forked from Azure/azure-powershell
-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
CodeGen from PR 14786 in Azure/azure-rest-api-specs
Merge f9c3d3124063fcf839b677625122e3204d3736d9 into 63cc98ac8ef03abf7d2fa30133947e479741adb9
- Loading branch information
SDKAuto
committed
Jun 13, 2021
1 parent
83c3a31
commit e1c94e9
Showing
361 changed files
with
54,587 additions
and
186 deletions.
There are no files selected for viewing
190 changes: 95 additions & 95 deletions
190
src/Compute/Compute/Extension/AzureDiskEncryption/Scripts/Find_1passAdeVersion_VM.ps1
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,96 +1,96 @@ | ||
| <# | ||
| READ ME: | ||
| This script finds Windows and Linux Virtual Machines encrypted with single pass ADE in all resource groups present in a subscription. | ||
| INPUT: | ||
| Enter the subscription ID of the subscription. DO NOT remove hyphens. Example: 759532d8-9991-4d04-878f-xxxxxxxxxxxx | ||
| OUTPUT: | ||
| A .csv file with file name "<SubscriptionId>_AdeVMInfo.csv" is created in the same working directory. | ||
| Note: If the ADE_Version field = "Not Available" in the output, it means that the VM is encrypted but the extension version couldn't be found. Please check the version manually for these VMs. | ||
| #> | ||
|
|
||
| $ErrorActionPreference = "Continue" | ||
| $SubscriptionId = Read-Host("Enter Subscription ID") | ||
| $setSubscriptionContext = Set-AzContext -SubscriptionId $SubscriptionId | ||
|
|
||
| if($setSubscriptionContext -ne $null) | ||
| { | ||
| $getAllVMInSubscription = Get-AzVM | ||
| $outputContent = @() | ||
|
|
||
| foreach ($vmobject in $getAllVMInSubscription) | ||
| { | ||
| $vm_OS = "" | ||
| if ($vmobject.OSProfile.WindowsConfiguration -eq $null) | ||
| { | ||
| $vm_OS = "Linux" | ||
| } | ||
| else | ||
| { | ||
| $vm_OS = "Windows" | ||
| } | ||
|
|
||
| $vmInstanceView = Get-AzVM -ResourceGroupName $vmobject.ResourceGroupName -Name $vmobject.Name -Status | ||
|
|
||
| $isVMADEEncrypted = $false | ||
| $isStoppedVM = $false | ||
| $adeVersion = "" | ||
|
|
||
| #Find ADE extension version if ADE extension is installed | ||
| $vmExtensions = $vmInstanceView.Extensions | ||
| foreach ($extension in $vmExtensions) | ||
| { | ||
| if ($extension.Name -like "azurediskencryption*") | ||
| { | ||
| $adeVersion = $extension.TypeHandlerVersion | ||
| $isVMADEEncrypted = $true | ||
| break; | ||
| } | ||
| } | ||
|
|
||
| #Look for encryption settings on disks. This applies to VMs that are in deallocated state | ||
| #Extension version information is unavailable for stopped VMs | ||
| if ($isVMADEEncrypted -eq $false) | ||
| { | ||
| $disks = $vmInstanceView.Disks | ||
| foreach ($diskObject in $disks) | ||
| { | ||
| if ($diskObject.EncryptionSettings -ne $null) | ||
| { | ||
| $isStoppedEncryptedVM = $true | ||
| break; | ||
| } | ||
| } | ||
| } | ||
|
|
||
| if ($isVMADEEncrypted) | ||
| { | ||
| #Prepare output content for single pass VMs | ||
| if ((($vm_OS -eq "Windows") -and ($adeVersion -like "2.*")) -or (($vm_OS -eq "Linux") -and ($adeVersion -like "1.*"))) | ||
| { | ||
| $results = @{ | ||
| VMName = $vmobject.Name | ||
| ResourceGroupName = $vmobject.ResourceGroupName | ||
| VM_OS = $vm_OS | ||
| ADE_Version = $adeVersion | ||
| } | ||
| $outputContent += New-Object PSObject -Property $results | ||
| Write-Host "Added details for encrypted VM " $vmobject.Name | ||
| } | ||
| } | ||
| elseif ($isStoppedEncryptedVM) | ||
| { | ||
| $results = @{ | ||
| VMName = $vmobject.Name | ||
| ResourceGroupName = $vmobject.ResourceGroupName | ||
| VM_OS = $vm_OS | ||
| ADE_Version = "Not Available" | ||
| } | ||
| $outputContent += New-Object PSObject -Property $results | ||
| Write-Host "Added details for encrypted VM. ADE version = Not available " $vmobject.Name | ||
