mirror of
https://github.com/microsoft/regorus.git
synced 2026-08-05 02:16:11 +00:00
afdb894d85
50 end-to-end test cases derived from real Azure built-in policies. Each file contains a complete policy definition, sample resources, and expected evaluation results. Coverage spans storage, networking, compute, security, monitoring, database, identity, governance, and update management scenarios. Signed-off-by: Anand Krishnamoorthi <anakrish@microsoft.com> Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
1610 lines
70 KiB
YAML
1610 lines
70 KiB
YAML
# Copyright (c) Microsoft Corporation.
|
|
# Licensed under the MIT License.
|
|
|
|
# E2E Test: Azure Update Manager/AzUpdateMgmtCenter_ScheduledPatching_DINE
|
|
# Real Azure Policy: "Schedule recurring updates using Azure Update Manager"
|
|
# Source: regolator/policyDefinitions/Azure Update Manager/AzUpdateMgmtCenter_ScheduledPatching_DINE.json
|
|
#
|
|
# Features exercised:
|
|
# - Largest policy in corpus (231 nodes, 1331 lines) — register overflow stress test
|
|
# - Value count with current() for tag matching
|
|
# - requestContext().apiVersion guard
|
|
# - resourceGroup().name, empty(), field('tags')
|
|
# - Deep allOf/anyOf nesting (depth 9) for OS image matching
|
|
# - DeployIfNotExists with deployment template
|
|
|
|
aliases: test_aliases.json
|
|
|
|
policy_definition: |
|
|
{
|
|
"properties": {
|
|
"displayName": "Schedule recurring updates using Azure Update Manager",
|
|
"policyType": "BuiltIn",
|
|
"mode": "Indexed",
|
|
"description": "You can use Azure Update Manager in Azure to save recurring deployment schedules to install operating system updates for your Windows Server and Linux machines in Azure, in on-premises environments, and in other cloud environments connected using Azure Arc-enabled servers. This policy will also change the patch mode for the Azure Virtual Machine to 'AutomaticByPlatform'. See more: https://aka.ms/umc-scheduled-patching",
|
|
"parameters": {
|
|
"maintenanceConfigurationResourceId": {
|
|
"type": "String",
|
|
"metadata": {
|
|
"displayName": "Maintenance Configuration ARM ID",
|
|
"description": "ARM ID of Maintenance Configuration which will be used for scheduling.",
|
|
"assignPermissions": true
|
|
}
|
|
},
|
|
"resourceGroups": {
|
|
"type": "Array",
|
|
"metadata": {
|
|
"displayName": "Resource groups",
|
|
"description": "The list of resource groups from which machines need to be targeted. Example: [\"rg1\", \"rg2\"]."
|
|
},
|
|
"defaultValue": []
|
|
},
|
|
"operatingSystemTypes": {
|
|
"type": "Array",
|
|
"metadata": {
|
|
"displayName": "Operating System types",
|
|
"description": "The list of Operating System types from which machines need to be targeted."
|
|
},
|
|
"defaultValue": [
|
|
"Windows",
|
|
"Linux"
|
|
],
|
|
"allowedValues": [
|
|
"Windows",
|
|
"Linux"
|
|
]
|
|
},
|
|
"locations": {
|
|
"type": "Array",
|
|
"metadata": {
|
|
"displayName": "Machines locations",
|
|
"description": "The list of locations from which machines need to be targeted.",
|
|
"strongType": "location"
|
|
},
|
|
"defaultValue": []
|
|
},
|
|
"tagValues": {
|
|
"type": "Array",
|
|
"metadata": {
|
|
"displayName": "Tags on machines",
|
|
"description": "The list of tags that need to matched for getting target machines (case sensitive). Example: [ {\"key\": \"tagKey1\", \"value\": \"value1\"}, {\"key\": \"tagKey2\", \"value\": \"value2\"}]."
|
|
},
|
|
"defaultValue": []
|
|
},
|
|
"tagOperator": {
|
|
"type": "String",
|
|
"metadata": {
|
|
"displayName": "Tags operator",
|
|
"description": "Matching condition for resource tags"
|
|
},
|
|
"allowedValues": [
|
|
"All",
|
|
"Any"
|
|
],
|
|
"defaultValue": "Any"
|
|
},
|
|
"effect": {
|
|
"type": "String",
|
|
"metadata": {
|
|
"displayName": "Effect",
|
|
"description": "Enable or disable the execution of the policy"
|
|
},
|
|
"allowedValues": [
|
|
"DeployIfNotExists",
|
|
"Disabled"
|
|
],
|
|
"defaultValue": "DeployIfNotExists"
|
|
}
|
|
},
|
|
"policyRule": {
|
|
"if": {
|
|
"allOf": [
|
|
{
|
|
"field": "type",
|
|
"in": [
|
|
"Microsoft.HybridCompute/machines",
|
|
"Microsoft.Compute/virtualMachines"
|
|
]
|
|
},
|
|
{
|
|
"anyOf": [
|
|
{
|
|
"value": "[empty(parameters('operatingSystemTypes'))]",
|
|
"equals": true
|
|
},
|
|
{
|
|
"allOf": [
|
|
{
|
|
"field": "type",
|
|
"in": [
|
|
"Microsoft.HybridCompute/machines"
|
|
]
|
|
},
|
|
{
|
|
"field": "Microsoft.HybridCompute/machines/osName",
|
|
"in": "[parameters('operatingSystemTypes')]"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"allOf": [
|
|
{
|
|
"field": "type",
|
|
"in": [
|
|
"Microsoft.Compute/virtualMachines"
|
|
]
|
|
},
|
|
{
|
|
"anyOf": [
|
|
{
|
|
"allOf": [
|
|
{
|
|
"field": "Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType",
|
|
"exists": "true"
|
|
},
|
|
{
|
|
"field": "Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType",
|
|
"in": "[parameters('operatingSystemTypes')]"
|
|
},
|
|
{
|
|
"anyOf": [
|
|
{
|
|
"value": "[field('Microsoft.Compute/imageId')]",
|
|
"contains": "Microsoft.Compute/galleries"
