create_vmss.sh

#!/bin/bash

set -eu -o pipefail

PROGNAME="$(basename "$0")"

# Parse arguments
ARGS=$(getopt \
    --options s:l:g:v:s:n:r:m:b:d \
    --longoptions subscription:,location:,rg-vnet:,vnet-name:,subnet-name:,subnet:,rg-vm:,vm-name:,lb-name:,dns-name: \
    -n "${PROGNAME}" -- "$@")
eval set -- "${ARGS}"
unset ARGS

AZ_SUBSCRIPTION_ID=""
AZ_LOCATION=""
AZ_VNET_RG=""
AZ_VNET=""
AZ_VNET_SUBNET_NAME=""
AZ_VNET_SUBNET=""
AZ_VM_RG=""
AZ_VM=""
AZ_LB=""
AZ_LB_DNS=""

while true; do
  case "$1" in
    '-s'|'--subscription')
        AZ_SUBSCRIPTION_ID="$2"
        shift 2
        continue
    ;;
    '-l'|'--location')
        AZ_LOCATION="$2"
        shift 2
        continue
    ;;
    '-g'|'--rg-vnet')
        AZ_VNET_RG="$2"
        shift 2
        continue
    ;;
    '-v'|'--vnet-name')
        AZ_VNET="$2"
        shift 2
        continue
    ;;
    '-s'|'--subnet-name')
        AZ_VNET_SUBNET_NAME="$2"
        shift 2
        continue
    ;;
    '-n'|'--subnet')
        AZ_VNET_SUBNET="$2"
        shift 2
        continue
    ;;
    '-r'|'--rg-vm')
        AZ_VM_RG="$2"
        shift 2
        continue
    ;;
    '-m'|'--vm-name')
        AZ_VM="$2"
        shift 2
        continue
    ;;
    '-b'|'--lb-name')
        AZ_LB="$2"
        shift 2
        continue
    ;;
    '-d'|'--dns-name')
        AZ_LB_DNS="$2"
        shift 2
        continue
    ;;
    '--')
        shift
        break
    ;;
    *)
        usage
        exit 1
    ;;
  esac
done

# Show usage
usage() {
    printf "usage: %s --subscription=<name> --location=<name> --rg-vnet=<name> --vnet-name=<name> --subnet-name=<name> --subnet=<name> --rg-vm=<name> --vm-name=<name> --lb-name=<name> --dns-name=<name>\\n" "${PROGNAME}"
}

# Pre-checks
if [[ -z $AZ_SUBSCRIPTION_ID ]]; then
    echo "Error: --subscription is required !"
    usage
    exit 1
fi

if [[ -z $AZ_LOCATION ]]; then
    echo "Error: --location is required !"
    usage
    exit 1
fi

if [[ -z $AZ_VNET_RG ]]; then
    echo "Error: --rg-vnet is required !"
    usage
    exit 1
fi

if [[ -z $AZ_VNET ]]; then
    echo "Error: --vnet-name is required !"
    usage
    exit 1
fi

if [[ -z $AZ_VNET_SUBNET_NAME ]]; then
    echo "Error: --subnet-name is required !"
    usage
    exit 1
fi

if [[ -z $AZ_VNET_SUBNET ]]; then
    echo "Error: --subnet is required !"
    usage
    exit 1
fi

if [[ -z $AZ_VM_RG ]]; then
    echo "Error: --rg-vm is required !"
    usage
    exit 1
fi

if [[ -z $AZ_VM ]]; then
    echo "Error: --vm-name is required !"
    usage
    exit 1
fi

if [[ -z $AZ_LB ]]; then
    echo "Error: --lb-name is required !"
    usage
    exit 1
fi

if [[ -z $AZ_LB_DNS ]]; then
    echo "Error: --dns-name is required !"
    usage
    exit 1
fi

printf "Switch to ${AZ_SUBSCRIPTION_ID} subscription...\\n"
az account set --subscription "${AZ_SUBSCRIPTION_ID}" --output none

if ! az network vnet show --resource-group ${AZ_VNET_RG} --name ${AZ_VNET} --output none; then
    printf "Create ${AZ_VNET_RG} resource group...\\n"
    az group create \
        --location "${AZ_LOCATION}" \
        --name "${AZ_VNET_RG}"

