New-AzVmssConfig

New-AzVmssConfig
    [[-Overprovision] <Boolean>]
    [[-Location] <String>]
    [[-Tag] <Hashtable>]
    [[-SkuName] <String>]
    [[-SkuTier] <String>]
    [[-SkuCapacity] <Int32>]
    [[-UpgradePolicyMode] <UpgradeMode>]
    [[-OsProfile] <VirtualMachineScaleSetOSProfile>]
    [[-StorageProfile] <VirtualMachineScaleSetStorageProfile>]
    [[-NetworkInterfaceConfiguration] <VirtualMachineScaleSetNetworkConfiguration[]>]
    [[-Extension] <PSVirtualMachineScaleSetExtension[]>]
    [-EdgeZone <String>]
    [-SkipExtensionsOnOverprovisionedVMs]
    [-SinglePlacementGroup <Boolean>]
    [-ZoneBalance]
    [-PlatformFaultDomainCount <Int32>]
    [-Zone <String[]>]
    [-PlanName <String>]
    [-PlanPublisher <String>]
    [-PlanProduct <String>]
    [-PlanPromotionCode <String>]
    [-RollingUpgradePolicy <RollingUpgradePolicy>]
    [-EnableAutomaticRepair]
    [-AutomaticRepairGracePeriod <String>]
    [-EnableAutomaticOSUpgrade]
    [-DisableAutoRollback <Boolean>]
    [-EnableUltraSSD]
    [-HealthProbeId <String>]
    [-BootDiagnostic <BootDiagnostics>]
    [-LicenseType <String>]
    [-Priority <String>]
    [-EnableSpotRestore]
    [-SpotRestoreTimeout <String>]
    [-EvictionPolicy <String>]
    [-MaxPrice <Double>]
    [-TerminateScheduledEvents]
    [-TerminateScheduledEventNotBeforeTimeoutInMinutes <Int32>]
    [-ProximityPlacementGroupId <String>]
    [-ScaleInPolicy <String[]>]
    [-EncryptionAtHost]
    [-OrchestrationMode <String>]
    [-CapacityReservationGroupId <String>]
    [-UserData <String>]
    [-AutomaticRepairAction <String>]
    [-BaseRegularPriorityCount <Int32>]
    [-RegularPriorityPercentage <Int32>]
    [-ImageReferenceId <String>]
    [-SharedGalleryImageId <String>]
    [-OSImageScheduledEventEnabled]
    [-OSImageScheduledEventNotBeforeTimeoutInMinutes <String>]
    [-SecurityType <String>]
    [-EnableVtpm <Boolean>]
    [-EnableSecureBoot <Boolean>]
    [-SecurityPostureId <String>]
    [-SecurityPostureExcludeExtension <String[]>]
    [-SkuProfileVmSize <String[]>]
    [-SkuProfileAllocationStrategy <String>]
    [-EnableResilientVMCreate]
    [-EnableResilientVMDelete]
    [-EnableAutomaticZoneRebalance]
    [-AutomaticZoneRebalanceStrategy <String>]
    [-AutomaticZoneRebalanceBehavior <String>]
    [-DefaultProfile <IAzureContextContainer>]
    [-WhatIf]
    [-Confirm]
    [<CommonParameters>]

