Files
Zack Meier 1d304511b8 update
2026-04-15 15:45:50 -05:00

146 lines
6.7 KiB
PowerShell

<# Scheduled Task metadata
General
GetAzureVMGuestIPsForPA
run as ndgov\svcitdiaasauto
run whether user is logged on or not
Triggers
Daily, 2pm - repeat every 1 hour indefinitely
Actions
"C:\Program Files\PowerShell\7\pwsh.exe" -noninteractive -file "F:\GetAzureVMGuestIPsForPA\GetAzureVMGuestIPsForPA.ps1"
Settings
allow task to be run on demand
stop the task if it runs longer than 1 hour -eq $true
if the running task does not end when requested, force it to stop
#>
$TimeStamp = Get-Date -UFormat "%Y%m%d%H%M%S"
Start-Transcript F:\GetAzureVMGuestIPsForPA\Logs\GetAzureVMGuestIPsForPA-$Timestamp.log
$VerbosePerfrence = "Continue"
#[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12
$OutputPath = "C:\inetpub\wwwroot"
$WindowsIPs = ""
$LinuxIPs = ""
$OutFileWin = $OutputPath + "\AzureWin.txt"
$OutFileLin = $OutputPath + "\AzureLin.txt"
Remove-Item $OutFileWin
Remove-Item $OutFileLin
$WindowsIpArray = [string]@()
$LinuxIpArray = [string]@()
# replace with PowerShell.SecretManagement
#$username="svcitdazurescript@nd.gov"
#$usernameg="svcitdazurescript@ndstate.onmicrosoft.com"
#Read-Host -AsSecureString | ConvertFrom-SecureString | Out-File C:\Users\svcitdazurescript\AppData\Local\Microsoft\sac.bat
#$password=Get-Content C:\Users\svcitdazurescript\AppData\Local\Microsoft\sac.bat | ConvertTo-SecureString
#$passwordg=Get-Content C:\Users\svcitdazurescript\AppData\Local\Microsoft\sacg.bat | ConvertTo-SecureString
#$AdminCred=New-Object -TypeName System.Management.Automation.PSCredential -ArgumentList $username,$password
#$AdminCredg=New-Object -TypeName System.Management.Automation.PSCredential -ArgumentList $usernameg,$passwordg
# Prepare credentials
$svcitdazurescript = Get-Secret -Name svcitdazurescript
$MacCred = New-Object System.Management.Automation.PSCredential("svcitdazurescript@nd.gov", $svcitdazurescript.Password)
# no VMs or PAs in AzureGov yet (2023/09/26) $MagCred = Get-Secret -Name svcitdazurescriptgov
# Azure Commercial
$AzAccount = Connect-AzAccount -Credential $MacCred -Environment AzureCloud -Verbose
$Subscriptions = Get-AzSubscription | Where-Object { $_.Name -ne "sandbox" -and $_.Name -notlike "Visual Studio*" -and $_.Name -notlike "Azure subscription*" -and $_.Name -notlike "Access to Azure Active Directory*"}
foreach ($subscription in $subscriptions) {
Set-AzContext -Subscription $subscription
$WindowsVMs = Get-AzVM | Where-Object { $_.StorageProfile.osdisk.ostype -match "Windows" }
$LinuxVMs = Get-AzVM | Where-Object { $_.StorageProfile.osdisk.ostype -match "Linux" -and $_.StorageProfile.ImageReference.Publisher -ne "infoblox" -and $_.StorageProfile.ImageReference.Publisher -ne "paloaltonetworks" -and $_.StorageProfile.ImageReference.Publisher -ne "juniper-networks" }
$nics = Get-AzNetworkInterface | Where-Object { $_.VirtualMachine -NE $null }
foreach ($vm in $WindowsVMs) {
$vmnicinterfaces = $vm.Networkprofile.NetworkInterfaces.id
foreach ($vmnicinterface in $vmnicinterfaces) {
