneName,
+        ...group,
+        relativeRecordSetName: recordName,
+        recordType: 'A',
+        aRecords: (0, pulumi_1.output)(ipAddresses).apply((ips) => ips.map((i) => ({ ipv4Address: i }))),
+        ttl: 3600,
+    }, { dependsOn });
+};
+exports.addARecord = addARecord;
+const linkVnetToPrivateDns = ({ zoneName, group = global.groupInfo, vnetId, registrationEnabled, dependsOn, }) => {
+    const vnetInfo = (0, AzureEnv_1.getResourceInfoFromId)(vnetId);
+    return new native.network.VirtualNetworkLink(`${zoneName}-link-${vnetInfo.name}`, {
+        ...group,
+        location: global.globalKeyName,
+        privateZoneName: zoneName,
+        registrationEnabled: registrationEnabled || false,
+        virtualNetwork: { id: vnetId },
+    }, { dependsOn });
+};
+exports.linkVnetToPrivateDns = linkVnetToPrivateDns;
+/** Create Private DNS zone. This should be created in the Global resource group. */
+exports.default = ({ name, group = global.groupInfo, vnetIds, records, dependsOn, }) => {
+    const zone = new native.network.PrivateZone(name, {
+        privateZoneName: name,
+        ...group,
+        location: 'global',
+    }, { dependsOn });
+    if (vnetIds) {
+        (0, pulumi_1.all)(vnetIds).apply((vn) => vn.map((id) => (0, exports.linkVnetToPrivateDns)({
+            vnetId: id,
+            zoneName: name,
+            group,
+            registrationEnabled: false,
+            dependsOn: zone,
+        })));
+    }
+    if (records) {
+        if (records.aRecords) {
+            records.aRecords.map((a) => (0, exports.addARecord)({ ...a, group, zoneName: zone.name, dependsOn: zone }));
+        }
+    }
+    return zone;
+};
+const getPrivateZone = ({ name, group = global.groupInfo, }) => native.network.getPrivateZone({
+    privateZoneName: name,
+    resourceGroupName: group.resourceGroupName,
+});
+exports.getPrivateZone = getPrivateZone;
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiUHJpdmF0ZURucy5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uL3NyYy9WTmV0L1ByaXZhdGVEbnMudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7O0FBQUEsK0NBQStDO0FBQy9DLDJDQUE4RDtBQUM5RCw4Q0FBOEM7QUFDOUMsaURBQTJEO0FBV3BELE1BQU0sVUFBVSxHQUFHLENBQUMsRUFDekIsUUFBUSxFQUNSLEtBQUssR0FBRyxNQUFNLENBQUMsU0FBUyxFQUN4QixVQUFVLEVBQ1YsV0FBVyxFQUNYLFNBQVMsR0FDRyxFQUFFLEVBQUU7SUFDaEIsVUFBVSxHQUFHLFVBQVUsQ0FBQyxPQUFPLENBQUMsVUFBVSxFQUFFLEVBQUUsQ0FBQyxDQUFDLE9BQU8sQ0FBQyxTQUFTLEVBQUUsRUFBRSxDQUFDLENBQUM7SUFDdkUsK0JBQStCO0lBRS9CLE9BQU8sSUFBSSxNQUFNLENBQUMsT0FBTyxDQUFDLGdCQUFnQixDQUN4QyxVQUFVLEtBQUssR0FBRztRQUNoQixDQUFDLENBQUMsYUFBYTtRQUNmLENBQUMsQ0FBQyxVQUFVLEtBQUssR0FBRztZQUNwQixDQUFDLENBQUMsY0FBYztZQUNoQixDQUFDLENBQUMsR0FBRyxVQUFVLFVBQVUsRUFDM0I7UUFDRSxlQUFlLEVBQUUsUUFBUTtRQUN6QixHQUFHLEtBQUs7UUFDUixxQkFBcUIsRUFBRSxVQUFVO1FBQ2pDLFVBQVUsRUFBRSxHQUFHO1FBQ2YsUUFBUSxFQUFFLElBQUEsZUFBTSxFQUFDLFdBQVcsQ0FBQyxDQUFDLEtBQUssQ0FBQyxDQUFDLEdBQUcsRUFBRSxFQUFFLENBQzFDLEdBQUcsQ0FBQyxHQUFHLENBQUMsQ0FBQyxDQUFDLEVBQUUsRUFBRSxDQUFDLENBQUMsRUFBRSxXQUFXLEVBQUUsQ0FBQyxFQUFFLENBQUMsQ0FBQyxDQUNyQztRQUNELEdBQUcsRUFBRSxJQUFJO0tBQ1YsRUFDRCxFQUFFLFNBQVMsRUFBRSxDQUNkLENBQUM7QUFDSixDQUFDLENBQUM7QUE1QlcsUUFBQSxVQUFVLGNBNEJyQjtBQVVLLE1BQU0sb0JBQW9CLEdBQUcsQ0FBQyxFQUNuQyxRQUFRLEVBQ1IsS0FBSyxHQUFHLE1BQU0sQ0FBQyxTQUFTLEVBQ3hCLE1BQU0sRUFDTixtQkFBbUIsRUFDbkIsU0FBUyxHQUNhLEVBQUUsRUFBRTtJQUMxQixNQUFNLFFBQVEsR0FBRyxJQUFBLGdDQUFxQixFQUFDLE1BQU0sQ0FBQyxDQUFDO0lBRS9DLE9BQU8sSUFBSSxNQUFNLENBQUMsT0FBTyxDQUFDLGtCQUFrQixDQUMxQyxHQUFHLFFBQVEsU0FBUyxRQUFTLENBQUMsSUFBSSxFQUFFLEVBQ3BDO1FBQ0UsR0FBRyxLQUFLO1FBQ1IsUUFBUSxFQUFFLE1BQU0sQ0FBQyxhQUFhO1FBQzlCLGVBQWUsRUFBRSxRQUFRO1FBQ3pCLG1CQUFtQixFQUFFLG1CQUFtQixJQUFJLEtBQUs7UUFDakQsY0FBYyxFQUFFLEVBQUUsRUFBRSxFQUFFLE1BQU0sRUFBRTtLQUMvQixFQUNELEVBQUUsU0FBUyxFQUFFLENBQ2QsQ0FBQztBQUNKLENBQUMsQ0FBQztBQXBCVyxRQUFBLG9CQUFvQix3QkFvQi9CO0FBWUYsb0ZBQW9GO0FBQ3BGLGtCQUFlLENBQUMsRUFDZCxJQUFJLEVBQ0osS0FBSyxHQUFHLE1BQU0sQ0FBQyxTQUFTLEVBQ3hCLE9BQU8sRUFDUCxPQUFPLEVBQ1AsU0FBUyxHQUNILEVBQUUsRUFBRTtJQUNWLE1BQU0sSUFBSSxHQUFHLElBQUksTUFBTSxDQUFDLE9BQU8sQ0FBQyxXQUFXLENBQ3pDLElBQUksRUFDSjtRQUNFLGVBQWUsRUFBRSxJQUFJO1FBQ3JCLEdBQUcsS0FBSztRQUNSLFFBQVEsRUFBRSxRQUFRO0tBQ25CLEVBQ0QsRUFBRSxTQUFTLEVBQUUsQ0FDZCxDQUFDO0lBRUYsSUFBSSxPQUFPLEVBQUUsQ0FBQztRQUNaLElBQUEsWUFBRyxFQUFDLE9BQU8sQ0FBQyxDQUFDLEtBQUssQ0FBQyxDQUFDLEVBQUUsRUFBRSxFQUFFLENBQ3hCLEVBQUUsQ0FBQyxHQUFHLENBQUMsQ0FBQyxFQUFFLEVBQUUsRUFBRSxDQUNaLElBQUEsNEJBQW9CLEVBQUM7WUFDbkIsTUFBTSxFQUFFLEVBQUU7WUFDVixRQUFRLEVBQUUsSUFBSTtZQUNkLEtBQUs7WUFDTCxtQkFBbUIsRUFBRSxLQUFLO1lBQzFCLFNBQVMsRUFBRSxJQUFJO1NBQ2hCLENBQUMsQ0FDSCxDQUNGLENBQUM7SUFDSixDQUFDO0lBRUQsSUFBSSxPQUFPLEVBQUUsQ0FBQztRQUNaLElBQUksT0FBTyxDQUFDLFFBQVEsRUFBRSxDQUFDO1lBQ3JCLE9BQU8sQ0FBQyxRQUFRLENBQUMsR0FBRyxDQUFDLENBQUMsQ0FBQyxFQUFFLEVBQUUsQ0FDekIsSUFBQSxrQkFBVSxFQUFDLEVBQUUsR0FBRyxDQUFDLEVBQUUsS0FBSyxFQUFFLFFBQVEsRUFBRSxJQUFJLENBQUMsSUFBSSxFQUFFLFNBQVMsRUFBRSxJQUFJLEVBQUUsQ0FBQyxDQUNsRSxDQUFDO1FBQ0osQ0FBQztJQUNILENBQUM7SUFFRCxPQUFPLElBQUksQ0FBQztBQUNkLENBQUMsQ0FBQztBQUVLLE1BQU0sY0FBYyxHQUFHLENBQUMsRUFDN0IsSUFBSSxFQUNKLEtBQUssR0FBRyxNQUFNLENBQUMsU0FBUyxHQUNELEVBQUUsRUFBRSxDQUMzQixNQUFNLENBQUMsT0FBTyxDQUFDLGNBQWMsQ0FBQztJQUM1QixlQUFlLEVBQUUsSUFBSTtJQUNyQixpQkFBaUIsRUFBRSxLQUFLLENBQUMsaUJBQWlCO0NBQzNDLENBQUMsQ0FBQztBQVBRLFFBQUEsY0FBYyxrQkFPdEIifQ==