|
|
},
|
|
{
|
|
"value": "[field('Microsoft.Compute/imageId')]",
|
|
"contains": "Microsoft.Compute/images"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"field": "Microsoft.Compute/virtualMachines/osProfile.computerName",
|
|
"exists": "true"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"allOf": [
|
|
{
|
|
"field": "Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType",
|
|
"exists": "true"
|
|
},
|
|
{
|
|
"field": "Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType",
|
|
"in": "[parameters('operatingSystemTypes')]"
|
|
},
|
|
{
|
|
"anyOf": [
|
|
{
|
|
"value": "[field('Microsoft.Compute/imageId')]",
|
|
"contains": "Microsoft.Compute/galleries"
|
|
},
|
|
{
|
|
"value": "[field('Microsoft.Compute/imageId')]",
|
|
"contains": "Microsoft.Compute/images"
|
|
},
|
|
{
|
|
"value": "[field('Microsoft.Compute/virtualMachines/storageProfile.osDisk.createOption')]",
|
|
"equals": "Attach"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"field": "Microsoft.Compute/virtualMachines/osProfile.computerName",
|
|
"exists": "false"
|
|
},
|
|
{
|
|
"value": "[requestContext().apiVersion]",
|
|
"greaterOrEquals": "2023-07-01"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"anyOf": [
|
|
{
|
|
"field": "Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType",
|
|
"in": "[parameters('operatingSystemTypes')]"
|
|
},
|
|
{
|
|
"allOf": [
|
|
{
|
|
"value": "Linux",
|
|
"in": "[parameters('operatingSystemTypes')]"
|
|
},
|
|
{
|
|
"field": "Microsoft.Compute/imageOffer",
|
|
"in": [
|
|
"sles-standard",
|
|
"sles-sapcal",
|
|
"sles-sap-byos",
|
|
"sles-sap",
|
|
"sles-byos",
|
|
"sles-15-sp4-sapcal",
|
|
"sles-15-sp4-basic",
|
|
"sles-15-sp4",
|
|
"sles-15-sp3-sapcal",
|
|
"sles-15-sp2-hpc",
|
|
"sles-15-sp2-basic",
|
|
"sles-15-sp1-sapcal",
|
|
"sles",
|
|
"sle-hpc-15-sp4",
|
|
"sles-12-sp5",
|
|
"sles-15-sp2",
|
|
"centos-hpc",
|
|
"centos-ci",
|
|
"centos-lvm",
|
|
"Centos",
|
|
"rhel-sap-ha",
|
|
"rhel-sap-apps",
|
|
"RHEL-RAW",
|
|
"RHEL",
|
|
"aml-workstation",
|
|
"aks",
|
|
"oracle-database-19-3",
|
|
"oracle-database",
|
|
"oracle-linux",
|
|
"cbl-mariner",
|
|
"0001-com-ubuntu-server-jammy",
|
|
"0001-com-ubuntu-pro-jammy",
|
|
"0001-com-ubuntu-pro-focal",
|
|
"0001-com-ubuntu-server-focal",
|
|
"0001-com-ubuntu-pro-bionic",
|
|
"UbuntuServer"
|
|
]
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"allOf": [
|
|
{
|
|
"value": "Windows",
|
|
"in": "[parameters('operatingSystemTypes')]"
|
|
},
|
|
{
|
|
"field": "Microsoft.Compute/imageOffer",
|
|
"in": [
|
|
"WindowsServer",
|
|
"microsoftserveroperatingsystems-previews",
|
|
"windowsserverhotpatch-previews",
|
|
"sql2016sp1-ws2016",
|
|
"sql2016sp2-ws201",
|
|
"sql2017-ws2016",
|
|
"sql2019-ws2019",
|
|
"dynamics",
|
|
"process-server"
|
|
]
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"anyOf": [
|
|
{
|
|
"value": "[empty(parameters('locations'))]",
|
|
"equals": true
|
|
},
|
|
{
|
|
"field": "location",
|
|
"in": "[parameters('locations')]"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"anyOf": [
|
|
{
|
|
"value": "[empty(parameters('resourceGroups'))]",
|
|
"equals": true
|
|
},
|
|
{
|
|
"value": "[resourceGroup().name]",
|
|
"in": "[parameters('resourceGroups')]"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"anyOf": [
|
|
{
|
|
"value": "[empty(parameters('tagValues'))]",
|
|
"equals": true
|
|
},
|
|
{
|
|
"allOf": [
|
|
{
|
|
"value": "[empty(field('tags'))]",
|
|
"equals": false
|
|
},
|
|
{
|
|
"value": "[parameters('tagOperator')]",
|
|
"equals": "Any"
|
|
},
|
|
{
|
|
"count": {
|
|
"value": "[parameters('tagValues')]",
|
|
"name": "tagKvp",
|
|
"where": {
|
|
"value": "[length(intersection(createObject(current('tagKvp').key, current('tagKvp').value), field('tags')))]",
|
|
"greater": 0
|
|
}
|
|
},
|
|
"greater": 0
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"allOf": [
|
|
{
|
|
"value": "[empty(field('tags'))]",
|
|
"equals": false
|
|
},
|
|
{
|
|
"value": "[parameters('tagOperator')]",
|
|
"equals": "All"
|
|
},
|
|
{
|
|
"count": {
|
|
"value": "[parameters('tagValues')]",
|
|
"name": "tagKvp",
|
|
"where": {
|
|
"value": "[length(intersection(createObject(current('tagKvp').key, current('tagKvp').value), field('tags')))]",
|
|
"greater": 0
|
|
}
|
|
},
|
|
"equals": "[length(parameters('tagValues'))]"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"anyOf": [
|
|
{
|
|
"field": "type",
|
|
"in": [
|
|
"Microsoft.HybridCompute/machines"
|
|
]
|
|
},
|
|
{
|
|
"allOf": [
|
|
{
|
|
"field": "type",
|
|
"in": [
|
|
"Microsoft.Compute/virtualMachines"
|
|
]
|
|
},
|
|
{
|
|
"anyOf": [
|
|
{
|
|
"allOf": [
|
|
{
|
|
"field": "Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType",
|
|
"exists": "true"
|
|
},
|
|
{
|
|
"anyOf": [
|
|
{
|
|
"value": "[field('Microsoft.Compute/imageId')]",
|
|
"contains": "Microsoft.Compute/galleries"
|
|
},
|
|
{
|
|
"value": "[field('Microsoft.Compute/imageId')]",
|
|
"contains": "Microsoft.Compute/images"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"field": "Microsoft.Compute/virtualMachines/osProfile.computerName",
