update

2026-04-15 15:45:50 -05:00
commit 1d304511b8
613 changed files with 140998 additions and 0 deletions
@@ -0,0 +1,146 @@
+<# Scheduled Task metadata
+General
+    GetAzureVMGuestIPsForPA
+    run as ndgov\svcitdiaasauto
+        run whether user is logged on or not
+ Triggers
+    Daily, 2pm - repeat every 1 hour indefinitely
+Actions
+    "C:\Program Files\PowerShell\7\pwsh.exe" -noninteractive -file "F:\GetAzureVMGuestIPsForPA\GetAzureVMGuestIPsForPA.ps1"
+Settings
+    allow task to be run on demand
+    stop the task if it runs longer than 1 hour -eq $true
+    if the running task does not end when requested, force it to stop
+#>
+
+
+
+$TimeStamp = Get-Date -UFormat "%Y%m%d%H%M%S"
+Start-Transcript F:\GetAzureVMGuestIPsForPA\Logs\GetAzureVMGuestIPsForPA-$Timestamp.log
+$VerbosePerfrence = "Continue"
+
+#[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12
+$OutputPath = "C:\inetpub\wwwroot"
+
+$WindowsIPs = ""
+$LinuxIPs = ""
+$OutFileWin = $OutputPath + "\AzureWin.txt"
+$OutFileLin = $OutputPath + "\AzureLin.txt"
+Remove-Item $OutFileWin
+Remove-Item $OutFileLin
+
+$WindowsIpArray = [string]@()
+$LinuxIpArray = [string]@()
+
+# replace with PowerShell.SecretManagement
+#$username="svcitdazurescript@nd.gov"
+#$usernameg="svcitdazurescript@ndstate.onmicrosoft.com"
+#Read-Host -AsSecureString | ConvertFrom-SecureString | Out-File C:\Users\svcitdazurescript\AppData\Local\Microsoft\sac.bat
+#$password=Get-Content C:\Users\svcitdazurescript\AppData\Local\Microsoft\sac.bat | ConvertTo-SecureString
+#$passwordg=Get-Content C:\Users\svcitdazurescript\AppData\Local\Microsoft\sacg.bat | ConvertTo-SecureString
+#$AdminCred=New-Object -TypeName System.Management.Automation.PSCredential -ArgumentList $username,$password
+#$AdminCredg=New-Object -TypeName System.Management.Automation.PSCredential -ArgumentList $usernameg,$passwordg
+
+# Prepare credentials
+$svcitdazurescript = Get-Secret -Name svcitdazurescript
+$MacCred = New-Object System.Management.Automation.PSCredential("svcitdazurescript@nd.gov", $svcitdazurescript.Password)
+#  no VMs or PAs in AzureGov yet (2023/09/26)     $MagCred = Get-Secret -Name svcitdazurescriptgov
+
+# Azure Commercial
+$AzAccount = Connect-AzAccount -Credential $MacCred -Environment AzureCloud -Verbose
+$Subscriptions = Get-AzSubscription | Where-Object { $_.Name -ne "sandbox" -and $_.Name -notlike "Visual Studio*" -and $_.Name -notlike "Azure subscription*" -and $_.Name -notlike "Access to Azure Active Directory*"}
+foreach ($subscription in $subscriptions) {
+    Set-AzContext -Subscription $subscription
+    $WindowsVMs = Get-AzVM | Where-Object { $_.StorageProfile.osdisk.ostype -match "Windows" }
+    $LinuxVMs = Get-AzVM | Where-Object { $_.StorageProfile.osdisk.ostype -match "Linux" -and $_.StorageProfile.ImageReference.Publisher -ne "infoblox" -and $_.StorageProfile.ImageReference.Publisher -ne "paloaltonetworks" -and $_.StorageProfile.ImageReference.Publisher -ne "juniper-networks" }
+    $nics = Get-AzNetworkInterface | Where-Object { $_.VirtualMachine -NE $null }
+
+    foreach ($vm in $WindowsVMs) {
+        $vmnicinterfaces = $vm.Networkprofile.NetworkInterfaces.id
+        foreach ($vmnicinterface in $vmnicinterfaces) {
+            $nic = $nics | Where-Object { $_.Id -eq $vmnicinterface }
+            $privateip = $nic.IpConfigurations | select PrivateIPAddress
+        
+            If ($privateip.count -gt 1) {
+                foreach ($private in $privateip) {
+                    Write-Warning -Message ($VM.Name + "zzzzz")