| } | ||
| } | ||
|
|
||
| #Write to output file | ||
| $filePath = ".\" + $SubscriptionId + "_AdeVMInfo.csv" | ||
| $outputContent | export-csv -Path $filePath -NoTypeInformation | ||
| <# | ||
| READ ME: | ||
| This script finds Windows and Linux Virtual Machines encrypted with single pass ADE in all resource groups present in a subscription. | ||
| INPUT: | ||
| Enter the subscription ID of the subscription. DO NOT remove hyphens. Example: 759532d8-9991-4d04-878f-xxxxxxxxxxxx | ||
| OUTPUT: | ||
| A .csv file with file name "<SubscriptionId>_AdeVMInfo.csv" is created in the same working directory. | ||
| Note: If the ADE_Version field = "Not Available" in the output, it means that the VM is encrypted but the extension version couldn't be found. Please check the version manually for these VMs. | ||
| #> | ||
|
|
||
| $ErrorActionPreference = "Continue" | ||
| $SubscriptionId = Read-Host("Enter Subscription ID") | ||
| $setSubscriptionContext = Set-AzContext -SubscriptionId $SubscriptionId | ||
|
|
||
| if($setSubscriptionContext -ne $null) | ||
| { | ||
| $getAllVMInSubscription = Get-AzVM | ||
| $outputContent = @() | ||
|
|
||
| foreach ($vmobject in $getAllVMInSubscription) | ||
| { | ||
| $vm_OS = "" | ||
| if ($vmobject.OSProfile.WindowsConfiguration -eq $null) | ||
| { | ||
| $vm_OS = "Linux" | ||
| } | ||
| else | ||
| { | ||
| $vm_OS = "Windows" | ||
| } | ||
|
|
||
| $vmInstanceView = Get-AzVM -ResourceGroupName $vmobject.ResourceGroupName -Name $vmobject.Name -Status | ||
|
|
||
| $isVMADEEncrypted = $false | ||
| $isStoppedVM = $false | ||
| $adeVersion = "" | ||
|
|
||
| #Find ADE extension version if ADE extension is installed | ||
| $vmExtensions = $vmInstanceView.Extensions | ||
| foreach ($extension in $vmExtensions) | ||
| { | ||
| if ($extension.Name -like "azurediskencryption*") | ||
| { | ||
| $adeVersion = $extension.TypeHandlerVersion | ||
| $isVMADEEncrypted = $true | ||
| break; | ||
| } | ||
| } | ||
|
|
||
| #Look for encryption settings on disks. This applies to VMs that are in deallocated state | ||
| #Extension version information is unavailable for stopped VMs | ||
| if ($isVMADEEncrypted -eq $false) | ||
| { | ||
| $disks = $vmInstanceView.Disks | ||
| foreach ($diskObject in $disks) | ||
| { | ||
| if ($diskObject.EncryptionSettings -ne $null) | ||
| { | ||
| $isStoppedEncryptedVM = $true | ||
| break; | ||
| } | ||
| } | ||
| } | ||
|
|
||
| if ($isVMADEEncrypted) | ||
| { | ||
| #Prepare output content for single pass VMs | ||
| if ((($vm_OS -eq "Windows") -and ($adeVersion -like "2.*")) -or (($vm_OS -eq "Linux") -and ($adeVersion -like "1.*"))) | ||
| { | ||
| $results = @{ | ||
| VMName = $vmobject.Name | ||
| ResourceGroupName = $vmobject.ResourceGroupName | ||
| VM_OS = $vm_OS | ||
| ADE_Version = $adeVersion | ||
| } | ||
| $outputContent += New-Object PSObject -Property $results | ||
| Write-Host "Added details for encrypted VM " $vmobject.Name | ||
| } | ||
| } | ||
| elseif ($isStoppedEncryptedVM) | ||
| { | ||
| $results = @{ | ||
| VMName = $vmobject.Name | ||
| ResourceGroupName = $vmobject.ResourceGroupName | ||
| VM_OS = $vm_OS | ||
| ADE_Version = "Not Available" | ||
| } | ||
| $outputContent += New-Object PSObject -Property $results | ||
| Write-Host "Added details for encrypted VM. ADE version = Not available " $vmobject.Name | ||
| } | ||
| } | ||
|
|
||
| #Write to output file | ||
| $filePath = ".\" + $SubscriptionId + "_AdeVMInfo.csv" | ||
| $outputContent | export-csv -Path $filePath -NoTypeInformation | ||
| } |
182 changes: 91 additions & 91 deletions
182
src/Compute/Compute/Extension/AzureDiskEncryption/Scripts/Find_1passAdeVersion_VMSS.ps1
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,92 +1,92 @@ | ||