|
|
"exists": "true"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"allOf": [
|
|
{
|
|
"field": "Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType",
|
|
"exists": "true"
|
|
},
|
|
{
|
|
"anyOf": [
|
|
{
|
|
"value": "[field('Microsoft.Compute/imageId')]",
|
|
"contains": "Microsoft.Compute/galleries"
|
|
},
|
|
{
|
|
"value": "[field('Microsoft.Compute/imageId')]",
|
|
"contains": "Microsoft.Compute/images"
|
|
},
|
|
{
|
|
"value": "[field('Microsoft.Compute/virtualMachines/storageProfile.osDisk.createOption')]",
|
|
"equals": "Attach"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"field": "Microsoft.Compute/virtualMachines/osProfile.computerName",
|
|
"exists": "false"
|
|
},
|
|
{
|
|
"value": "[requestContext().apiVersion]",
|
|
"greaterOrEquals": "2023-07-01"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"allOf": [
|
|
{
|
|
"field": "Microsoft.Compute/imagePublisher",
|
|
"equals": "Canonical"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"allOf": [
|
|
{
|
|
"field": "Microsoft.Compute/imagePublisher",
|
|
"equals": "microsoftcblmariner"
|
|
},
|
|
{
|
|
"field": "Microsoft.Compute/imageOffer",
|
|
"equals": "cbl-mariner"
|
|
},
|
|
{
|
|
"field": "Microsoft.Compute/imageSKU",
|
|
"in": [
|
|
"cbl-mariner-1",
|
|
"1-gen2",
|
|
"cbl-mariner-2",
|
|
"cbl-mariner-2-gen2"
|
|
]
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"allOf": [
|
|
{
|
|
"field": "Microsoft.Compute/imagePublisher",
|
|
"equals": "oracle"
|
|
},
|
|
{
|
|
"anyOf": [
|
|
{
|
|
"allOf": [
|
|
{
|
|
"field": "Microsoft.Compute/imageOffer",
|
|
"equals": "oracle-linux"
|
|
},
|
|
{
|
|
"anyOf": [
|
|
{
|
|
"field": "Microsoft.Compute/imageSKU",
|
|
"in": [
|
|
"8",
|
|
"8-ci",
|
|
"81",
|
|
"81-ci",
|
|
"81-gen2"
|
|
]
|
|
},
|
|
{
|
|
"field": "Microsoft.Compute/imageSKU",
|
|
"like": "7*"
|
|
},
|
|
{
|
|
"field": "Microsoft.Compute/imageSKU",
|
|
"like": "ol7*"
|
|
},
|
|
{
|
|
"field": "Microsoft.Compute/imageSKU",
|
|
"like": "ol8*"
|
|
},
|
|
{
|
|
"field": "Microsoft.Compute/imageSKU",
|
|
"like": "ol9*"
|
|
},
|
|
{
|
|
"field": "Microsoft.Compute/imageSKU",
|
|
"like": "ol9-lvm*"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"allOf": [
|
|
{
|
|
"field": "Microsoft.Compute/imageOffer",
|
|
"equals": "oracle-database"
|
|
},
|
|
{
|
|
"field": "Microsoft.Compute/imageSKU",
|
|
"equals": "oracle_db_21"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"allOf": [
|
|
{
|
|
"field": "Microsoft.Compute/imageOffer",
|
|
"like": "oracle-database-*"
|
|
},
|
|
{
|
|
"field": "Microsoft.Compute/imageSKU",
|
|
"like": "18.*"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"allOf": [
|
|
{
|
|
"field": "Microsoft.Compute/imageOffer",
|
|
"equals": "oracle-database-19-3"
|
|
},
|
|
{
|
|
"field": "Microsoft.Compute/imageSKU",
|
|
"equals": "oracle-database-19-0904"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"allOf": [
|
|
{
|
|
"field": "Microsoft.Compute/imagePublisher",
|
|
"equals": "microsoft-aks"
|
|
},
|
|
{
|
|
"field": "Microsoft.Compute/imageOffer",
|
|
"equals": "aks"
|
|
},
|
|
{
|
|
"field": "Microsoft.Compute/imageSKU",
|
|
"equals": "aks-engine-ubuntu-1804-202112"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"allOf": [
|
|
{
|
|
"field": "Microsoft.Compute/imagePublisher",
|
|
"equals": "microsoft-dsvm"
|
|
},
|
|
{
|
|
"field": "Microsoft.Compute/imageOffer",
|
|
"equals": "aml-workstation"
|
|
},
|
|
{
|
|
"field": "Microsoft.Compute/imageSKU",
|
|
"in": [
|
|
"ubuntu-20",
|
|
"ubuntu-20-gen2"
|
|
]
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"allOf": [
|
|
{
|
|
"field": "Microsoft.Compute/imagePublisher",
|
|
"equals": "Redhat"
|
|
},
|
|
{
|
|
"anyOf": [
|
|
{
|
|
"allOf": [
|
|
{
|
|
"field": "Microsoft.Compute/imageOffer",
|
|
"equals": "RHEL"
|
|
},
|
|
{
|
|
"anyOf": [
|
|
{
|
|
"field": "Microsoft.Compute/imageSKU",
|
|
"like": "7*"
|
|
},
|
|
{
|
|
"field": "Microsoft.Compute/imageSKU",
|
|
"like": "8*"
|
|
},
|
|
{
|
|
"field": "Microsoft.Compute/imageSKU",
|
|
"like": "9*"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"field": "Microsoft.Compute/imageSKU",
|
|
"notEquals": "74-gen2"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"allOf": [
|
|
{
|
|
"field": "Microsoft.Compute/imageOffer",
|
|
"equals": "RHEL-RAW"
|
|
},
|
|
{
|
|
"anyOf": [
|
|
{
|
|
"field": "Microsoft.Compute/imageSKU",
|
|
"like": "7*"
|
|
},
|
|
{
|
|
"field": "Microsoft.Compute/imageSKU",
|
|
"like": "8*"
|
|
},
|
|
{
|
|
"field": "Microsoft.Compute/imageSKU",
|
|
"like": "9*"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"allOf": [
|
|
{
|
|
"field": "Microsoft.Compute/imageOffer",
|
|
"in": [
|
|
"rhel-sap-ha"
|
|
]
|
|
},
|
|
{
|
|
"anyOf": [
|
|
{
|
|
"field": "Microsoft.Compute/imageSKU",
|
|
"equals": "90sapha-gen2"
|
|
},
|
|
{
|
|
"field": "Microsoft.Compute/imageSKU",
|
|
"like": "7*"
|
|
},
|
|
{
|
|
"field": "Microsoft.Compute/imageSKU",
|
|
"like": "8*"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"field": "Microsoft.Compute/imageSKU",
