aro-311-deploy.json

{
    "$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#",
    "contentVersion": "1.0.0.0",
    "parameters": {
      "location" : {
        "type": "string",
        "defaultValue": "eastus2",
        "metadata": {
          "description": "Location"
        }
      },
      "clusterName" : {
        "type": "string",
        "metadata": {
          "description": "Unique name for the cluster"
        }
      },
      "aadTenantId" : {
        "type": "string",
        "metadata": {
          "description": "The ID of an Azure Active Directory tenant"
        }
      },
      "aadClientId" : {
        "type": "string",
        "metadata": {
          "description": "The ID of an Azure Active Directory client application"
        }
      },
      "managementSubnetCidr": {
          "type": "string",
          "metadata": {
              "description": "CIDR for the Management Subnet"
          }
      },
      "privateApiServer": {
          "type": "bool",
          "metadata": {
              "description": "Enable Private API Server"
          }
      },
      "vnetCidr": {
          "type": "string",
          "metadata": {
              "description": "The Cidr for the cluster vNet"
          }
      },
      "subnetCidr": {
          "type": "string",
          "metadata": {
              "description": "The cidr for the cluster subnet"
          }
      },
      "aadClientSecret" : {
        "type":"securestring",
        "metadata": {
          "description": "The secret of an Azure Active Directory client application"
        }
      },
      "aadCustomerAdminGroupId" : {
        "type": "string",
        "metadata": {
          "description": "The Object ID of an Azure Active Directory Group that memberships will get synced into the OpenShift group 'osa-customer-admins'. If not specified, no cluster admin access will be granted."
        }
      },
      "logAnalyticsWorkspaceName" : {
        "type": "string",
        "metadata": {
          "description": "Log Analytics workspace name. Can be already existing in the current resource group."
        }
      },
      "logAnalyticsLocation" : {
        "type": "string",
        "metadata": {
          "description": "Log Analytics location."
        }
      }
    },
    "resources": [
      {
        "type": "Microsoft.OperationalInsights/workspaces",
        "name": "[parameters('logAnalyticsWorkspaceName')]",
        "apiVersion": "2015-11-01-preview",
        "location": "[parameters('logAnalyticsLocation')]",
        "properties": {
            "features": {
                "searchVersion": 1
            }
        }
      },
      {
        "location": "[parameters('location')]",
        "name": "[parameters('clusterName')]",
        "type": "Microsoft.ContainerService/openShiftManagedClusters",
        "apiVersion": "2019-10-27-preview",
        "properties": {
          "openShiftVersion": "v3.11",
          "networkProfile": {
            "vnetCidr": "[parameters('vnetCidr')]",
             "managementSubnetCIDR": "[parameters('managementSubnetCidr')]"
          },
          "authProfile": {
            "identityProviders": [
              {
                "name": "Azure AD",
                "provider": {
                    "kind": "AADIdentityProvider",
                    "clientId": "[parameters('aadClientId')]",
                    "secret": "[parameters('aadClientSecret')]",
                    "tenantId": "[parameters('aadTenantId')]",
                    "customerAdminGroupId": "[parameters('aadCustomerAdminGroupId')]"
                }
              }
            ]
          },
          "masterPoolProfile": {
            "name": "master",
            "count": 3,
            "subnetCidr": "[parameters('subnetCidr')]",
            "vmSize": "Standard_D4s_v3",
            "osType": "Linux",
            "apiProperties": {
                "privateApiServer": "[parameters('privateApiServer')]"
            }
          },
          "agentPoolProfiles": [
            {
              "role": "compute",
              "name": "compute",
              "count": 4,
              "subnetCidr": "[parameters('subnetCidr')]",
              "vmSize": "Standard_D4s_v3",
              "osType": "Linux"
            },
            {
              "role": "infra",
              "name": "infra",
              "count": 3,
              "subnetCidr": "[parameters('subnetCidr')]",
              "vmSize": "Standard_D4s_v3",
              "osType": "Linux"
            }
          ],
          "routerProfiles": [
            {
              "name": "default"
            }
          ],
          "monitorProfile":{
              "workspaceResourceID":  "[resourceId('Microsoft.OperationalInsights/workspaces',parameters('logAnalyticsWorkspaceName'))]",
              "enabled":true
          }
        },
        "dependsOn": [
          "[resourceId('Microsoft.OperationalInsights/workspaces',parameters('logAnalyticsWorkspaceName'))]"
        ]
      }
    ]
  }