package/VNet/PrivateEndpoint.d.ts

@@ -0,0 +1,9 @@
+import { Input } from "@pulumi/pulumi";
+import { BasicResourceArgs, PrivateLinkProps } from "../types";
+interface Props extends BasicResourceArgs, PrivateLinkProps {
+    resourceId: Input<string>;
+    privateDnsZoneName: string;
+    linkServiceGroupIds: string[];
+}
+declare const _default: ({ name, group, resourceId, subnetId, privateDnsZoneName, useGlobalDnsZone, linkServiceGroupIds, }: Props) => import("@pulumi/azure-native/network/privateEndpoint").PrivateEndpoint;
+export default _default;

package/VNet/PrivateEndpoint.js

@@ -0,0 +1,71 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const network = require("@pulumi/azure-native/network");
+const pulumi_1 = require("@pulumi/pulumi");
+const AzureEnv_1 = require("../Common/AzureEnv");
+const Helper_1 = require("./Helper");
+const PrivateDns_1 = require("./PrivateDns");
+const AzureEnv_2 = require("../Common/AzureEnv");
+exports.default = ({ name, group, resourceId, subnetId, privateDnsZoneName, useGlobalDnsZone, linkServiceGroupIds, }) => {
+    const endpoint = new network.PrivateEndpoint(name, {
+        privateEndpointName: name,
+        ...group,
+        subnet: { id: subnetId },
+        privateLinkServiceConnections: [
+            {
+                groupIds: linkServiceGroupIds,
+                name: `${name}-conn`,
+                privateLinkServiceId: resourceId,
+            },
+        ],
+        tags: AzureEnv_1.defaultTags,
+    });
+    //Get IpAddress in
+    const ipAddresses = endpoint.customDnsConfigs.apply((c) => c.flatMap((i) => i.ipAddresses));
+    (0, pulumi_1.output)(resourceId).apply((id) => {
+        const resourceInfo = (0, AzureEnv_2.getResourceInfoFromId)(id);
+        if (useGlobalDnsZone) {
+            //Add A Record
+            (0, PrivateDns_1.addARecord)({
+                ipAddresses,
+                recordName: resourceInfo?.name || "",
+                zoneName: privateDnsZoneName,
+            });
+            //Link to Vnet
+            (0, pulumi_1.output)(subnetId).apply((sId) => {
+                const vnetId = (0, Helper_1.getVnetIdFromSubnetId)(sId);
+                (0, PrivateDns_1.linkVnetToPrivateDns)({
+                    zoneName: privateDnsZoneName,
+                    vnetId,
+                });
+            });
+        }
+        else {
+            //Create Zone
+            const zone = (0, PrivateDns_1.default)({
+                name: `${resourceInfo?.name}.${privateDnsZoneName}`,
+                group,
+            });
+            //Add Root Record
+            (0, PrivateDns_1.addARecord)({
+                ipAddresses,
+                recordName: "@",
+                zoneName: privateDnsZoneName,
+                dependsOn: zone,
+            });
+            //Link to Vnet
+            (0, pulumi_1.output)(subnetId).apply((sId) => {
+                const vnetId = (0, Helper_1.getVnetIdFromSubnetId)(sId);
+                (0, PrivateDns_1.linkVnetToPrivateDns)({
+                    zoneName: privateDnsZoneName,
+                    vnetId,
+                    group,
+                    dependsOn: zone,
+                });
+            });
+        }
+    });
+    //TODO: Create private DNS Zone in the same resource group and link to VNet
+    return endpoint;
+};
+//# sourceMappingURL=data:application/json;base64,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