|
|
"notEquals": "7.5"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"allOf": [
|
|
{
|
|
"field": "Microsoft.Compute/imageOffer",
|
|
"in": [
|
|
"rhel-sap-apps"
|
|
]
|
|
},
|
|
{
|
|
"anyOf": [
|
|
{
|
|
"field": "Microsoft.Compute/imageSKU",
|
|
"equals": "90sapha-gen2"
|
|
},
|
|
{
|
|
"field": "Microsoft.Compute/imageSKU",
|
|
"like": "7*"
|
|
},
|
|
{
|
|
"field": "Microsoft.Compute/imageSKU",
|
|
"like": "8*"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"allOf": [
|
|
{
|
|
"field": "Microsoft.Compute/imageOffer",
|
|
"like": "rhel-sap-*"
|
|
},
|
|
{
|
|
"field": "Microsoft.Compute/imageSKU",
|
|
"equals": "9_0"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"allOf": [
|
|
{
|
|
"field": "Microsoft.Compute/imageOffer",
|
|
"equals": "rhel-ha"
|
|
},
|
|
{
|
|
"field": "Microsoft.Compute/imageSKU",
|
|
"like": "8*"
|
|
},
|
|
{
|
|
"field": "Microsoft.Compute/imageSKU",
|
|
"notIn": [
|
|
"7.4",
|
|
"7.5",
|
|
"7.6",
|
|
"8.1",
|
|
"81_gen2"
|
|
]
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"allOf": [
|
|
{
|
|
"field": "Microsoft.Compute/imageOffer",
|
|
"equals": "rhel-sap"
|
|
},
|
|
{
|
|
"field": "Microsoft.Compute/imageSKU",
|
|
"notIn": [
|
|
"7.4",
|
|
"7.5",
|
|
"7.7"
|
|
]
|
|
},
|
|
{
|
|
"field": "Microsoft.Compute/imageSKU",
|
|
"like": "7*"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"allOf": [
|
|
{
|
|
"field": "Microsoft.Compute/imagePublisher",
|
|
"equals": "OpenLogic"
|
|
},
|
|
{
|
|
"allOf": [
|
|
{
|
|
"anyOf": [
|
|
{
|
|
"allOf": [
|
|
{
|
|
"field": "Microsoft.Compute/imageOffer",
|
|
"equals": "Centos"
|
|
},
|
|
{
|
|
"field": "Microsoft.Compute/imageSKU",
|
|
"like": "7*"
|
|
},
|
|
{
|
|
"field": "Microsoft.Compute/imageSKU",
|
|
"notLike": "8*"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"allOf": [
|
|
{
|
|
"field": "Microsoft.Compute/imageOffer",
|
|
"equals": "centos-lvm"
|
|
},
|
|
{
|
|
"field": "Microsoft.Compute/imageSKU",
|
|
"in": [
|
|
"7-lvm",
|
|
"8-lvm",
|
|
"7-lvm-gen2"
|
|
]
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"allOf": [
|
|
{
|
|
"field": "Microsoft.Compute/imageOffer",
|
|
"equals": "centos-ci"
|
|
},
|
|
{
|
|
"field": "Microsoft.Compute/imageSKU",
|
|
"equals": "7-ci"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"field": "Microsoft.Compute/imageOffer",
|
|
"notEquals": "centos-hpc"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"allOf": [
|
|
{
|
|
"field": "Microsoft.Compute/imagePublisher",
|
|
"equals": "SUSE"
|
|
},
|
|
{
|
|
"anyOf": [
|
|
{
|
|
"allOf": [
|
|
{
|
|
"field": "Microsoft.Compute/imageOffer",
|
|
"in": [
|
|
"sles-12-sp5",
|
|
"sles-15-sp2",
|
|
"sle-hpc-15-sp4",
|
|
"sles-15-sp1-sapcal",
|
|
"sles-15-sp3-sapcal",
|
|
"sles-15-sp4-basic",
|
|
"sles-15-sp4"
|
|
]
|
|
},
|
|
{
|
|
"field": "Microsoft.Compute/imageSKU",
|
|
"in": [
|
|
"gen1",
|
|
"gen2"
|
|
]
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"allOf": [
|
|
{
|
|
"field": "Microsoft.Compute/imageOffer",
|
|
"in": [
|
|
"sles",
|
|
"sles-standard"
|
|
]
|
|
},
|
|
{
|
|
"field": "Microsoft.Compute/imageSKU",
|
|
"equals": "12-sp4-gen2"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"allOf": [
|
|
{
|
|
"field": "Microsoft.Compute/imageOffer",
|
|
"in": [
|
|
"sles-15-sp2-basic",
|
|
"sles-15-sp2-hpc"
|
|
]
|
|
},
|
|
{
|
|
"field": "Microsoft.Compute/imageSKU",
|
|
"equals": "gen2"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"allOf": [
|
|
{
|
|
"field": "Microsoft.Compute/imageOffer",
|
|
"equals": "sles-15-sp4-sapcal"
|
|
},
|
|
{
|
|
"field": "Microsoft.Compute/imageSKU",
|
|
"equals": "gen1"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"allOf": [
|
|
{
|
|
"field": "Microsoft.Compute/imageOffer",
|
|
"in": [
|
|
"sles-byos",
|
|
"sles-sap"
|
|
]
|
|
},
|
|
{
|
|
"field": "Microsoft.Compute/imageSKU",
|
|
"in": [
|
|
"12-sp4",
|
|
"12-sp4-gen2"
|
|
]
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"allOf": [
|
|
{
|
|
"field": "Microsoft.Compute/imageOffer",
|
|
"equals": "sles-sap-byos"
|
|
},
|
|
{
|
|
"field": "Microsoft.Compute/imageSKU",
|
|
"in": [
|
|
"12-sp4",
|
|
"12-sp4-gen2",
|
|
"gen2-12-sp4"
|
|
]
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"allOf": [
|
|
{
|
|
"field": "Microsoft.Compute/imageOffer",
|
|
"equals": "sles-sapcal"
|
|
},
|
|
{
|
|
"field": "Microsoft.Compute/imageSKU",
|
|
"equals": "12-sp3"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"allOf": [
|
|
{
|
|
"field": "Microsoft.Compute/imageSKU",
|
|
"like": "gen*"
|
|
},
|
|
{
|
|
"anyOf": [
|
|
{
|
|
"field": "Microsoft.Compute/imageOffer",
|
|
"like": "opensuse-leap-15-*"
|
|
},
|
|
{
|
|
"field": "Microsoft.Compute/imageOffer",
|
|
"like": "sles-12-sp5-*"
|
|
},
|
|
{
|
|
"field": "Microsoft.Compute/imageOffer",
|
|
"like": "sles-sap-12-sp5*"
|
|
},
|
|
{
|
|
"allOf": [
|
|
{
|
|
"field": "Microsoft.Compute/imageOffer",
|
|
"like": "sles-sap-15-*"
|
|
},
|
|
{
|
|
"field": "Microsoft.Compute/imageOffer",
|
|
"notLike": "sles-sap-15-*-byos"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"allOf": [
|
|
{
|
|
