ansible.builtin.azure_rm_virtualnetwork (v2.6.20) — module

Manage Azure virtual networks.

| "added in version" 2.1 of ansible.builtin"

Authors: Chris Houseknecht (@chouseknecht), Matt Davis (@nitzmahone)

preview | supported by certified

Install Ansible via pip

Install with pip install ansible==2.6.20

Description

Create, update or delete a virtual networks. Allows setting and updating the available IPv4 address ranges and setting custom DNS servers. Use the azure_rm_subnet module to associate subnets with a virtual network.


Requirements

Usage examples

  • Success
    Steampunk Spotter scan finished with no errors, warnings or hints.
    - name: Create a virtual network
      azure_rm_virtualnetwork:
        name: foobar
        resource_group: Testing
        address_prefixes_cidr:
            - "10.1.0.0/16"
            - "172.100.0.0/16"
        dns_servers:
            - "127.0.0.1"
            - "127.0.0.2"
        tags:
            testing: testing
            delete: on-exit
  • Success
    Steampunk Spotter scan finished with no errors, warnings or hints.
    - name: Delete a virtual network
      azure_rm_virtualnetwork:
        name: foobar
        resource_group: Testing
        state: absent

Inputs

    
name:
    description:
    - name of the virtual network.
    required: true

tags:
    description:
    - Dictionary of string:string pairs to assign as metadata to the object.
    - Metadata tags on the object will be updated with any provided values.
    - To remove tags set append_tags option to false.
    type: dict

state:
    choices:
    - absent
    - present
    default: present
    description:
    - Assert the state of the virtual network. Use 'present' to create or update and 'absent'
      to delete.

secret:
    description:
    - Azure client secret. Use when authenticating with a Service Principal.
    type: str

tenant:
    description:
    - Azure tenant ID. Use when authenticating with a Service Principal.
    type: str

ad_user:
    description:
    - Active Directory username. Use when authenticating with an Active Directory user
      rather than service principal.
    type: str

profile:
    description:
    - Security profile found in ~/.azure/credentials file.
    type: str

location:
    description:
    - Valid azure location. Defaults to location of the resource group.

password:
    description:
    - Active Directory user password. Use when authenticating with an Active Directory
      user rather than service principal.
    type: str

client_id:
    description:
    - Azure client ID. Use when authenticating with a Service Principal.
    type: str

api_profile:
    default: latest
    description:
    - Selects an API profile to use when communicating with Azure services. Default value
      of C(latest) is appropriate for public clouds; future values will allow use with
      Azure Stack.
    type: str
    version_added: 0.0.1
    version_added_collection: azure.azcollection

append_tags:
    default: true
    description:
    - Use to control if tags field is canonical or just appends to existing tags.
    - When canonical, any tags not found in the tags parameter will be removed from the
      object's metadata.
    type: bool

auth_source:
    choices:
    - auto
    - cli
    - credential_file
    - env
    - msi
    description:
    - Controls the source of the credentials to use for authentication.
    - If not specified, ANSIBLE_AZURE_AUTH_SOURCE environment variable will be used and
      default to C(auto) if variable is not defined.
    - C(auto) will follow the default precedence of module parameters -> environment variables
      -> default profile in credential file C(~/.azure/credentials).
    - When set to C(cli), the credentials will be sources from the default Azure CLI profile.
    - Can also be set via the C(ANSIBLE_AZURE_AUTH_SOURCE) environment variable.
    - When set to C(msi), the host machine must be an azure resource with an enabled MSI
      extension. C(subscription_id) or the environment variable C(AZURE_SUBSCRIPTION_ID)
      can be used to identify the subscription ID if the resource is granted access to
      more than one subscription, otherwise the first subscription is chosen.
    - The C(msi) was added in Ansible 2.6.
    type: str
    version_added: 0.0.1
    version_added_collection: azure.azcollection

dns_servers:
    description:
    - Custom list of DNS servers. Maximum length of two. The first server in the list
      will be treated as the Primary server. This is an explicit list. Existing DNS servers
      will be replaced with the specified list. Use the purge_dns_servers option to remove
      all custom DNS servers and revert to default Azure servers.

resource_group:
    description:
    - name of resource group.
    required: true

subscription_id:
    description:
    - Your Azure subscription Id.
    type: str

cloud_environment:
    default: AzureCloud
    description:
    - For cloud environments other than the US public cloud, the environment name (as
      defined by Azure Python SDK, eg, C(AzureChinaCloud), C(AzureUSGovernment)), or a
      metadata discovery endpoint URL (required for Azure Stack). Can also be set via
      credential file profile or the C(AZURE_CLOUD_ENVIRONMENT) environment variable.
    type: str
    version_added: 0.0.1
    version_added_collection: azure.azcollection

purge_dns_servers:
    default: 'no'
    description:
    - Use with state present to remove existing DNS servers, reverting to default Azure
      servers. Mutually exclusive with dns_servers.
    type: bool

adfs_authority_url:
    description:
    - Azure AD authority url. Use when authenticating with Username/password, and has
      your own ADFS authority.
    type: str
    version_added: 0.0.1
    version_added_collection: azure.azcollection

cert_validation_mode:
    choices:
    - ignore
    - validate
    description:
    - Controls the certificate validation behavior for Azure endpoints. By default, all
      modules will validate the server certificate, but when an HTTPS proxy is in use,
      or against Azure Stack, it may be necessary to disable this behavior by passing
      C(ignore). Can also be set via credential file profile or the C(AZURE_CERT_VALIDATION)
      environment variable.
    type: str
    version_added: 0.0.1
    version_added_collection: azure.azcollection

address_prefixes_cidr:
    aliases:
    - address_prefixes
    description:
    - List of IPv4 address ranges where each is formatted using CIDR notation. Required
      when creating a new virtual network or using purge_address_prefixes.

purge_address_prefixes:
    aliases:
    - purge
    default: 'no'
    description:
    - Use with state present to remove any existing address_prefixes.
    type: bool

Outputs

state:
  description: Current state of the virtual network.
  returned: always
  sample:
    address_prefixes:
    - 10.1.0.0/16
    - 172.100.0.0/16
    dns_servers:
    - 127.0.0.1
    - 127.0.0.3
    etag: W/"0712e87c-f02f-4bb3-8b9e-2da0390a3886"
    id: /subscriptions/XXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXX/resourceGroups/Testing/providers/Microsoft.Network/virtualNetworks/my_test_network
    location: eastus
    name: my_test_network
    provisioning_state: Succeeded
    tags: null
    type: Microsoft.Network/virtualNetworks
  type: dict

See also