package/VNet/PublicDns.d.ts

@@ -0,0 +1,21 @@
+import { Input } from "@pulumi/pulumi";
+interface RecordProps {
+    zoneName: Input<string>;
+    recordName: string;
+    ipAddresses: string[];
+}
+export declare const addARecord: ({ zoneName, recordName, ipAddresses, }: RecordProps) => import("@pulumi/azure-native/network/recordSet").RecordSet;
+interface ZoneProps {
+    name: string;
+    defaultIpAddress?: string;
+}
+interface Props extends ZoneProps {
+    name: string;
+    childZones?: Array<ZoneProps>;
+}
+/** Create Private DNS zone. */
+declare const _default: ({ name, defaultIpAddress, childZones }: Props) => {
+    zone: import("@pulumi/azure-native/network/zone").Zone;
+    child: import("@pulumi/azure-native/network/zone").Zone[] | undefined;
+};
+export default _default;

package/VNet/PublicDns.js

@@ -0,0 +1,59 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.addARecord = void 0;
+const network = require("@pulumi/azure-native/network");
+const Common_1 = require("../Common");
+const addARecord = ({ zoneName, recordName, ipAddresses, }) => new network.RecordSet(recordName === "*"
+    ? "All-ARecord"
+    : recordName === "@"
+        ? "Root-ARecord"
+        : `${recordName}-ARecord`, {
+    zoneName,
+    ...Common_1.global.groupInfo,
+    relativeRecordSetName: recordName,
+    recordType: "A",
+    aRecords: ipAddresses.map((i) => ({ ipv4Address: i })),
+    ttl: 3600,
+});
+exports.addARecord = addARecord;
+/** Create Private DNS zone. This should be created in the GLobal resource group. */
+const zoneCreator = ({ name, defaultIpAddress }) => {
+    const zone = new network.Zone(name, {
+        zoneName: name,
+        zoneType: network.ZoneType.Public,
+        location: Common_1.global.globalKeyName,
+        ...Common_1.global.groupInfo,
+    });
+    if (defaultIpAddress) {
+        (0, exports.addARecord)({
+            ipAddresses: [defaultIpAddress],
+            zoneName: name,
+            recordName: "@",
+        });
+    }
+    return zone;
+};
+/** Create Private DNS zone. */
+exports.default = ({ name, defaultIpAddress, childZones }) => {
+    const zone = zoneCreator({ name, defaultIpAddress });
+    let child = undefined;
+    if (childZones) {
+        child = childZones.map((z) => {
+            const c = zoneCreator({ ...z, name: `${z.name}.${name}` });
+            c.nameServers.apply((ns) => {
+                //Add NS and Other Record to the Parent Zone
+                new network.RecordSet(`${z.name}.${name}-NS`, {
+                    zoneName: zone.name,
+                    ...Common_1.global.groupInfo,
+                    relativeRecordSetName: z.name,
+                    recordType: "NS",
+                    nsRecords: ns.map((s) => ({ nsdname: s })),
+                    ttl: 3600,
+                }, { dependsOn: c });
+            });
+            return c;
+        });
+    }
+    return { zone, child };
+};
+//# sourceMappingURL=data:application/json;base64,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

package/VNet/RouteTable.d.ts

@@ -0,0 +1,13 @@
+import * as pulumi from '@pulumi/pulumi';
+import { BasicResourceArgs } from '../types';
+import * as network from '@pulumi/azure-native/network';
+import { Input } from '@pulumi/pulumi';
+interface Props extends BasicResourceArgs {
+    routes?: pulumi.Input<pulumi.Input<network.RouteArgs>[]>;
+}
+declare const _default: ({ name, group, routes }: Props) => import("@pulumi/azure-native/network/routeTable").RouteTable;
+export default _default;
+interface RouteProps extends BasicResourceArgs, Omit<network.RouteArgs, 'name' | 'id' | 'resourceGroupName' | 'type'> {
+    routes?: Input<Input<network.RouteArgs>[]>;
+}
+export declare const updateRuoteItem: ({ name, group, ...others }: RouteProps) => import("@pulumi/azure-native/network/route").Route;

package/VNet/RouteTable.js

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.updateRuoteItem = void 0;
+const Naming_1 = require("../Common/Naming");
+const network = require("@pulumi/azure-native/network");
+exports.default = ({ name, group, routes }) => {
+    const routeName = (0, Naming_1.getRouteName)(name);
+    return new network.RouteTable(routeName, {
+        ...group,
+        routeTableName: routeName,
+        routes,
+    });
+};
+const updateRuoteItem = ({ name, group, ...others }) => {
+    const routeName = (0, Naming_1.getRouteItemName)(name);
+    return new network.Route(routeName, {
+        routeName,
+        ...group,
+        ...others,
+    });
+};
+exports.updateRuoteItem = updateRuoteItem;
+//# sourceMappingURL=data:application/json;base64,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

