|
|
|
|
@ -21,10 +21,17 @@ func (p *Provider) Help() string {
|
|
|
|
|
client_id: The id of the client
|
|
|
|
|
subscription_id: The id of the subscription
|
|
|
|
|
secret_access_key: The authentication credential
|
|
|
|
|
|
|
|
|
|
Use these configuration parameters when using network interfaces:
|
|
|
|
|
tag_name: The name of the tag to filter on
|
|
|
|
|
tag_value: The value of the tag to filter on
|
|
|
|
|
|
|
|
|
|
The only permission needed is the 'ListAll' method for 'NetworkInterfaces'.
|
|
|
|
|
Use these configuration parameters when using vm scale sets:
|
|
|
|
|
resource_group: The name of the resource group to filter on
|
|
|
|
|
vm_scale_set: The name of the virtual machine scale set to filter on
|
|
|
|
|
|
|
|
|
|
When using tags the only permission needed is the 'ListAll' method for 'NetworkInterfaces'.
|
|
|
|
|
When using vm scale sets the only Role Action needed is "Microsoft.Compute/virtualMachineScaleSets/*/read".
|
|
|
|
|
It is recommended you make a dedicated key used only for auto-joining.
|
|
|
|
|
`
|
|
|
|
|
}
|
|
|
|
|
@ -42,9 +49,15 @@ func (p *Provider) Addrs(args map[string]string, l *log.Logger) ([]string, error
|
|
|
|
|
clientID := args["client_id"]
|
|
|
|
|
subscriptionID := args["subscription_id"]
|
|
|
|
|
secretKey := args["secret_access_key"]
|
|
|
|
|
|
|
|
|
|
// Use tags if using network interfaces
|
|
|
|
|
tagName := args["tag_name"]
|
|
|
|
|
tagValue := args["tag_value"]
|
|
|
|
|
|
|
|
|
|
// Use resourceGroup and vmScaleSet if using vm scale sets
|
|
|
|
|
resourceGroup := args["resource_group"]
|
|
|
|
|
vmScaleSet := args["vm_scale_set"]
|
|
|
|
|
|
|
|
|
|
// Only works for the Azure PublicCLoud for now; no ability to test other Environment
|
|
|
|
|
oauthConfig, err := azure.PublicCloud.OAuthConfigForTenant(tenantID)
|
|
|
|
|
if err != nil {
|
|
|
|
|
@ -63,6 +76,21 @@ func (p *Provider) Addrs(args map[string]string, l *log.Logger) ([]string, error
|
|
|
|
|
vmnet.Sender = autorest.CreateSender(autorest.WithLogging(l))
|
|
|
|
|
vmnet.Authorizer = sbt
|
|
|
|
|
|
|
|
|
|
if tagName != "" && tagValue != "" && resourceGroup == "" && vmScaleSet == "" {
|
|
|
|
|
l.Printf("[DEBUG] discover-azure: using tag method. tag_name: %s, tag_value: %s", tagName, tagValue)
|
|
|
|
|
return fetchAddrsWithTags(tagName, tagValue, vmnet, l)
|
|
|
|
|
} else if resourceGroup != "" && vmScaleSet != "" && tagName == "" && tagValue == "" {
|
|
|
|
|
l.Printf("[DEBUG] discover-azure: using vm scale set method. resource_group: %s, vm_scale_set: %s", resourceGroup, vmScaleSet)
|
|
|
|
|
return fetchAddrsWithVmScaleSet(resourceGroup, vmScaleSet, vmnet, l)
|
|
|
|
|
} else {
|
|
|
|
|
l.Printf("[ERROR] discover-azure: tag_name: %s, tag_value: %s", tagName, tagValue)
|
|
|
|
|
l.Printf("[ERROR] discover-azure: resource_group %s, vm_scale_set %s", resourceGroup, vmScaleSet)
|
|
|
|
|
return nil, fmt.Errorf("discover-azure: unclear configuration. use (tag name and value) or (resouce_group and vm_scale_set)")
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
func fetchAddrsWithTags(tagName string, tagValue string, vmnet network.InterfacesClient, l *log.Logger) ([]string, error) {