    printf "Create a new 10.1.0.0/16 VNET named ${AZ_VNET}...\\n"
    az network vnet create \
        --resource-group "${AZ_VNET_RG}" \
        --name "${AZ_VNET}" \
        --address-prefix "10.1.0.0/16"
fi

printf "Create a new ${AZ_VNET_SUBNET} subnet named ${AZ_VNET_SUBNET_NAME}...\\n"
az network vnet subnet create \
    --resource-group "${AZ_VNET_RG}" \
    --vnet-name "${AZ_VNET}" \
    --name "${AZ_VNET_SUBNET_NAME}" \
    --address-prefix "${AZ_VNET_SUBNET}" \
    --output none

printf "Create ${AZ_VM_RG} resource group...\\n"
az group create \
    --location "${AZ_LOCATION}" \
    --name "${AZ_VM_RG}" \
    --output none

printf "Create ${AZ_LB_DNS}.${AZ_LOCATION}.cloudapp.azure.com basic public IP address...\\n"
az network public-ip create \
    --name "${AZ_LB}-public-ip" \
    --resource-group "${AZ_VM_RG}" \
    --allocation-method "dynamic" \
    --sku "Basic" \
    --version "IPv4" \
    --dns-name "${AZ_LB_DNS}" \
    --output none

printf "Create ${AZ_LB} basic load balancer...\\n"
az network lb create \
    --name "${AZ_LB}" \
    --resource-group "${AZ_VM_RG}" \
    --public-ip-address "${AZ_LB}-public-ip" \
    --frontend-ip-name "${AZ_LB}-public-ip" \
    --backend-pool-name "${AZ_VM}-backendpool" \
    --sku "Basic" \
    --output none

printf "Create NAT pool rules for RDP connection...\\n"
az network lb inbound-nat-pool create \
    --name "${AZ_VM}-natpool" \
    --resource-group "${AZ_VM_RG}" \
    --lb-name "${AZ_LB}" \
    --frontend-port-range-start "50000" \
    --frontend-port-range-end "50001" \
    --backend-port "3389" \
    --frontend-ip-name "${AZ_LB}-public-ip" \
    --protocol "tcp" \
    --output none

printf "Create NSG ${AZ_VM}-nsg...\\n"
az network nsg create \
    --name "${AZ_VM}-nsg" \
    --resource-group "${AZ_VM_RG}" \
    --output none

printf "Create NSG rule to allow RDP...\\n"
az network nsg rule create \
    --name "Allow_RDP" \
    --nsg-name "${AZ_VM}-nsg" \
    --resource-group "${AZ_VM_RG}" \
    --priority "1000" \
    --direction "Inbound" \
    --source-address-prefixes "*" \
    --source-port-ranges "*" \
    --destination-address-prefixes "VirtualNetwork" \
    --destination-port-ranges "3389" \
    --access "Allow" \
    --protocol "tcp" \
    --description "Allow RDP traffic from Any" \
    --output none

printf "Create ${AZ_VM} Azure Virtual Machine Scale Set...\\n"
# az vm image list --publisher MicrosoftWindowsDesktop --all -otable
az vmss create \
    --name "${AZ_VM}" \
    --resource-group "${AZ_VM_RG}" \
    --image "MicrosoftWindowsDesktop:Windows-10:19h2-pro:latest" \
    --vm-sku "Standard_NV6_Promo" \
    --storage-sku "StandardHDD_LRS" \
    --instance-count "1" \
    --subnet "/subscriptions/${AZ_SUBSCRIPTION_ID}/resourceGroups/${AZ_VNET_RG}/providers/Microsoft.Network/virtualNetworks/${AZ_VNET}/subnets/${AZ_VNET_SUBNET_NAME}" \
    --nsg "${AZ_VM}-nsg" \
    --public-ip-address "" \
    --load-balancer "${AZ_LB}" \
    --lb-nat-pool-name "${AZ_VM}-natpool" \
    --output none
printf "Done.\\n\\n"
printf "Please use Microsoft Remote Desktop app connect to ${AZ_LB_DNS}.${AZ_LOCATION}.cloudapp.azure.com:5000 or :5001.\\n"