"field": "Microsoft.Compute/imagePublisher",
|
|
"equals": "MicrosoftWindowsServer"
|
|
},
|
|
{
|
|
"anyOf": [
|
|
{
|
|
"field": "Microsoft.Compute/imageOffer",
|
|
"in": [
|
|
"windowsserver",
|
|
"windows-cvm",
|
|
"windowsserverdotnet",
|
|
"windowsserver-gen2preview",
|
|
"windowsserversemiannual",
|
|
"windowsserverupgrade"
|
|
]
|
|
},
|
|
{
|
|
"allOf": [
|
|
{
|
|
"field": "Microsoft.Compute/imageOffer",
|
|
"equals": "microsoftserveroperatingsystems-previews"
|
|
},
|
|
{
|
|
"field": "Microsoft.Compute/imageSKU",
|
|
"equals": "windows-server-vnext-azure-edition-core"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"allOf": [
|
|
{
|
|
"field": "Microsoft.Compute/imageOffer",
|
|
"equals": "windowsserverhotpatch-previews"
|
|
},
|
|
{
|
|
"field": "Microsoft.Compute/imageSKU",
|
|
"equals": "windows-server-2022-azure-edition-hotpatch"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"allOf": [
|
|
{
|
|
"field": "Microsoft.Compute/imagePublisher",
|
|
"equals": "MicrosoftSQLServer"
|
|
},
|
|
{
|
|
"field": "Microsoft.Compute/imageOffer",
|
|
"notLike": "sql2019-sles*"
|
|
},
|
|
{
|
|
"field": "Microsoft.Compute/imageOffer",
|
|
"notIn": [
|
|
"sql2019-rhel7",
|
|
"sql2017-rhel7"
|
|
]
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"allOf": [
|
|
{
|
|
"field": "Microsoft.Compute/imagePublisher",
|
|
"equals": "microsoftdynamicsax"
|
|
},
|
|
{
|
|
"field": "Microsoft.Compute/imageOffer",
|
|
"equals": "dynamics"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"allOf": [
|
|
{
|
|
"field": "Microsoft.Compute/imagePublisher",
|
|
"equals": "microsoftazuresiterecovery"
|
|
},
|
|
{
|
|
"field": "Microsoft.Compute/imageOffer",
|
|
"equals": "process-server"
|
|
},
|
|
{
|
|
"field": "Microsoft.Compute/imageSKU",
|
|
"equals": "windows-2012-r2-datacenter"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"allOf": [
|
|
{
|
|
"field": "Microsoft.Compute/imagePublisher",
|
|
"equals": "microsoftbiztalkserver"
|
|
},
|
|
{
|
|
"field": "Microsoft.Compute/imageOffer",
|
|
"equals": "biztalk-server"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"field": "Microsoft.Compute/imagePublisher",
|
|
"equals": "microsoftpowerbi"
|
|
},
|
|
{
|
|
"allOf": [
|
|
{
|
|
"field": "Microsoft.Compute/imagePublisher",
|
|
"equals": "microsoftsharepoint"
|
|
},
|
|
{
|
|
"field": "Microsoft.Compute/imageOffer",
|
|
"equals": "microsoftsharepointserver"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"allOf": [
|
|
{
|
|
"field": "Microsoft.Compute/imagePublisher",
|
|
"equals": "microsoftwindowsserverhpcpack"
|
|
},
|
|
{
|
|
"field": "Microsoft.Compute/imageOffer",
|
|
"equals": "windowsserverhpcpack"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"allOf": [
|
|
{
|
|
"field": "Microsoft.Compute/imagePublisher",
|
|
"equals": "microsoftvisualstudio"
|
|
},
|
|
{
|
|
"field": "Microsoft.Compute/imageOffer",
|
|
"like": "visualstudio*"
|
|
},
|
|
{
|
|
"anyOf": [
|
|
{
|
|
"field": "Microsoft.Compute/imageSKU",
|
|
"like": "*-ws2012r2"
|
|
},
|
|
{
|
|
"field": "Microsoft.Compute/imageSKU",
|
|
"like": "*-ws2016"
|
|
},
|
|
{
|
|
"field": "Microsoft.Compute/imageSKU",
|
|
"like": "*-ws2019"
|
|
},
|
|
{
|
|
"field": "Microsoft.Compute/imageSKU",
|
|
"like": "*-ws2022"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"field": "Microsoft.Compute/imagePublisher",
|
|
"notEquals": "microsoft-ads"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
"then": {
|
|
"effect": "[parameters('effect')]",
|
|
"details": {
|
|
"roleDefinitionIds": [
|
|
"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"
|
|
],
|
|
"type": "Microsoft.Maintenance/configurationAssignments",
|
|
"evaluationDelay": "AfterProvisioningSuccess",
|
|
"existenceCondition": {
|
|
"field": "Microsoft.Maintenance/configurationAssignments/maintenanceConfigurationId",
|
|
"equals": "[parameters('maintenanceConfigurationResourceId')]"
|
|
},
|
|
"deployment": {
|
|
"properties": {
|
|
"mode": "incremental",
|
|
"parameters": {
|
|
"machineResourceId": {
|
|
"value": "[field('id')]"
|
|
},
|
|
"maintenanceConfigurationResourceId": {
|
|
"value": "[parameters('maintenanceConfigurationResourceId')]"
|
|
},
|
|
"osType": {
|
|
"value": "[if(equals(toLower(field('type')), 'microsoft.compute/virtualmachines'), field('Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType'), field('Microsoft.HybridCompute/machines/osName'))]"
|
|
},
|
|
"imagePublisher": {
|
|
"value": "[tolower(field('Microsoft.Compute/imagePublisher'))]"
|
|
},
|
|
"imageOffer": {
|
|
"value": "[tolower(field('Microsoft.Compute/imageOffer'))]"
|
|
},
|
|
"patchMode": {
|
|
"value": "[if(equals(toLower(field('type')), 'microsoft.compute/virtualmachines'), if(or(equals(toLower(field('Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType')), 'windows'), contains(createArray('microsoftwindowsserver', 'microsoftsqlserver', 'microsoftdynamicsax', 'microsoftazuresiterecovery', 'microsoftbiztalkserver', 'microsoftpowerbi', 'microsoftsharepoint', 'microsoftwindowsserverhpcpack', 'microsoftvisualstudio'),tolower(field('Microsoft.Compute/imagePublisher')))), field('Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration.patchSettings.patchMode'), field('Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration.patchSettings.patchMode')), 'NA')]"