$nic = $nics | Where-Object { $_.Id -eq $vmnicinterface }
$privateip = $nic.IpConfigurations | select PrivateIPAddress
If ($privateip.count -gt 1) {
foreach ($private in $privateip) {
Write-Warning -Message ($VM.Name + "zzzzz")
$WindowsIPs += $private.privateIPAddress + "`n"
}
}
elseIf ($privateip.privateIPAddress -ne $null) {
Write-Warning -Message ($VM.Name + "xxxxx")
$WindowsIPs += $privateip.privateIPAddress + "`n"
}
}
}
foreach ($vm in $LinuxVMs) {
$vmnicinterfaces = $vm.Networkprofile.NetworkInterfaces.id
foreach ($vmnicinterface in $vmnicinterfaces) {
$nic = $nics | Where-Object { $_.Id -eq $vmnicinterface }
$privateip = $nic.IpConfigurations | select PrivateIPAddress
If ($privateip.count -gt 1) {
foreach ($private in $privateip) {
$LinuxIPs += $private.privateIPAddress + "`n"
}
}
elseif ($privateip.privateIPAddress -ne $null) {
$LinuxIps += $privateip.privateIPAddress + "`n"
}
}
}
}
#Azure Gov
<# no VMs or PAs in AzureGov yet (2023/09/26)
$AzAccount = Connect-AzAccount -Credential $MagCred -Environment AzureUSGovernment -Verbose
$Subscriptions = Get-AzureRMSubscription | Where-Object { $_.Name -ne "sandbox" }
foreach ($subscription in $subscriptions) {
Set-AzContext -Subscription $subscription
$WindowsVMs = Get-AzVM | Where-Object { $_.StorageProfile.osdisk.ostype -match "Windows" }
$LinuxVMs = Get-AzVM | Where-Object { $_.StorageProfile.osdisk.ostype -match "Linux" -and $_.StorageProfile.ImageReference.Publisher -ne "infoblox" -and $_.StorageProfile.ImageReference.Publisher -ne "paloaltonetworks" -and $_.StorageProfile.ImageReference.Publisher -ne "juniper-networks" }
$nics = Get-AzNetworkInterface | Where-Object { $_.VirtualMachine -NE $null }
foreach ($vm in $WindowsVMs) {
$vmnicinterfaces = $vm.Networkprofile.NetworkInterfaces.id
foreach ($vmnicinterface in $vmnicinterfaces) {
$nic = $nics | Where-Object { $_.Id -eq $vmnicinterface }
$privateip = $nic.IpConfigurations | select PrivateIPAddress
If ($privateip.count -gt 1) {
foreach ($private in $privateip) {
$WindowsIPs += $private.privateIPAddress + "`n"
}
}
elseIf ($privateip.privateIPAddress -ne $null) {
$WindowsIPs += $privateip.privateIPAddress + "`n"
}
}
}
foreach ($vm in $LinuxVMs) {
$vmnicinterfaces = $vm.Networkprofile.NetworkInterfaces.id
foreach ($vmnicinterface in $vmnicinterfaces) {
$nic = $nics | Where-Object { $_.Id -eq $vmnicinterface }
$privateip = $nic.IpConfigurations | select PrivateIPAddress
If ($privateip.count -gt 1) {
foreach ($private in $privateip) {
$LinuxIPs += $private.privateIPAddress + "`n"
}
}
elseif ($privateip.privateIPAddress -ne $null) {
$LinuxIps += $privateip.privateIPAddress + "`n"
}
}
}
}
#>
#If ($WindowsIPs -ne "" -and $WindowsIPs.Length -gt 150) { $WindowsIPs | Out-File $OutFileWin -Encoding ASCII -NoNewline -Force }
#If ($LinuxIPs -ne "" -and $LinuxIPs.Length -gt 150) { $LinuxIPs | Out-File $OutFileLin -Encoding ASCII -NoNewline -Force }
$WindowsIPs | Out-File $OutFileWin -Encoding ASCII -NoNewline -Force
$LinuxIPs | Out-File $OutFileLin -Encoding ASCII -NoNewline -Force