package/VNet/SecurityGroup.d.ts

@@ -0,0 +1,8 @@
+import * as pulumi from '@pulumi/pulumi';
+import { BasicResourceArgs } from '../types';
+import * as network from '@pulumi/azure-native/network';
+interface Props extends BasicResourceArgs {
+    securityRules?: pulumi.Input<pulumi.Input<network.SecurityRuleArgs>[]>;
+}
+declare const _default: ({ name, group, securityRules }: Props) => import("@pulumi/azure-native/network/networkSecurityGroup").NetworkSecurityGroup;
+export default _default;

package/VNet/SecurityGroup.js

@@ -0,0 +1,13 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const Naming_1 = require("../Common/Naming");
+const network = require("@pulumi/azure-native/network");
+exports.default = ({ name, group, securityRules }) => {
+    const sName = (0, Naming_1.getNetworkSecurityGroupName)(name);
+    return new network.NetworkSecurityGroup(sName, {
+        networkSecurityGroupName: sName,
+        ...group,
+        securityRules,
+    });
+};
+//# sourceMappingURL=data:application/json;base64,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

package/VNet/Subnet.d.ts

@@ -0,0 +1,26 @@
+import * as pulumi from "@pulumi/pulumi";
+import { ResourceGroupInfo } from "../types";
+import * as network from "@pulumi/azure-native/network";
+import { DelegateServices } from "./Vnet";
+export interface SubnetProps {
+    name: string;
+    /** The index of prefixSpaces*/
+    addressPrefix: string;
+    /** Enable this to allow to link private endpoint network policies */
+    enablePrivateEndpoint?: boolean;
+    /** Enable this to allow to link private link service network policies*/
+    enablePrivateLinkService?: boolean;
+    enableSecurityGroup?: boolean;
+    enableRouteTable?: boolean;
+    allowedServiceEndpoints?: boolean | string[];
+    delegateServices?: DelegateServices[];
+}
+interface Props {
+    subnet: SubnetProps;
+    vnetName: pulumi.Input<string>;
+    group: ResourceGroupInfo;
+    securityGroup?: network.NetworkSecurityGroup;
+    routeTable?: network.RouteTable;
+}
+declare const _default: ({ group, subnet, vnetName, routeTable, securityGroup, }: Props) => network.SubnetArgs;
+export default _default;