+                    $WindowsIPs += $private.privateIPAddress + "`n"
+                }
+            }
+            elseIf ($privateip.privateIPAddress -ne $null) {
+                Write-Warning -Message ($VM.Name + "xxxxx")
+                $WindowsIPs += $privateip.privateIPAddress + "`n"
+            }
+        }
+    }
+
+    foreach ($vm in $LinuxVMs) {
+        $vmnicinterfaces = $vm.Networkprofile.NetworkInterfaces.id
+        foreach ($vmnicinterface in $vmnicinterfaces) {
+            $nic = $nics | Where-Object { $_.Id -eq $vmnicinterface }
+            $privateip = $nic.IpConfigurations | select PrivateIPAddress
+    
+            If ($privateip.count -gt 1) {
+                foreach ($private in $privateip) {
+                    $LinuxIPs += $private.privateIPAddress + "`n"
+                }
+            }
+            elseif ($privateip.privateIPAddress -ne $null) {
+                $LinuxIps += $privateip.privateIPAddress + "`n"
+            }
+        }
+    }
+}
+
+
+#Azure Gov
+<#  no VMs or PAs in AzureGov yet (2023/09/26)
+$AzAccount = Connect-AzAccount -Credential $MagCred -Environment AzureUSGovernment -Verbose
+
+$Subscriptions = Get-AzureRMSubscription | Where-Object { $_.Name -ne "sandbox" }
+foreach ($subscription in $subscriptions) {
+    Set-AzContext -Subscription $subscription
+    $WindowsVMs = Get-AzVM | Where-Object { $_.StorageProfile.osdisk.ostype -match "Windows" }
+    $LinuxVMs = Get-AzVM | Where-Object { $_.StorageProfile.osdisk.ostype -match "Linux" -and $_.StorageProfile.ImageReference.Publisher -ne "infoblox" -and $_.StorageProfile.ImageReference.Publisher -ne "paloaltonetworks" -and $_.StorageProfile.ImageReference.Publisher -ne "juniper-networks" }
+    $nics = Get-AzNetworkInterface | Where-Object { $_.VirtualMachine -NE $null }
+
+    foreach ($vm in $WindowsVMs) {
+        $vmnicinterfaces = $vm.Networkprofile.NetworkInterfaces.id
+        foreach ($vmnicinterface in $vmnicinterfaces) {
+            $nic = $nics | Where-Object { $_.Id -eq $vmnicinterface }
+            $privateip = $nic.IpConfigurations | select PrivateIPAddress
+        
+            If ($privateip.count -gt 1) {
+                foreach ($private in $privateip) {
+                    $WindowsIPs += $private.privateIPAddress + "`n"
+                }
+            }
+            elseIf ($privateip.privateIPAddress -ne $null) {
+                $WindowsIPs += $privateip.privateIPAddress + "`n"
+            }
+        }
+    }
+
+    foreach ($vm in $LinuxVMs) {
+        $vmnicinterfaces = $vm.Networkprofile.NetworkInterfaces.id
+        foreach ($vmnicinterface in $vmnicinterfaces) {
+            $nic = $nics | Where-Object { $_.Id -eq $vmnicinterface }
+            $privateip = $nic.IpConfigurations | select PrivateIPAddress
+    
+            If ($privateip.count -gt 1) {
+                foreach ($private in $privateip) {
+                    $LinuxIPs += $private.privateIPAddress + "`n"
+                }
+            }
+            elseif ($privateip.privateIPAddress -ne $null) {
+                $LinuxIps += $privateip.privateIPAddress + "`n"
+            }
+        }
+    }
+}
+#>
+#If ($WindowsIPs -ne "" -and $WindowsIPs.Length -gt 150) { $WindowsIPs | Out-File $OutFileWin -Encoding ASCII -NoNewline -Force }
+#If ($LinuxIPs -ne "" -and $LinuxIPs.Length -gt 150) { $LinuxIPs | Out-File $OutFileLin -Encoding ASCII -NoNewline -Force }
+
+$WindowsIPs | Out-File $OutFileWin -Encoding ASCII -NoNewline -Force
+$LinuxIPs | Out-File $OutFileLin -Encoding ASCII -NoNewline -Force