TerraformでAzure VM(仮想マシン)の作成、NSG割当、削除までをやってみた

PS C:\terraform> terraform apply

+ create

Terraform will perform the following actions:

# azurerm_linux_virtual_machine.vm-01 will be created
+ resource “azurerm_linux_virtual_machine" “vm-01" {
+ admin_password = (sensitive value)
+ admin_username = “adminuser"
+ allow_extension_operations = true
+ computer_name = “test-vm-01"
+ disable_password_authentication = false
+ location = “eastus2"
+ name = “test-vm-01"
+ resource_group_name = “test-rg"
+ size = “Standard_B1ms"

+ os_disk {
+ caching = “ReadWrite"
+ name = “test-vm-01_OsDisk"
+ storage_account_type = “Standard_LRS"
}

+ source_image_reference {
+ offer = “CentOS"
+ publisher = “OpenLogic"
+ sku = “8_1-gen2"
+ version = “latest"
}
}

# azurerm_network_interface.test-vm-01-nic will be created
+ resource “azurerm_network_interface" “test-vm-01-nic" {
+ location = “eastus2"
+ name = “test-vm-01-nic"
+ resource_group_name = “test-rg"

 ip_configuration {
+ name = “ipconfig"
+ private_ip_address_allocation = “dynamic"
+ private_ip_address_version = “IPv4"
}
}

# azurerm_public_ip.publicip-01 will be created
+ resource “azurerm_public_ip" “publicip-01" {
+ allocation_method = “Dynamic"
+ location = “eastus2"
+ name = “pubip-01"
+ resource_group_name = “test-rg"
+ sku = “Basic"
}

# azurerm_resource_group.rg-01 will be created
+ resource “azurerm_resource_group" “rg-01" {
+ location = “eastus2"
+ name = “test-rg"
}

# azurerm_subnet.subnet-01 will be created
+ resource “azurerm_subnet" “subnet-01" {
+ address_prefixes = [
+ “10.0.1.0/24",
]
+ name = “subnet-01"
+ resource_group_name = “test-rg"
+ virtual_network_name = “vnet-01"
}

# azurerm_virtual_network.vnet-01 will be created
+ resource “azurerm_virtual_network" “vnet-01" {
+ address_space = [
+ “10.0.0.0/16",
]
+ location = “eastus2"
+ name = “vnet-01"
+ resource_group_name = “test-rg"
}

Plan: 6 to add, 0 to change, 0 to destroy.

Do you want to perform these actions?
Terraform will perform the actions described above.
Only 'yes’ will be accepted to approve.

Enter a value: yes

Apply complete! Resources: 6 added, 0 changed, 0 destroyed.

PS C:\terraform> terraform destroy
– destroy

Terraform will perform the following actions:

# azurerm_linux_virtual_machine.vm-01 will be destroyed
– resource “azurerm_linux_virtual_machine" “vm-01" {
}

# azurerm_network_interface.test-vm-01-nic will be destroyed
– resource “azurerm_network_interface" “test-vm-01-nic" {
}

# azurerm_public_ip.publicip-01 will be destroyed
– resource “azurerm_public_ip" “publicip-01" {
}

# azurerm_resource_group.rg-01 will be destroyed
– resource “azurerm_resource_group" “rg-01" {
}

# azurerm_subnet.subnet-01 will be destroyed
– resource “azurerm_subnet" “subnet-01" {
}

# azurerm_virtual_network.vnet-01 will be destroyed
– resource “azurerm_virtual_network" “vnet-01" {
}

Plan: 0 to add, 0 to change, 6 to destroy.

Do you really want to destroy all resources?
Terraform will destroy all your managed infrastructure, as shown above.
There is no undo. Only 'yes’ will be accepted to confirm.

Enter a value: yes

Destroy complete! Resources: 6 destroyed.

PS C:\terraform> terraform apply

Terraform used the selected providers to generate the following execution plan. Resource actions are indicated with the following symbols:
+ create

Terraform will perform the following actions:

# azurerm_network_interface_security_group_association.test-vm-01-nic-nsg-01 will be created
+ resource “azurerm_network_interface_security_group_association" “test-vm-01-nic-nsg-01" {
+ id = (known after apply)
+ network_interface_id = “/subscriptions/サブスクリプションID/resourceGroups/test-rg/providers/Microsoft.Network/networkInterfaces/test-vm-01-nic"
+ network_security_group_id = (known after apply)
}

# azurerm_network_security_group.nsg-01 will be created
+ resource “azurerm_network_security_group" “nsg-01" {
+ id = (known after apply)
+ location = “eastus2"
+ name = “test-vm-01-nsg"
+ resource_group_name = “test-rg"
+ security_rule = [
+ {
+ access = “Allow"
+ description = “"
+ destination_address_prefix = “VirtualNetwork"
+ destination_address_prefixes = []
+ destination_application_security_group_ids = []
+ destination_port_range = “"
+ destination_port_ranges = [
+ “22",
]
+ direction = “Inbound"
+ name = “rule-01"
+ priority = 100
+ protocol = “TCP"
+ source_address_prefix = “"
+ source_address_prefixes = [
+ “192.168.1.1",
]
+ source_application_security_group_ids = []
+ source_port_range = “*"
+ source_port_ranges = []
},
]
}

Plan: 2 to add, 0 to change, 0 to destroy.

Enter a value: yes

Apply complete! Resources: 2 added, 0 changed, 0 destroyed.