package/VNet/Subnet.js

@@ -0,0 +1,48 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const network = require("@pulumi/azure-native/network");
+const defaultServicesEndpoints = [
+    "Microsoft.AzureActiveDirectory",
+    "Microsoft.AzureCosmosDB",
+    "Microsoft.ContainerRegistry",
+    "Microsoft.EventHub",
+    "Microsoft.KeyVault",
+    "Microsoft.ServiceBus",
+    "Microsoft.Sql",
+    "Microsoft.Storage",
+    "Microsoft.Web",
+];
+exports.default = ({ group, subnet, vnetName, routeTable, securityGroup, }) => {
+    const serviceEndpoints = Array.isArray(subnet.allowedServiceEndpoints)
+        ? subnet.allowedServiceEndpoints
+        : subnet.allowedServiceEndpoints === true
+            ? defaultServicesEndpoints
+            : undefined;
+    return {
+        name: subnet.name,
+        subnetName: subnet.name,
+        ...group,
+        addressPrefix: subnet.addressPrefix,
+        virtualNetworkName: vnetName,
+        routeTable: subnet.enableRouteTable !== false && routeTable
+            ? { id: routeTable.id }
+            : undefined,
+        networkSecurityGroup: securityGroup ? { id: securityGroup.id } : undefined,
+        privateLinkServiceNetworkPolicies: subnet.enablePrivateLinkService
+            ? network.VirtualNetworkPrivateLinkServiceNetworkPolicies.Enabled
+            : network.VirtualNetworkPrivateLinkServiceNetworkPolicies.Disabled,
+        privateEndpointNetworkPolicies: subnet.enablePrivateEndpoint
+            ? network.VirtualNetworkPrivateEndpointNetworkPolicies.Enabled
+            : network.VirtualNetworkPrivateEndpointNetworkPolicies.Disabled,
+        serviceEndpoints: serviceEndpoints
+            ? serviceEndpoints.map((service) => ({ service }))
+            : undefined,
+        delegations: subnet.delegateServices
+            ? subnet.delegateServices.map((d) => ({
+                name: `${subnet.name}-${d.split("/").pop()}-delegate`,
+                serviceName: d,
+            }))
+            : undefined,
+    };
+};
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiU3VibmV0LmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vc3JjL1ZOZXQvU3VibmV0LnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7O0FBRUEsd0RBQXdEO0FBR3hELE1BQU0sd0JBQXdCLEdBQUc7SUFDL0IsZ0NBQWdDO0lBQ2hDLHlCQUF5QjtJQUN6Qiw2QkFBNkI7SUFDN0Isb0JBQW9CO0lBQ3BCLG9CQUFvQjtJQUNwQixzQkFBc0I7SUFDdEIsZUFBZTtJQUNmLG1CQUFtQjtJQUNuQixlQUFlO0NBQ2hCLENBQUM7QUF3QkYsa0JBQWUsQ0FBQyxFQUNkLEtBQUssRUFDTCxNQUFNLEVBQ04sUUFBUSxFQUNSLFVBQVUsRUFDVixhQUFhLEdBQ1AsRUFBc0IsRUFBRTtJQUM5QixNQUFNLGdCQUFnQixHQUFHLEtBQUssQ0FBQyxPQUFPLENBQUMsTUFBTSxDQUFDLHVCQUF1QixDQUFDO1FBQ3BFLENBQUMsQ0FBQyxNQUFNLENBQUMsdUJBQXVCO1FBQ2hDLENBQUMsQ0FBQyxNQUFNLENBQUMsdUJBQXVCLEtBQUssSUFBSTtZQUN6QyxDQUFDLENBQUMsd0JBQXdCO1lBQzFCLENBQUMsQ0FBQyxTQUFTLENBQUM7SUFFZCxPQUFPO1FBQ0wsSUFBSSxFQUFFLE1BQU0sQ0FBQyxJQUFJO1FBQ2pCLFVBQVUsRUFBRSxNQUFNLENBQUMsSUFBSTtRQUN2QixHQUFHLEtBQUs7UUFDUixhQUFhLEVBQUUsTUFBTSxDQUFDLGFBQWE7UUFDbkMsa0JBQWtCLEVBQUUsUUFBUTtRQUU1QixVQUFVLEVBQ1IsTUFBTSxDQUFDLGdCQUFnQixLQUFLLEtBQUssSUFBSSxVQUFVO1lBQzdDLENBQUMsQ0FBQyxFQUFFLEVBQUUsRUFBRSxVQUFVLENBQUMsRUFBRSxFQUFFO1lBQ3ZCLENBQUMsQ0FBQyxTQUFTO1FBQ2Ysb0JBQW9CLEVBQUUsYUFBYSxDQUFDLENBQUMsQ0FBQyxFQUFFLEVBQUUsRUFBRSxhQUFhLENBQUMsRUFBRSxFQUFFLENBQUMsQ0FBQyxDQUFDLFNBQVM7UUFFMUUsaUNBQWlDLEVBQUUsTUFBTSxDQUFDLHdCQUF3QjtZQUNoRSxDQUFDLENBQUMsT0FBTyxDQUFDLCtDQUErQyxDQUFDLE9BQU87WUFDakUsQ0FBQyxDQUFDLE9BQU8sQ0FBQywrQ0FBK0MsQ0FBQyxRQUFRO1FBRXBFLDhCQUE4QixFQUFFLE1BQU0sQ0FBQyxxQkFBcUI7WUFDMUQsQ0FBQyxDQUFDLE9BQU8sQ0FBQyw0Q0FBNEMsQ0FBQyxPQUFPO1lBQzlELENBQUMsQ0FBQyxPQUFPLENBQUMsNENBQTRDLENBQUMsUUFBUTtRQUVqRSxnQkFBZ0IsRUFBRSxnQkFBZ0I7WUFDaEMsQ0FBQyxDQUFDLGdCQUFnQixDQUFDLEdBQUcsQ0FBQyxDQUFDLE9BQU8sRUFBRSxFQUFFLENBQUMsQ0FBQyxFQUFFLE9BQU8sRUFBRSxDQUFDLENBQUM7WUFDbEQsQ0FBQyxDQUFDLFNBQVM7UUFFYixXQUFXLEVBQUUsTUFBTSxDQUFDLGdCQUFnQjtZQUNsQyxDQUFDLENBQUMsTUFBTSxDQUFDLGdCQUFnQixDQUFDLEdBQUcsQ0FBQyxDQUFDLENBQUMsRUFBRSxFQUFFLENBQUMsQ0FBQztnQkFDbEMsSUFBSSxFQUFFLEdBQUcsTUFBTSxDQUFDLElBQUksSUFBSSxDQUFDLENBQUMsS0FBSyxDQUFDLEdBQUcsQ0FBQyxDQUFDLEdBQUcsRUFBRSxXQUFXO2dCQUNyRCxXQUFXLEVBQUUsQ0FBQzthQUNmLENBQUMsQ0FBQztZQUNMLENBQUMsQ0FBQyxTQUFTO0tBQ2QsQ0FBQztBQUNKLENBQUMsQ0FBQyJ9

