CicleCIとTerraformを使ってAzureのセッションホストのデプロイを自動化する

version: 2.1

jobs:
  execute_terraform:
    description: Execute Terraform
    parameters:
      mode:
        type: string
        default: ""
    docker:
      - image: "terraformコマンドが使用できるイメージを指定する"
        auth:
          username: $FOO 
          password: $BAR 
    steps:
      - checkout
      - run:
          name: set bash_env for terraform
          command: |
            echo 'export ARM_CLIENT_ID=${FOO_SP_CLIENT_ID}' >> $BASH_ENV
            echo 'export ARM_CLIENT_SECRET=${FOO_SP_SECRET}' >> $BASH_ENV
            echo 'export ARM_SUBSCRIPTION_ID=${FOO_SUBSCRIPTION}' >> $BASH_ENV
            echo 'export ARM_TENANT_ID=${FOO_TENANT}' >> $BASH_ENV
      - run:
          name: terraform init
          command: |
            terraform init -reconfigure \
              -backend-config="resource_group_name=foo_rg" \
              -backend-config="storage_account_name=bar_storage" \
              -backend-config="container_name=foo_container" \
              -backend-config="key=bar_key"
      - when:
          condition:
            equal: [ '<< parameters.mode >>', plan ]
          steps:
            - run:
                name: Terraform Plan
                command: |
                  terraform plan --parallelism=300
      - when:
          condition:
            equal: [ '<< parameters.mode >>', apply ]
          steps:
            - run:
                name: Terraform Apply
                command: |
                  terraform apply -auto-approve --parallelism=300 

workflows:
  version: 2
  workflow_deploy_sessionhosts:
    jobs:
      - execute_terraform:
          name: terraform_plan
          mode: "plan"
          filters:
            branches:
              only:
                - /feature.*/ 
      - approveApply: # terraform planの結果を確認する
          type: approval
          requires:
            - terraform_plan
          filters:
            branches:
              only:
                - /feature.*/ 
      - execute_terraform:
          name: terraform_apply
          mode: "apply"
          requires:
            - approveApply
          filters:
            branches:
              only:
                - /feature.*/ 

resource "azurerm_windows_virtual_machine" "avd_vm" {
  count                 = var.number_of_session_host_for_host_pool
  name                  = "${var.vm_name_prefix}-${count.index + 1 + var.avd_index}"
  resource_group_name   = azurerm_resource_group.rg.name
  location              = azurerm_resource_group.rg.location
  size                  = var.vm_size
  network_interface_ids = ["${azurerm_network_interface.avd_vm_nic.*.id[count.index]}"]
  provision_vm_agent    = true
  admin_username        = var.local_admin_username
  admin_password        = var.local_admin_password
  # availability_set_id   = data.azurerm_availability_set.availability_set.id

  os_disk {
    name                 = "${lower(var.vm_name_prefix)}-${count.index + 1 + var.avd_index}"
    caching              = "ReadWrite"
    storage_account_type = var.vm_disk_type
  }
  # source_image_id = var.vm_custom_image_source_id
  source_image_reference {
    publisher = "MicrosoftWindowsDesktop"
    offer     = "Windows-10"
    sku       = "21h1-ent"
    version   = "latest"
  }

  depends_on = [
    azurerm_resource_group.rg,
    azurerm_network_interface.avd_vm_nic
  ]
}

.
├── .circleci
│   └── config.yml
├── main.tf
├── providers.tf
├── terraform.tfvars
└── variables.tf

terraform apply -auto-approve --parallelism=10 
terraform apply -auto-approve --parallelism=300
terraform destry -auto-approve --parallelism=300