|
|
},
|
|
"bypassCheckValue": {
|
|
"value": "[if(equals(toLower(field('type')), 'microsoft.compute/virtualmachines'), if(or(equals(toLower(field('Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType')), 'windows'), contains(createArray('microsoftwindowsserver', 'microsoftsqlserver', 'microsoftdynamicsax', 'microsoftazuresiterecovery', 'microsoftbiztalkserver', 'microsoftpowerbi', 'microsoftsharepoint', 'microsoftwindowsserverhpcpack', 'microsoftvisualstudio'), toLower(field('Microsoft.Compute/imagePublisher')))), if(contains(field('Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration.patchSettings.automaticByPlatformSettings'), 'bypassPlatformSafetyChecksOnUserSchedule'), field('Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration.patchSettings.automaticByPlatformSettings.bypassPlatformSafetyChecksOnUserSchedule'), bool('false')), if(contains(field('Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration.patchSettings.automaticByPlatformSettings'), 'bypassPlatformSafetyChecksOnUserSchedule'), field('Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration.patchSettings.automaticByPlatformSettings.bypassPlatformSafetyChecksOnUserSchedule'), bool('false'))), bool('false'))]"
|
|
},
|
|
"location": {
|
|
"value": "[field('location')]"
|
|
}
|
|
},
|
|
"template": {
|
|
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
|
|
"contentVersion": "1.0.0.0",
|
|
"parameters": {
|
|
"machineResourceId": {
|
|
"type": "string"
|
|
},
|
|
"maintenanceConfigurationResourceId": {
|
|
"type": "String"
|
|
},
|
|
"osType": {
|
|
"type": "String"
|
|
},
|
|
"patchMode": {
|
|
"type": "string"
|
|
},
|
|
"imagePublisher": {
|
|
"type": "string"
|
|
},
|
|
"imageOffer": {
|
|
"type": "string"
|
|
},
|
|
"bypassCheckValue": {
|
|
"type": "bool"
|
|
},
|
|
"location": {
|
|
"type": "string"
|
|
}
|
|
},
|
|
"variables": {
|
|
"allowedWindowsPublishers": [
|
|
"microsoftwindowsserver",
|
|
"microsoftsqlserver",
|
|
"microsoftdynamicsax",
|
|
"microsoftazuresiterecovery",
|
|
"microsoftbiztalkserver",
|
|
"microsoftpowerbi",
|
|
"microsoftsharepoint",
|
|
"microsoftwindowsserverhpcpack",
|
|
"microsoftvisualstudio"
|
|
],
|
|
"imagePublisher": "[parameters('imagePublisher')]",
|
|
"imageOffer": "[parameters('imageOffer')]",
|
|
"osTypeFromAllowedListOfPublishers": "[if(contains(variables('allowedWindowsPublishers'), variables('imagePublisher')), 'windows', 'linux')]",
|
|
"osTypeFromPublisher": "[if(equals(variables('imagePublisher'), 'microsoftsqlserver'), if(contains(variables('imageOffer'), 'ws'), 'windows', 'linux'), variables('osTypeFromAllowedListOfPublishers'))]",
|
|
"osType": "[toLower(if(empty(parameters('osType')), variables('osTypeFromPublisher'), parameters('osType')))]",
|
|
"automaticByPlatformPatchMode": "AutomaticByPlatform",
|
|
"configAssignmentName": "[concat(uniqueString(tolower(parameters('maintenanceConfigurationResourceId'))), '-AzPolicy')]",
|
|
"isAzureMachine": "[contains(tolower(parameters('machineResourceId')), tolower('/providers/microsoft.compute/virtualmachines/'))]",
|
|
"isArcMachine": "[contains(tolower(parameters('machineResourceId')), tolower('/providers/Microsoft.HybridCompute/machines/'))]",
|
|
"linuxOSProfile": {
|
|
"linuxConfiguration": {
|
|
"patchSettings": {
|
|
"patchMode": "[variables('automaticByPlatformPatchMode')]",
|
|
"automaticByPlatformSettings": {
|
|
"bypassPlatformSafetyChecksOnUserSchedule": true
|
|
}
|
|
}
|
|
}
|
|
},
|
|
"windowsOSProfile": {
|
|
"windowsConfiguration": {
|
|
"patchSettings": {
|
|
"patchMode": "[variables('automaticByPlatformPatchMode')]",
|
|
"automaticByPlatformSettings": {
|
|
"bypassPlatformSafetyChecksOnUserSchedule": true
|
|
}
|
|
}
|
|
}
|
|
},
|
|
"patchModeShouldBeChanged": "[and(variables('isAzureMachine'), or(not(equals(parameters('patchMode'), variables('automaticByPlatformPatchMode'))), not(equals(parameters('bypassCheckValue'), bool('true')))))]",
|
|
"machineName": "[last(split(parameters('machineResourceId'), '/'))]",
|
|
"updatedOSProfile": "[if(equals(variables('osType'), 'windows'), variables('windowsOSProfile'), variables('linuxOSProfile'))]"
|
|
},
|
|
"resources": [
|
|
{
|
|
"condition": "[variables('patchModeShouldBeChanged')]",
|
|
"type": "Microsoft.Compute/virtualMachines",
|
|
"apiVersion": "2023-09-01",
|
|
"name": "[variables('machineName')]",
|
|
"location": "[parameters('location')]",
|
|
"properties": {
|
|
"osProfile": "[variables('updatedOSProfile')]"
|
|
}
|
|
},
|
|
{
|
|
"type": "Microsoft.Compute/virtualMachines/providers/configurationAssignments",
|
|
"condition": "[variables('isAzureMachine')]",
|
|
"apiVersion": "2021-09-01-preview",
|
|
"name": "[concat(variables('machineName'), '/Microsoft.Maintenance/', variables('configAssignmentName'))]",
|
|
"location": "[parameters('location')]",
|