New-AzVmssConfig
    [[-Overprovision] <Boolean>]
    [[-Location] <String>]
    [[-Tag] <Hashtable>]
    [[-SkuName] <String>]
    [[-SkuTier] <String>]
    [[-SkuCapacity] <Int32>]
    [[-UpgradePolicyMode] <UpgradeMode>]
    [[-OsProfile] <VirtualMachineScaleSetOSProfile>]
    [[-StorageProfile] <VirtualMachineScaleSetStorageProfile>]
    [[-NetworkInterfaceConfiguration] <VirtualMachineScaleSetNetworkConfiguration[]>]
    [[-Extension] <PSVirtualMachineScaleSetExtension[]>]
    -IdentityType <ResourceIdentityType>
    [-EdgeZone <String>]
    [-SkipExtensionsOnOverprovisionedVMs]
    [-SinglePlacementGroup <Boolean>]
    [-ZoneBalance]
    [-PlatformFaultDomainCount <Int32>]
    [-Zone <String[]>]
    [-PlanName <String>]
    [-PlanPublisher <String>]
    [-PlanProduct <String>]
    [-PlanPromotionCode <String>]
    [-RollingUpgradePolicy <RollingUpgradePolicy>]
    [-EnableAutomaticRepair]
    [-AutomaticRepairGracePeriod <String>]
    [-EnableAutomaticOSUpgrade]
    [-DisableAutoRollback <Boolean>]
    [-EnableUltraSSD]
    [-HealthProbeId <String>]
    [-BootDiagnostic <BootDiagnostics>]
    [-LicenseType <String>]
    [-Priority <String>]
    [-EnableSpotRestore]
    [-SpotRestoreTimeout <String>]
    [-EvictionPolicy <String>]
    [-MaxPrice <Double>]
    [-TerminateScheduledEvents]
    [-TerminateScheduledEventNotBeforeTimeoutInMinutes <Int32>]
    [-ProximityPlacementGroupId <String>]
    [-ScaleInPolicy <String[]>]
    [-IdentityId <String[]>]
    [-EncryptionIdentity <String>]
    [-EncryptionAtHost]
    [-OrchestrationMode <String>]
    [-CapacityReservationGroupId <String>]
    [-UserData <String>]
    [-AutomaticRepairAction <String>]
    [-BaseRegularPriorityCount <Int32>]
    [-RegularPriorityPercentage <Int32>]
    [-ImageReferenceId <String>]
    [-SharedGalleryImageId <String>]
    [-OSImageScheduledEventEnabled]
    [-OSImageScheduledEventNotBeforeTimeoutInMinutes <String>]
    [-SecurityType <String>]
    [-EnableVtpm <Boolean>]
    [-EnableSecureBoot <Boolean>]
    [-SecurityPostureId <String>]
    [-SecurityPostureExcludeExtension <String[]>]
    [-SkuProfileVmSize <String[]>]
    [-SkuProfileAllocationStrategy <String>]
    [-EnableResilientVMCreate]
    [-EnableResilientVMDelete]
    [-EnableAutomaticZoneRebalance]
    [-AutomaticZoneRebalanceStrategy <String>]
    [-AutomaticZoneRebalanceBehavior <String>]
    [-DefaultProfile <IAzureContextContainer>]
    [-WhatIf]
    [-Confirm]
    [<CommonParameters>]

New-AzVmssConfig cmdlet은 구성 가능한 로컬 VMSS(Virtual Manager Scale Set) 개체를 만듭니다.

다음 cmdlet을 사용하여 VMSS 개체를 구성합니다.

• 네트워크 프로필을 설정하기 위한 Add-AzVmssNetworkInterfaceConfiguration 입니다.
  
• OS 프로필을 설정하기 위한 Set-AzVmssOsProfile 입니다.
  
• 스토리지 프로필을 설정하기 위한 Set-AzVmssStorageProfile 입니다.
  
• Get-AzComputeResourceSku 를 사용하여 구독 및 지역에 사용 가능한 가상 머신 크기를 확인할 수도 있습니다.
  
  

여기에서 가상 머신 확장 집합 에 대한 다른 cmdlet을 참조하세요.

빠른 시작: 자습서용 Azure PowerShell을 사용하여 가상 머신 확장 집합 만들기를 참조하세요.

$VMSS = New-AzVmssConfig -Location $Loc -SkuCapacity 2 -SkuName "Standard_A0" -UpgradePolicyMode "Automatic" -NetworkInterfaceConfiguration $NetCfg `
            | Add-AzVmssNetworkInterfaceConfiguration -Name "Test" -Primary $True -IPConfiguration $IPCfg `
            | Set-AzVmssOsProfile -ComputerNamePrefix "Test" -AdminUsername $adminUsername -AdminPassword $AdminPassword `
            | Set-AzVmssStorageProfile -Name "Test" -OsDiskCreateOption "FromImage" -OsDiskCaching "None" `
            -ImageReferenceOffer $ImgRef.Offer -ImageReferenceSku $ImgRef.Skus -ImageReferenceVersion $ImgRef.Version `
            -ImageReferencePublisher $ImgRef.PublisherName -VhdContainer $VHDContainer `
            | Add-AzVmssAdditionalUnattendContent -ComponentName  $AUCComponentName -Content  $AUCContent -PassName  $AUCPassName -SettingName  $AUCSetting;