package/VNet/VirtualWAN.d.ts

@@ -0,0 +1,25 @@
+import { BasicResourceArgs, DefaultResourceArgs } from '../types';
+import * as network from '@pulumi/azure-native/network';
+import { Input } from '@pulumi/pulumi';
+import { input as inputs } from '@pulumi/azure-native/types';
+import { FirewallPolicyProps } from './FirewallRules/types';
+interface Props extends BasicResourceArgs, Omit<DefaultResourceArgs, 'monitoring'> {
+    /** The hub Address space */
+    hubAddressPrefix: Input<string>;
+    hubRoutes?: Input<Input<inputs.network.VirtualHubRouteTableV2Args>[]>;
+    firewall?: {
+        create: boolean;
+        subnetId: Input<string>;
+        publicIpAddress: network.PublicIPAddress;
+        policy: FirewallPolicyProps;
+    };
+}
+declare const _default: ({ name, group, hubAddressPrefix, hubRoutes, firewall, }: Props) => {
+    wan: import("@pulumi/azure-native/network/virtualWan").VirtualWan;
+    hub: import("@pulumi/azure-native/network/virtualHub").VirtualHub;
+    firewall: {
+        firewall: import("@pulumi/azure-native/network/azureFirewall").AzureFirewall;
+        policy: import("@pulumi/azure-native/network/firewallPolicy").FirewallPolicy | undefined;
+    } | undefined;
+};
+export default _default;

package/VNet/VirtualWAN.js

@@ -0,0 +1,40 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const network = require("@pulumi/azure-native/network");
+const Naming_1 = require("../Common/Naming");
+const Firewall_1 = require("./Firewall");
+exports.default = ({ name, group, hubAddressPrefix, hubRoutes, firewall, }) => {
+    const wanName = (0, Naming_1.getWanName)(name);
+    const hubName = (0, Naming_1.getHubName)(name);
+    const wan = new network.VirtualWan(wanName, {
+        ...group,
+        virtualWANName: wanName,
+        allowVnetToVnetTraffic: true,
+        allowBranchToBranchTraffic: false,
+        type: 'Standard',
+    });
+    const azFirewall = firewall?.create
+        ? (0, Firewall_1.default)({
+            name,
+            group,
+            policy: firewall.policy,
+            outbound: [
+                {
+                    subnetId: firewall.subnetId,
+                    publicIpAddress: firewall.publicIpAddress,
+                },
+            ],
+        })
+        : undefined;
+    const hub = new network.VirtualHub(hubName, {
+        ...group,
+        virtualHubName: hubName,
+        allowBranchToBranchTraffic: false,
+        virtualWan: { id: wan.id },
+        addressPrefix: hubAddressPrefix,
+        virtualHubRouteTableV2s: hubRoutes,
+        azureFirewall: azFirewall && { id: azFirewall.firewall.id },
+    }, { dependsOn: azFirewall ? [azFirewall.firewall, wan] : wan });
+    return { wan, hub, firewall: azFirewall };
+};
+//# sourceMappingURL=data:application/json;base64,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