| <# | ||
| READ ME: | ||
| This script finds Windows and Linux Virtual Machine Scale Sets encrypted with single pass ADE in all resource groups present in a subscription. | ||
| INPUT: | ||
| Enter the subscription ID of the subscription. DO NOT remove hyphens. Example: 759532d8-9991-4d04-878f-xxxxxxxxxxxx | ||
| OUTPUT: | ||
| A .csv file with file name "<SubscriptionId>__AdeVMSSInfo.csv" is created in the same working directory. | ||
| Note: If the ADE_Version field = "Not Available" in the output, it means that the VM is encrypted but the extension version couldn't be found. Please check the version manually for these VMSS. | ||
| #> | ||
|
|
||
| $ErrorActionPreference = "Continue" | ||
| $SubscriptionId = Read-Host("Enter Subscription ID") | ||
| $setSubscriptionContext = Set-AzContext -SubscriptionId $SubscriptionId | ||
|
|
||
| if($setSubscriptionContext -ne $null) | ||
| { | ||
| $getAllVMSSInSubscription = Get-AzVmss | ||
| $outputContent = @() | ||
|
|
||
| foreach ($vmssobject in $getAllVMSSInSubscription) | ||
| { | ||
| $vmssModel = Get-AzVmss -ResourceGroupName $vmssobject.ResourceGroupName -VMScaleSetName $vmssobject.Name | ||
| if ($vmssModel.VirtualMachineProfile.OsProfile.WindowsConfiguration -eq $null) | ||
| { | ||
| $vmss_OS = "Linux" | ||
| } | ||
| else | ||
| { | ||
| $vmss_OS = "Windows" | ||
| } | ||
|
|
||
| $isVMSSADEEncrypted = $false | ||
| $adeVersion = "" | ||
|
|
||
| #find if VMSS has ADE extension installed | ||
| $vmssExtensions = $vmssObject.VirtualMachineProfile.ExtensionProfile.Extensions | ||
| foreach ($extension in $vmssExtensions) | ||
| { | ||
| if ($extension.Type -like "azurediskencryption*") | ||
| { | ||
| $isVMSSADEEncrypted = $true | ||
| break; | ||
| } | ||
| } | ||
|
|
||
| #find ADE extension version if VMSS has ADE installed. | ||
| if ($isVMSSADEEncrypted) | ||
| { | ||
| $vmssInstanceView = Get-AzVmssVM -ResourceGroupName $vmssobject.ResourceGroupName -VMScaleSetName $vmssobject.Name -InstanceView | ||
| $vmssInstanceId = $vmssInstanceView[0].InstanceId | ||
| $vmssVMInstanceView = Get-AzVmssVM -ResourceGroupName $vmssobject.ResourceGroupName -VMScaleSetName $vmssobject.Name -InstanceView -InstanceId $vmssInstanceId | ||
|
|
||
| $vmssExtensions = $vmssVMInstanceView.Extensions | ||
| foreach ($extension in $vmssExtensions) | ||
| { | ||
| if ($extension.Type -like "Microsoft.Azure.Security.Azurediskencryption*") | ||
| { | ||
| $adeVersion = $extension.TypeHandlerVersion | ||
| break; | ||
| } | ||
| } | ||
|
|
||
| #Prepare output content for single pass VMSS | ||
| if ((($vmss_OS -eq "Windows") -and ($adeVersion -like "2.*")) -or (($vmss_OS -eq "Linux") -and ($adeVersion -like "1.*"))) | ||
| { | ||
| $results = @{ | ||
| VMSSName = $vmssobject.Name | ||
| ResourceGroupName = $vmssobject.ResourceGroupName | ||
| VMSS_OS = $vmss_OS | ||
| ADE_Version = $adeVersion | ||
| } | ||
| $outputContent += New-Object PSObject -Property $results | ||
| Write-Host "Added details for encrypted VMSS" $vmssobject.Name | ||
| } | ||
| elseif ([string]::IsNullOrEmpty($adeVersion)) | ||
| { | ||
| $results = @{ | ||
| VMSSName = $vmssobject.Name | ||
| ResourceGroupName = $vmssobject.ResourceGroupName | ||
| VMSS_OS = $vmss_OS | ||
| ADE_Version = "Not Available" | ||
| } | ||
| $outputContent += New-Object PSObject -Property $results | ||
| Write-Host "Added details for encrypted VMSS. ADE version = Not available" $vmssobject.Name | ||
| } | ||
| } | ||
| } | ||
|
|
||
| #Write to output file | ||
| $filePath = ".\" + $SubscriptionId + "_AdeVMSSInfo.csv" | ||
| $outputContent | export-csv -Path $filePath -NoTypeInformation | ||
| <# | ||
| READ ME: | ||
| This script finds Windows and Linux Virtual Machine Scale Sets encrypted with single pass ADE in all resource groups present in a subscription. | ||