|
"properties": {
|
|
"maintenanceConfigurationId": "[parameters('maintenanceConfigurationResourceId')]"
|
|
},
|
|
"dependsOn": [
|
|
"[concat('Microsoft.Compute/virtualMachines/', variables('machineName'))]"
|
|
]
|
|
},
|
|
{
|
|
"type": "Microsoft.HybridCompute/machines/providers/configurationAssignments",
|
|
"condition": "[variables('isArcMachine')]",
|
|
"apiVersion": "2021-09-01-preview",
|
|
"name": "[concat(variables('machineName'), '/Microsoft.Maintenance/', variables('configAssignmentName'))]",
|
|
"location": "[parameters('location')]",
|
|
"properties": {
|
|
"maintenanceConfigurationId": "[parameters('maintenanceConfigurationResourceId')]"
|
|
}
|
|
}
|
|
],
|
|
"outputs": {
|
|
"OSProfile": {
|
|
"type": "object",
|
|
"value": "[variables('updatedOSProfile')]"
|
|
},
|
|
"configurationAssignmentName": {
|
|
"type": "string",
|
|
"value": "[variables('configAssignmentName')]"
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
cases:
|
|
# =========================================================================
|
|
# DINE — Linux VM with Canonical Ubuntu, matching tags, no maintenance
|
|
# assignment found → DeployIfNotExists
|
|
# =========================================================================
|
|
|
|
- note: dine_linux_vm_canonical_ubuntu
|
|
resource:
|
|
type: "Microsoft.Compute/virtualMachines"
|
|
name: "vm-ubuntu-prod"
|
|
id: "/subscriptions/sub1/resourceGroups/rg-prod/providers/Microsoft.Compute/virtualMachines/vm-ubuntu-prod"
|
|
location: "eastus"
|
|
properties:
|
|
storageProfile:
|
|
imageReference:
|
|
publisher: "Canonical"
|
|
offer: "UbuntuServer"
|
|
sku: "18.04-LTS"
|
|
osDisk:
|
|
osType: "Linux"
|
|
osProfile:
|
|
computerName: "vm-ubuntu-prod"
|
|
linuxConfiguration:
|
|
patchSettings:
|
|
patchMode: "ImageDefault"
|
|
tags:
|
|
env: "prod"
|
|
parameters:
|
|
maintenanceConfigurationResourceId: "/subscriptions/sub1/resourceGroups/rg-maint/providers/Microsoft.Maintenance/maintenanceConfigurations/config1"
|
|
operatingSystemTypes:
|
|
- "Linux"
|
|
tagValues:
|
|
- key: "env"
|
|
value: "prod"
|
|
tagOperator: "Any"
|
|
resourceGroups: []
|
|
locations: []
|
|
request_context:
|
|
apiVersion: "2024-01-01"
|
|
host_await:
|
|
- key:
|
|
operation: "lookup_related_resources"
|
|
type: "Microsoft.Maintenance/configurationAssignments"
|
|
response: null
|
|
want_effect: "DeployIfNotExists"
|
|
|
|
# =========================================================================
|
|
# Pass — Windows VM but operatingSystemTypes only has Linux
|
|
# =========================================================================
|
|
|
|
- note: pass_wrong_os_type
|
|
resource:
|
|
type: "Microsoft.Compute/virtualMachines"
|
|
name: "vm-win-server"
|
|
id: "/subscriptions/sub1/resourceGroups/rg-prod/providers/Microsoft.Compute/virtualMachines/vm-win-server"
|
|
location: "eastus"
|
|
properties:
|
|
storageProfile:
|
|
imageReference:
|
|
publisher: "MicrosoftWindowsServer"
|
|
offer: "WindowsServer"
|
|
sku: "2019-Datacenter"
|
|
osDisk:
|
|
osType: "Windows"
|
|
osProfile:
|
|
computerName: "vm-win-server"
|
|
windowsConfiguration:
|
|
patchSettings:
|
|
patchMode: "AutomaticByOS"
|
|
parameters:
|
|
maintenanceConfigurationResourceId: "/subscriptions/sub1/resourceGroups/rg-maint/providers/Microsoft.Maintenance/maintenanceConfigurations/config1"
|
|
operatingSystemTypes:
|
|
- "Linux"
|
|
tagValues: []
|
|
tagOperator: "Any"
|
|
resourceGroups: []
|
|
locations: []
|
|
request_context:
|
|
apiVersion: "2024-01-01"
|
|
want_undefined: true
|
|
|
|
# =========================================================================
|
|
# Pass — Correct Linux VM but old API version (less than 2023-07-01)
|
|
# =========================================================================
|
|
|
|
- note: pass_old_api_version
|
|
resource:
|
|
id: "/subscriptions/sub1/resourceGroups/rg-prod/providers/Microsoft.Compute/virtualMachines/vm-ubuntu-old-api"
|
|
location: "eastus"
|
|
properties:
|
|
storageProfile:
|
|
imageReference:
|
|
publisher: "Canonical"
|
|
offer: "UbuntuServer"
|
|
sku: "18.04-LTS"
|
|
osDisk:
|
|
osType: "Linux"
|
|
osProfile:
|
|
computerName: "vm-ubuntu-old-api"
|
|
linuxConfiguration:
|
|
patchSettings:
|
|
patchMode: "ImageDefault"
|
|
tags:
|
|
env: "prod"
|
|
parameters:
|
|
maintenanceConfigurationResourceId: "/subscriptions/sub1/resourceGroups/rg-maint/providers/Microsoft.Maintenance/maintenanceConfigurations/config1"
|
|
operatingSystemTypes:
|
|
- "Linux"
|
|
tagValues:
|
|
- key: "env"
|
|
value: "prod"
|
|
tagOperator: "Any"
|
|
resourceGroups: []
|
|
locations: []
|
|
request_context:
|
|
apiVersion: "2022-01-01"
|
|
want_undefined: true
|
|
|
|
# =========================================================================
|
|
# Skip — Wrong resource type
|
|
# =========================================================================
|
|
|
|
- note: skip_wrong_type
|
|
resource:
|
|
type: "Microsoft.Storage/storageAccounts"
|
|
name: "storageacct1"
|
|
properties: {}
|
|
want_undefined: true
|
|
|
|