New-AzVmss -ResourceGroupName $RGName -Name $VMSSName -VirtualMachineScaleSet $VMSS;

이 예제에서는 VMSS 구성 개체를 만듭니다. 첫 번째 명령은 New-AzVmssConfig cmdlet을 사용하여 VMSS 구성 개체를 만들고 결과를 $VMSS 변수에 저장합니다. 두 번째 명령은 New-AzVmss cmdlet을 사용하여 첫 번째 명령에서 만든 VMSS 구성 개체를 사용하는 VMSS를 만듭니다.

VMSS 구성 개체를 만듭니다. (autogenerated)

New-AzVmssConfig -Location <String> -Overprovision $false -SkuCapacity 2 -SkuName 'Standard_A0' -SecurityType "Standard" -Tag @{key0="value0";key1=$null;key2="value2"} -UpgradePolicyMode Automatic;

VMSS 구성 개체를 만듭니다. (autogenerated)

New-AzVmssConfig -Location <String> -SkuCapacity 2 -SkuName 'Standard_A0' -UpgradePolicyMode Automatic -IdentityType SystemAssigned -SecurityType "Standard";

$publisher = "MicrosoftWindowsServer";
$offer = "WindowsServer";
$imgSku = "2019-Datacenter";
$version = "latest";
$vmssName = 'vmss' + $rgname;
$vmssSku = "Standard_D2s_v3";
$vmssname = "vmss" + $rgname;
$domainNameLabel = "d" + $rgname;
$securityTypeStnd = "Standard";
$username = <Username>;
$securePassword = ConvertTo-SecureString -String "****" -AsPlainText -Force;

$credential = New-Object System.Management.Automation.PSCredential ($username, $securePassword);

# SRP
$stoname = 'sto' + $rgname;
$stotype = 'Standard_GRS';
New-AzStorageAccount -ResourceGroupName $rgname -Name $stoname -Location $loc -Type $stotype;
$stoaccount = Get-AzStorageAccount -ResourceGroupName $rgname -Name $stoname;

# NRP
$subnet = New-AzVirtualNetworkSubnetConfig -Name ('subnet' + $rgname) -AddressPrefix "10.0.0.0/24";
$vnet = New-AzVirtualNetwork -Force -Name ('vnet' + $rgname) -ResourceGroupName $rgname -Location $loc -AddressPrefix "10.0.0.0/16" -Subnet $subnet;
$vnet = Get-AzVirtualNetwork -Name ('vnet' + $rgname) -ResourceGroupName $rgname;
$subnetId = $vnet.Subnets[0].Id;

# Create VMSS with managed disk
$timeoutValue = 'PT15M';
$ipCfg = New-AzVmssIpConfig -Name 'test' -SubnetId $subnetId;
$vmss = New-AzVmssConfig -Location $loc -SkuCapacity 2 -SkuName $vmssSku -OSImageScheduledEventEnabled -OSImageScheduledEventNotBeforeTimeoutInMinutes $timeoutValue -UpgradePolicyMode "Automatic" -SecurityType $securityTypeStnd `
    | Add-AzVmssNetworkInterfaceConfiguration -Name 'test' -Primary $true -IPConfiguration $ipCfg `
    | Set-AzVmssOsProfile -ComputerNamePrefix 'test' -AdminUsername $username -AdminPassword $password `
    | Set-AzVmssStorageProfile -OsDiskCreateOption 'FromImage' -OsDiskCaching 'None' `
       -ImageReferenceOffer $offer -ImageReferenceSku $imgSku -ImageReferenceVersion $version `
       -ImageReferencePublisher $publisher;

$result = New-AzVmss -ResourceGroupName $rgname -Name $vmssName -VirtualMachineScaleSet $vmss;

$vmss = Get-AzVmss -ResourceGroupName $rgname -VMScaleSetName $vmssName;
# $vmss.VirtualMachineProfile.ScheduledEventsProfile.OsImageNotificationProfile.Enable is the OSImageScheduledEventEnabled flag.
# $vmss.VirtualMachineProfile.ScheduledEventsProfile.OsImageNotificationProfile.NotBeforeTimeout is the timeout value 'PT15M'.

