AKS-AzureCNI-AzureNP.json

{
    "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentParameters.json#",
    "contentVersion": "1.0.0.0",
    "parameters": {
      "serviceHealthAlerts": {
        "value": {
          "resourceGroupName": "pubsec-service-health",
          "incidentTypes": [
            "Incident",
            "Security"
          ],
          "regions": [
            "Global",
            "Canada East",
            "Canada Central"
          ],
          "receivers": {
            "app": [
              "alzcanadapubsec@microsoft.com"
            ],
            "email": [
              "alzcanadapubsec@microsoft.com"
            ],
            "sms": [
              {
                "countryCode": "1",
                "phoneNumber": "5555555555"
              }
            ],
            "voice": [
              {
                "countryCode": "1",
                "phoneNumber": "5555555555"
              }
            ]
          },
          "actionGroupName": "Sub3 ALZ action group",
          "actionGroupShortName": "sub3-alert",
          "alertRuleName": "Sub3 ALZ alert rule",
          "alertRuleDescription": "Alert rule for Azure Landing Zone"
        }
      },
      "securityCenter": {
        "value": {
          "email": "alzcanadapubsec@microsoft.com",
          "phone": "5555555555"
        }
      },
      "subscriptionRoleAssignments": {
        "value": [
          {
            "comments": "Built-in Role: Contributor",
            "roleDefinitionId": "b24988ac-6180-42a0-ab88-20f7382dd24c",
            "securityGroupObjectIds": [
              "38f33f7e-a471-4630-8ce9-c6653495a2ee"
            ]
          },
          {
            "comments": "Custom Role: Landing Zone Application Owner",
            "roleDefinitionId": "b4c87314-c1a1-5320-9c43-779585186bcc",
            "securityGroupObjectIds": [
              "38f33f7e-a471-4630-8ce9-c6653495a2ee"
            ]
          }
        ]
      },
      "subscriptionBudget": {
        "value": {
          "createBudget": true,
          "name": "MonthlySubscriptionBudget",
          "amount": 1000,
          "timeGrain": "Monthly",
          "contactEmails": [
            "alzcanadapubsec@microsoft.com"
          ]
        }
      },
      "subscriptionTags": {
        "value": {
          "ISSO": "isso-tag"
        }
      },
      "resourceTags": {
        "value": {
          "ClientOrganization": "client-organization-tag",
          "CostCenter": "cost-center-tag",
          "DataSensitivity": "data-sensitivity-tag",
          "ProjectContact": "project-contact-tag",
          "ProjectName": "project-name-tag",
          "TechnicalContact": "technical-contact-tag"
        }
      },
      "resourceGroups": {
        "value": {
          "automation": "azmlcmk102021W1Automation",
          "compute": "azmlcmk102021W1Compute",
          "monitor": "azmlcmk102021W1Monitor",
          "networking": "azmlcmk102021W1Network",
          "networkWatcher": "NetworkWatcherRG",
          "security": "azmlcmk102021W1Security",
          "storage": "azmlcmk102021W1Storage"
        }
      },
      "useCMK": {
        "value": true
      },
      "automation": {
        "value": {
          "name": "azmlcmk102021W1automation"
        }
      },
      "keyVault": {
        "value": {
          "secretExpiryInDays": 3650
        }
      },
      "aks": {
        "value": {
          "version": "1.21.2",
          "networkPlugin": "azure" ,
          "networkPolicy": "azure",
          "podCidr": "",
          "serviceCidr": "20.0.0.0/16" ,
          "dnsServiceIP": "20.0.0.10",
          "dockerBridgeCidr": "30.0.0.1/16"
        }
      },
      "sqldb": {
        "value": {
          "enabled": true,
          "sqlAuthenticationUsername": "azadmin",
          "aadAuthenticationOnly": false,
          "aadLoginName": "DBA Group",
          "aadLoginObjectID": "4e4ea47c-ee21-4add-ad2f-a75d0d8014e0",
          "aadLoginType": "Group"
        }
      },
      "sqlmi": {
        "value": {
          "enabled": true,
          "username": "azadmin"
        }
      },
      "aml": {
        "value": {
          "enableHbiWorkspace": false
        }
      },
      "hubNetwork": {
        "value": {
          "virtualNetworkId": "/subscriptions/ed7f4eed-9010-4227-b115-2a5e37728f27/resourceGroups/pubsec-hub-networking-rg/providers/Microsoft.Network/virtualNetworks/hub-vnet",
          "rfc1918IPRange": "10.18.0.0/22",
          "rfc6598IPRange": "100.60.0.0/16",
          "egressVirtualApplianceIp": "10.18.1.4",
          "privateDnsManagedByHub": true,
          "privateDnsManagedByHubSubscriptionId": "ed7f4eed-9010-4227-b115-2a5e37728f27",
          "privateDnsManagedByHubResourceGroupName": "pubsec-dns-rg"
        }
      },
      "network": {
        "value": {
          "peerToHubVirtualNetwork": true,
          "useRemoteGateway": false,
          "name": "azmlcmk102021W1vnet",
          "dnsServers": [
            "10.18.1.4"
          ],
          "addressPrefixes": [
            "10.1.0.0/16"
          ],
          "subnets": {
            "oz": {
              "comments": "Foundational Elements Zone (OZ)",
              "name": "oz",
              "addressPrefix": "10.1.1.0/25"
            },
            "paz": {
              "comments": "Presentation Zone (PAZ)",
              "name": "paz",
              "addressPrefix": "10.1.2.0/25"
            },
            "rz": {
              "comments": "Application Zone (RZ)",
              "name": "rz",
              "addressPrefix": "10.1.3.0/25"
            },
            "hrz": {
              "comments": "Data Zone (HRZ)",
              "name": "hrz",
              "addressPrefix": "10.1.4.0/25"
            },
            "sqlmi": {
              "comments": "SQL Managed Instances Delegated Subnet",
              "name": "sqlmi",
              "addressPrefix": "10.1.5.0/25"
            },
            "databricksPublic": {
              "comments": "Databricks Public Delegated Subnet",
              "name": "databrickspublic",
              "addressPrefix": "10.1.6.0/25"
            },
            "databricksPrivate": {
              "comments": "Databricks Private Delegated Subnet",
              "name": "databricksprivate",
              "addressPrefix": "10.1.7.0/25"
            },
            "privateEndpoints": {
              "comments": "Private Endpoints Subnet",
              "name": "privateendpoints",
              "addressPrefix": "10.1.8.0/25"
            },
            "aks": {
              "comments": "AKS Subnet",
              "name": "aks",
              "addressPrefix": "10.1.9.0/25"
            }
          }
        }
      }
    }
  }