# =========================================================================
|
|
# DINE — HybridCompute/machines with matching osName → DeployIfNotExists
|
|
# =========================================================================
|
|
|
|
- note: dine_arc_machine
|
|
resource:
|
|
type: "Microsoft.HybridCompute/machines"
|
|
name: "arc-linux-server"
|
|
id: "/subscriptions/sub1/resourceGroups/rg-arc/providers/Microsoft.HybridCompute/machines/arc-linux-server"
|
|
location: "westus2"
|
|
properties:
|
|
osName: "linux"
|
|
tags: {}
|
|
parameters:
|
|
maintenanceConfigurationResourceId: "/subscriptions/sub1/resourceGroups/rg-maint/providers/Microsoft.Maintenance/maintenanceConfigurations/config1"
|
|
operatingSystemTypes:
|
|
- "Linux"
|
|
tagValues: []
|
|
tagOperator: "Any"
|
|
resourceGroups: []
|
|
locations: []
|
|
request_context:
|
|
apiVersion: "2024-01-01"
|
|
host_await:
|
|
- key:
|
|
operation: "lookup_related_resources"
|
|
type: "Microsoft.Maintenance/configurationAssignments"
|
|
response: null
|
|
want_effect: "DeployIfNotExists"
|
|
|
|
# =========================================================================
|
|
# Pass — VM with excluded publisher "microsoft-ads" and a gallery imageId
|
|
# → publisher exclusion gate (notEquals "microsoft-ads") fails
|
|
# =========================================================================
|
|
|
|
- note: pass_excluded_publisher
|
|
resource:
|
|
type: "Microsoft.Compute/virtualMachines"
|
|
name: "vm-ads"
|
|
id: "/subscriptions/sub1/resourceGroups/rg-prod/providers/Microsoft.Compute/virtualMachines/vm-ads"
|
|
location: "eastus"
|
|
properties:
|
|
storageProfile:
|
|
imageReference:
|
|
publisher: "microsoft-ads"
|
|
offer: "windows-data-science-vm"
|
|
sku: "windows2016"
|
|
id: "/subscriptions/sub1/resourceGroups/rg1/providers/Microsoft.Compute/galleries/myGallery/images/myImage"
|
|
osDisk:
|
|
osType: "Windows"
|
|
createOption: "FromImage"
|
|
osProfile:
|
|
computerName: "vm-ads"
|
|
windowsConfiguration: {}
|
|
parameters:
|
|
maintenanceConfigurationResourceId: "/subscriptions/sub1/resourceGroups/rg-maint/providers/Microsoft.Maintenance/maintenanceConfigurations/config1"
|
|
operatingSystemTypes:
|
|
- "Windows"
|
|
- "Linux"
|
|
tagValues: []
|
|
tagOperator: "Any"
|
|
resourceGroups: []
|
|
locations: []
|
|
request_context:
|
|
apiVersion: "2024-01-01"
|
|
want_undefined: true
|
|
|
|
# =========================================================================
|
|
# Pass — Linux VM with maintenance config already assigned
|
|
# → existenceCondition satisfied → compliant
|
|
# =========================================================================
|
|
|
|
- note: pass_maintenance_config_exists
|
|
resource:
|
|
type: "Microsoft.Compute/virtualMachines"
|
|
name: "vm-ubuntu-compliant"
|
|
id: "/subscriptions/sub1/resourceGroups/rg-prod/providers/Microsoft.Compute/virtualMachines/vm-ubuntu-compliant"
|
|
location: "eastus"
|
|
properties:
|
|
storageProfile:
|
|
imageReference:
|
|
publisher: "Canonical"
|
|
offer: "UbuntuServer"
|
|
sku: "18.04-LTS"
|
|
osDisk:
|
|
osType: "Linux"
|
|
osProfile:
|
|
computerName: "vm-ubuntu-compliant"
|
|
linuxConfiguration:
|
|
patchSettings:
|
|
patchMode: "ImageDefault"
|
|
parameters:
|
|
maintenanceConfigurationResourceId: "/subscriptions/sub1/resourceGroups/rg-maint/providers/Microsoft.Maintenance/maintenanceConfigurations/config1"
|
|
operatingSystemTypes:
|
|
- "Linux"
|
|
tagValues: []
|
|
tagOperator: "Any"
|
|
resourceGroups: []
|
|
locations: []
|
|
request_context:
|
|
apiVersion: "2024-01-01"
|
|
host_await:
|
|
- key:
|
|
operation: "lookup_related_resources"
|
|
type: "Microsoft.Maintenance/configurationAssignments"
|
|
response:
|
|
properties:
|
|
maintenanceConfigurationId: "/subscriptions/sub1/resourceGroups/rg-maint/providers/Microsoft.Maintenance/maintenanceConfigurations/config1"
|
|
want_undefined: true
|
|
|
|
# =========================================================================
|
|
# Pass — VM with unknown publisher, no gallery imageId
|
|
# → no publisher/image gate matches → if condition fails
|
|
# =========================================================================
|
|
|
|
- note: pass_unknown_publisher
|
|
resource:
|
|
type: "Microsoft.Compute/virtualMachines"
|
|
name: "vm-unknown"
|
|
id: "/subscriptions/sub1/resourceGroups/rg-prod/providers/Microsoft.Compute/virtualMachines/vm-unknown"
|
|
location: "eastus"
|
|
properties:
|
|
storageProfile:
|
|
imageReference:
|
|
publisher: "unknown-publisher"
|
|
offer: "unknown-offer"
|
|
sku: "unknown-sku"
|
|
osDisk:
|
|
osType: "Linux"
|
|
osProfile:
|
|
computerName: "vm-unknown"
|
|
linuxConfiguration: {}
|
|
parameters:
|
|
maintenanceConfigurationResourceId: "/subscriptions/sub1/resourceGroups/rg-maint/providers/Microsoft.Maintenance/maintenanceConfigurations/config1"
|
|
operatingSystemTypes:
|
|
- "Linux"
|
|
tagValues: []
|
|
tagOperator: "Any"
|
|
resourceGroups: []
|
|
locations: []
|
|
request_context:
|
|
apiVersion: "2024-01-01"
|
|
want_undefined: true
|