$rgname = "rganme";
 $loc = "eastus";
 New-AzResourceGroup -Name $rgname -Location $loc -Force;
# VMSS Profile & Hardware requirements for the TrustedLaunch default behavior.
$vmssSize = 'Standard_D4s_v3';
$PublisherName = "MicrosoftWindowsServer";
$Offer = "WindowsServer";
$SKU = "2016-datacenter-gensecond";
$securityType = "TrustedLaunch";
$enable = $true;
$disable = $false;
$extDefaultName = "GuestAttestation";
$vmGADefaultIdentity = "SystemAssigned";

# NRP
$subnet = New-AzVirtualNetworkSubnetConfig -Name ('subnet' + $rgname) -AddressPrefix "10.0.0.0/24";
$vnet = New-AzVirtualNetwork -Force -Name ('vnet' + $rgname) -ResourceGroupName $rgname -Location $loc -AddressPrefix "10.0.0.0/16" -Subnet $subnet;
$vnet = Get-AzVirtualNetwork -Name ('vnet' + $rgname) -ResourceGroupName $rgname;
$subnetId = $vnet.Subnets[0].Id;

# New VMSS Parameters
$vmssName1 = 'vmss1' + $rgname;
$vmssName2 = 'vmss2' + $rgname;
$vmssType = 'Microsoft.Compute/virtualMachineScaleSets';
$adminUsername = <Username>;
$adminPassword = ConvertTo-SecureString -String "****" -AsPlainText -Force;
$imgRef = New-Object -TypeName 'Microsoft.Azure.Commands.Compute.Models.PSVirtualMachineImage';
$imgRef.PublisherName = $PublisherName;
$imgRef.Offer = $Offer;
$imgRef.Skus = $SKU;
$imgRef.Version = "latest";
$ipCfg = New-AzVmssIpConfig -Name 'test' -SubnetId $subnetId;

$vmss = New-AzVmssConfig -Location $loc -SkuCapacity 2 -SkuName $vmssSize -UpgradePolicyMode 'Manual' `
    | Add-AzVmssNetworkInterfaceConfiguration -Name 'test' -Primary $true -IPConfiguration $ipCfg `
    | Set-AzVmssOsProfile -ComputerNamePrefix 'test' -AdminUsername $adminUsername -AdminPassword $adminPassword `
    | Set-AzVmssStorageProfile -OsDiskCreateOption 'FromImage' -OsDiskCaching 'ReadOnly' `
    -ImageReferenceOffer $imgRef.Offer -ImageReferenceSku $imgRef.Skus -ImageReferenceVersion $imgRef.Version `
    -ImageReferencePublisher $imgRef.PublisherName;

# VMSS Creation using VMSSConfig for Trusted Launch SecurityType
$vmss1 = Set-AzVmssSecurityProfile -VirtualMachineScaleSet $vmss -SecurityType $securityType;
$result = New-AzVmss -ResourceGroupName $rgname -VMScaleSetName $vmssName1 -VirtualMachineScaleSet $vmss1;
$vmssGet = Get-AzVmss -ResourceGroupName $rgname -VMScaleSetName $vmssName1;

# Validate that for -SecurityType "TrustedLaunch" "-Vtpm" and -"SecureBoot" are "Enabled/true"
#$vmssGet.VirtualMachineProfile.SecurityProfile.UefiSettings.VTpmEnabled $true;
#$vmssGet.VirtualMachineProfile.SecurityProfile.UefiSettings.SecureBootEnabled $true;

다음은 신뢰할 수 있는 시작 보안 유형에 대해 VMSSConfig 개체를 사용하여 새 VMSS를 만들고 기본적으로 SecureBoot 및 Vtpm 플래그의 유효성을 True로 확인하는 예제입니다.

이 cmdlet은 일반적인 매개 변수인 -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutBuffer, -OutVariable, -PipelineVariable, -ProgressAction, -Verbose, -WarningAction 및 -WarningVariable 매개 변수를 지원합니다. 자세한 내용은 about_CommonParameters를 참조하세요.