package/VNet/Vnet.d.ts

@@ -0,0 +1,51 @@
+import * as pulumi from '@pulumi/pulumi';
+import { input as inputs } from '@pulumi/azure-native/types';
+import { output as outputs } from '@pulumi/azure-native/types';
+import { BasicResourceArgs } from '../types';
+import { SubnetProps } from './Subnet';
+export type DelegateServices = 'Microsoft.ContainerInstance/containerGroups' | 'Microsoft.Web/serverFarms';
+interface VnetProps extends BasicResourceArgs {
+    ddosId?: pulumi.Input<string>;
+    /** the prefix space of vnet: ex [192.168.0.0/16]. If not provided it will collect from subnet */
+    addressSpaces?: Array<pulumi.Input<string>>;
+    subnets?: SubnetProps[];
+    dnsServers?: pulumi.Input<pulumi.Input<string>[]>;
+    /** The list of IP address that will allow public internet to go in*/
+    features?: {
+        securityGroup?: {
+            /**Add Security rule to block/allow inbound internet if it is TRUE*/
+            /**Add Security rule to block/allow internet if it is TRUE*/
+            allowOutboundInternetAccess?: boolean;
+            rules?: pulumi.Input<inputs.network.SecurityRuleArgs>[];
+        };
+        routeTable?: {
+            rules?: pulumi.Input<inputs.network.RouteArgs>[];
+        };
+        appGatewaySubnet?: {
+            addressPrefix: string;
+            version: 'v1' | 'v2';
+        };
+        firewall?: {
+            /** Subnet address Prefix */
+            addressPrefix: string;
+            managementAddressPrefix?: string;
+        };
+        bastion?: {
+            /** Subnet address Prefix */
+            addressPrefix: string;
+            /** In case just want to create subnet only without bastion host */
+            disableBastionHostCreation?: boolean;
+        };
+    };
+}
+declare const _default: ({ name, group, ddosId, addressSpaces, subnets, dnsServers, features, }: VnetProps) => {
+    vnet: import("@pulumi/azure-native/network/virtualNetwork").VirtualNetwork;
+    firewallSubnet: pulumi.OutputInstance<outputs.network.SubnetResponse> & pulumi.LiftedObject<outputs.network.SubnetResponse, "type" | "id" | "name" | "etag" | "provisioningState" | "addressPrefix" | "ipConfigurations" | "addressPrefixes" | "purpose" | "serviceEndpoints" | "networkSecurityGroup" | "natGateway" | "applicationGatewayIPConfigurations" | "delegations" | "ipAllocations" | "ipConfigurationProfiles" | "privateEndpointNetworkPolicies" | "privateEndpoints" | "privateLinkServiceNetworkPolicies" | "resourceNavigationLinks" | "routeTable" | "serviceAssociationLinks" | "serviceEndpointPolicies" | "interfaceEndpoints" | undefined>;
+    firewallManageSubnet: pulumi.OutputInstance<outputs.network.SubnetResponse> & pulumi.LiftedObject<outputs.network.SubnetResponse, "type" | "id" | "name" | "etag" | "provisioningState" | "addressPrefix" | "ipConfigurations" | "addressPrefixes" | "purpose" | "serviceEndpoints" | "networkSecurityGroup" | "natGateway" | "applicationGatewayIPConfigurations" | "delegations" | "ipAllocations" | "ipConfigurationProfiles" | "privateEndpointNetworkPolicies" | "privateEndpoints" | "privateLinkServiceNetworkPolicies" | "resourceNavigationLinks" | "routeTable" | "serviceAssociationLinks" | "serviceEndpointPolicies" | "interfaceEndpoints" | undefined>;
+    appGatewaySubnet: pulumi.OutputInstance<outputs.network.SubnetResponse> & pulumi.LiftedObject<outputs.network.SubnetResponse, "type" | "id" | "name" | "etag" | "provisioningState" | "addressPrefix" | "ipConfigurations" | "addressPrefixes" | "purpose" | "serviceEndpoints" | "networkSecurityGroup" | "natGateway" | "applicationGatewayIPConfigurations" | "delegations" | "ipAllocations" | "ipConfigurationProfiles" | "privateEndpointNetworkPolicies" | "privateEndpoints" | "privateLinkServiceNetworkPolicies" | "resourceNavigationLinks" | "routeTable" | "serviceAssociationLinks" | "serviceEndpointPolicies" | "interfaceEndpoints" | undefined>;
+    bastionSubnet: pulumi.OutputInstance<outputs.network.SubnetResponse> & pulumi.LiftedObject<outputs.network.SubnetResponse, "type" | "id" | "name" | "etag" | "provisioningState" | "addressPrefix" | "ipConfigurations" | "addressPrefixes" | "purpose" | "serviceEndpoints" | "networkSecurityGroup" | "natGateway" | "applicationGatewayIPConfigurations" | "delegations" | "ipAllocations" | "ipConfigurationProfiles" | "privateEndpointNetworkPolicies" | "privateEndpoints" | "privateLinkServiceNetworkPolicies" | "resourceNavigationLinks" | "routeTable" | "serviceAssociationLinks" | "serviceEndpointPolicies" | "interfaceEndpoints" | undefined>;
+    subnets: Record<string, pulumi.OutputInstance<outputs.network.SubnetResponse> & pulumi.LiftedObject<outputs.network.SubnetResponse, "type" | "id" | "name" | "etag" | "provisioningState" | "addressPrefix" | "ipConfigurations" | "addressPrefixes" | "purpose" | "serviceEndpoints" | "networkSecurityGroup" | "natGateway" | "applicationGatewayIPConfigurations" | "delegations" | "ipAllocations" | "ipConfigurationProfiles" | "privateEndpointNetworkPolicies" | "privateEndpoints" | "privateLinkServiceNetworkPolicies" | "resourceNavigationLinks" | "routeTable" | "serviceAssociationLinks" | "serviceEndpointPolicies" | "interfaceEndpoints" | undefined>>;
+    securityGroup: import("@pulumi/azure-native/network/networkSecurityGroup").NetworkSecurityGroup | undefined;
+    routeTable: import("@pulumi/azure-native/network/routeTable").RouteTable;
+};
+export default _default;