| INPUT: | ||
| Enter the subscription ID of the subscription. DO NOT remove hyphens. Example: 759532d8-9991-4d04-878f-xxxxxxxxxxxx | ||
| OUTPUT: | ||
| A .csv file with file name "<SubscriptionId>__AdeVMSSInfo.csv" is created in the same working directory. | ||
| Note: If the ADE_Version field = "Not Available" in the output, it means that the VM is encrypted but the extension version couldn't be found. Please check the version manually for these VMSS. | ||
| #> | ||
|
|
||
| $ErrorActionPreference = "Continue" | ||
| $SubscriptionId = Read-Host("Enter Subscription ID") | ||
| $setSubscriptionContext = Set-AzContext -SubscriptionId $SubscriptionId | ||
|
|
||
| if($setSubscriptionContext -ne $null) | ||
| { | ||
| $getAllVMSSInSubscription = Get-AzVmss | ||
| $outputContent = @() | ||
|
|
||
| foreach ($vmssobject in $getAllVMSSInSubscription) | ||
| { | ||
| $vmssModel = Get-AzVmss -ResourceGroupName $vmssobject.ResourceGroupName -VMScaleSetName $vmssobject.Name | ||
| if ($vmssModel.VirtualMachineProfile.OsProfile.WindowsConfiguration -eq $null) | ||
| { | ||
| $vmss_OS = "Linux" | ||
| } | ||
| else | ||
| { | ||
| $vmss_OS = "Windows" | ||
| } | ||
|
|
||
| $isVMSSADEEncrypted = $false | ||
| $adeVersion = "" | ||
|
|
||
| #find if VMSS has ADE extension installed | ||
| $vmssExtensions = $vmssObject.VirtualMachineProfile.ExtensionProfile.Extensions | ||
| foreach ($extension in $vmssExtensions) | ||
| { | ||
| if ($extension.Type -like "azurediskencryption*") | ||
| { | ||
| $isVMSSADEEncrypted = $true | ||
| break; | ||
| } | ||
| } | ||
|
|
||
| #find ADE extension version if VMSS has ADE installed. | ||
| if ($isVMSSADEEncrypted) | ||
| { | ||
| $vmssInstanceView = Get-AzVmssVM -ResourceGroupName $vmssobject.ResourceGroupName -VMScaleSetName $vmssobject.Name -InstanceView | ||
| $vmssInstanceId = $vmssInstanceView[0].InstanceId | ||
| $vmssVMInstanceView = Get-AzVmssVM -ResourceGroupName $vmssobject.ResourceGroupName -VMScaleSetName $vmssobject.Name -InstanceView -InstanceId $vmssInstanceId | ||
|
|
||
| $vmssExtensions = $vmssVMInstanceView.Extensions | ||
| foreach ($extension in $vmssExtensions) | ||
| { | ||
| if ($extension.Type -like "Microsoft.Azure.Security.Azurediskencryption*") | ||
| { | ||
| $adeVersion = $extension.TypeHandlerVersion | ||
| break; | ||
| } | ||
| } | ||
|
|
||
| #Prepare output content for single pass VMSS | ||
| if ((($vmss_OS -eq "Windows") -and ($adeVersion -like "2.*")) -or (($vmss_OS -eq "Linux") -and ($adeVersion -like "1.*"))) | ||
| { | ||
| $results = @{ | ||
| VMSSName = $vmssobject.Name | ||
| ResourceGroupName = $vmssobject.ResourceGroupName | ||
| VMSS_OS = $vmss_OS | ||
| ADE_Version = $adeVersion | ||
| } | ||
| $outputContent += New-Object PSObject -Property $results | ||
| Write-Host "Added details for encrypted VMSS" $vmssobject.Name | ||
| } | ||
| elseif ([string]::IsNullOrEmpty($adeVersion)) | ||
| { | ||
| $results = @{ | ||
| VMSSName = $vmssobject.Name | ||
| ResourceGroupName = $vmssobject.ResourceGroupName | ||
| VMSS_OS = $vmss_OS | ||
| ADE_Version = "Not Available" | ||
| } | ||
| $outputContent += New-Object PSObject -Property $results | ||
| Write-Host "Added details for encrypted VMSS. ADE version = Not available" $vmssobject.Name | ||
| } | ||
| } | ||
| } | ||
|
|
||
| #Write to output file | ||
| $filePath = ".\" + $SubscriptionId + "_AdeVMSSInfo.csv" | ||
| $outputContent | export-csv -Path $filePath -NoTypeInformation | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1 @@ | ||
| * text=auto |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,5 @@ | ||
| bin | ||
| obj | ||
| .vs | ||
| tools | ||
| test/*-TestResults.xml |
Oops, something went wrong.