|
|
|
|
|
// Get all network interfaces across resource groups
|
|
|
|
|
// unless there is a compelling reason to restrict
|
|
|
|
|
netres, err := vmnet.ListAll()
|
|
|
|
|
@ -77,22 +105,63 @@ func (p *Provider) Addrs(args map[string]string, l *log.Logger) ([]string, error
|
|
|
|
|
// Choose any PrivateIPAddress with the matching tag
|
|
|
|
|
var addrs []string
|
|
|
|
|
for _, v := range *netres.Value {
|
|
|
|
|
id := *v.ID
|
|
|
|
|
if v.Tags == nil {
|
|
|
|
|
l.Printf("[DEBUG] discover-azure: Interface %s has no tags", id)
|
|
|
|
|
continue
|
|
|
|
|
}
|
|
|
|
|
tv := (*v.Tags)[tagName] // *string
|
|
|
|
|
if tv == nil || *tv != tagValue {
|
|
|
|
|
l.Printf("[DEBUG] discover-azure: Interface %s tag value was: %s which did not match: %s", id, *tv, tagValue)
|
|
|
|
|
continue
|
|
|
|
|
}
|
|
|
|
|
if v.IPConfigurations == nil {
|
|
|
|
|
l.Printf("[DEBUG] discover-azure: Interface %s had no ip configuration", id)
|
|
|
|
|
continue
|
|
|
|
|
}
|
|
|
|
|
for _, x := range *v.IPConfigurations {
|
|
|
|
|
if x.PrivateIPAddress == nil {
|
|
|
|
|
l.Printf("[DEBUG] discover-azure: Interface %s had no private ip", id)
|
|
|
|
|
continue
|
|
|
|
|
}
|
|
|
|
|
iAddr := *x.PrivateIPAddress
|
|
|
|
|
l.Printf("[DEBUG] discover-azure: Interface %s has private ip: %s", id, iAddr)
|
|
|
|
|
addrs = append(addrs, iAddr)
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
l.Printf("[DEBUG] discover-azure: Found ip addresses: %v", addrs)
|
|
|
|
|
return addrs, nil
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
func fetchAddrsWithVmScaleSet(resourceGroup string, vmScaleSet string, vmnet network.InterfacesClient, l *log.Logger) ([]string, error) {
|
|
|
|
|
// Get all network interfaces for a specific virtual machine scale set
|
|
|
|
|
netres, err := vmnet.ListVirtualMachineScaleSetNetworkInterfaces(resourceGroup, vmScaleSet)
|
|
|
|
|
if err != nil {
|
|
|
|
|
return nil, fmt.Errorf("discover-azure: %s", err)
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
if netres.Value == nil {
|
|
|
|
|
return nil, fmt.Errorf("discover-azure: no interfaces")
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
// Get all of PrivateIPAddresses we can.
|
|
|
|
|
var addrs []string
|
|
|
|
|
for _, v := range *netres.Value {
|
|
|
|
|
id := *v.ID
|
|
|
|
|
if v.IPConfigurations == nil {
|
|
|
|
|
l.Printf("[DEBUG] discover-azure: Interface %s had no ip configuration", id)
|
|
|
|
|
continue
|
|
|
|
|
}
|
|
|
|
|
for _, x := range *v.IPConfigurations {
|
|
|
|
|
if x.PrivateIPAddress == nil {
|
|
|
|
|
l.Printf("[DEBUG] discover-azure: Interface %s had no private ip", id)
|
|
|
|
|
continue
|
|
|
|
|
}
|
|
|
|
|
addrs = append(addrs, *x.PrivateIPAddress)
|
|
|
|
|
iAddr := *x.PrivateIPAddress
|
|
|
|
|
l.Printf("[DEBUG] discover-azure: Interface %s has private ip: %s", id, iAddr)
|
|
|
|
|
addrs = append(addrs, iAddr)
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
l.Printf("[DEBUG] discover-azure: Found ip addresses: %v", addrs)
|
|
|
|
|
return addrs, nil
|
|
|
|
|
}
|
|
|
|
|
|
James Phillips
7 years ago
committed by