Excluding elements from dynamic membership in Azure Virtual Network Manager (Preview)

Artikel
11/02/2021
3 minit untuk dibaca

In this article, you'll learn how to use conditional statements to exclude virtual networks from dynamic membership. You create these conditional statements using the basic editor by selecting parameters and operators from a drop-down menu. You'll also learn how to use the advanced editor to update conditional statements of an existing network group.

Important

Azure Virtual Network Manager is currently in public preview. This preview version is provided without a service level agreement, and it's not recommended for production workloads. Certain features might not be supported or might have constrained capabilities. For more information, see Supplemental Terms of Use for Microsoft Azure Previews.

Parameters and operators

Virtual networks with dynamic memberships are selected using conditional statements. You can define more than one conditional statement by using logical operators such as AND and OR for scenarios where you need to further narrow the selected virtual networks.

List of supported parameters:

Parameters	Advanced editor field
Name	`Name`
ID	`Id`
Tags	`tag['tagName']`
Subscription Name	`[subscription().Name]`
Subscription ID	`[subscription().Id]`
Subscription Tags	`[subscription().tags['tagName']]`
Resource Group Name	`[resourceGroup().Name]`
Resource Group ID	`[resourceGroup().Id]`
Resource Group Tags	`[resourceGroup().tags['tagName']]`

List of supported operators:

Operators	Advanced editor
Contains	`"contains": <>`
Does not contain	`"notcontains": <>`
In	`"in": <>`
Not In	`"notin": <>`
Equals	`"equals": <>`
Does not equal	`"notequals": <>`
Contains any of	`"contains": <>`
Contains all of	`"contains": <>`
Does not contain any of	`"notcontains": <>`
Exists	`"exists": true`
Does not exist	`"exists": false`

Note

The Exists and Does not exist operators are only used with the Tags parameter.

Basic editor

Assume you have the following virtual networks in your subscription. Each virtual network has either a Production or Test tag associated. You only want to select virtual networks with the Production tag and contain VNet-A in the name.

VNet-A-EastUS - Production
VNet-A-WestUS - Production
VNet-B-WestUS - Test
VNet-C-WestUS - Test
VNetA - Production
VNetB - Test

To begin using the basic editor to create your conditional statement, you need to create a new network group.

Go to your Azure Virtual Network Manager instance and select Network Groups under Settings. Then select + Add to create a new network group.
Enter a Name for the network group. Then select the Conditional statements tab.
Select Tags from the drop-down under Parameter and then select Exist from the drop-down under Operator.
Enter Prod under Condition, then select Evaluate. You should only see VNet-A-EastUS, VNet-B-WestUS, and VNetA show up in the list.
Add another conditional statement by selecting the logical operator AND. Select Name for the Parameter and Contains for the Operator. Enter VNet-A into the Condition field. Select Evaluate to see which virtual network shows up in the list. You should only see VNet-A-EastUS and VNet-A-WestUS.
Select Review + Create and then select Create once validation has passed.

Note

The basic editor is only available during the creation of a network group.

Advanced editor

The advanced editor can be used to select virtual network during the creation of a network group or when updating an existing network group.

Select the network group created in the previous section. Then select the Conditional statements tab.
You'll see the conditional statements for the network group in the advance editor view as followed:
```
{
   "allOf": [
      {
         "field": "tags['Environment']",
         "exists": true
      },
      {
         "field": "Name",
         "contains": "VNet-A"
      }
   ]
}
```
The "allOf" parameter contains both the conditional statements that are separated by the AND logical operator.

To add another conditional statement for a Name field not containing WestUS, enter the following into the advanced editor:

{
   "allOf": [
      {
         "field": "tags['Environment']",
         "exists": true
      },
      {
         "field": "Name",
         "contains": "VNet-A"
      },
      {
         "field": "Name",
         "notcontains": "WestUS"
      }
   ]
}

Then select Evaluate. You should only see VNet-A-EastUS virtual network in the list.
Select Review + save and then select Save once validation has passed.

See Parameter and operators for the complete list of parameters and operators you can use with the advanced editor. See below for more examples:

More examples

Example 1: OR operator only

This example uses the OR logical operator to separate two conditional statements.

Basic editor:

Advanced operator:

{
   "anyOf": [
      {
         "field": "Name",
         "contains": "VNet-A"
      },
      {
         "field": "Name",
         "contains": "VNetA"
      }
   ]
}

The "anyOf" parameter contains both the conditional statements that are separated by the OR logical operator.

Example 2: AND and OR operator at the same time

Basic editor:
Advanced editor:

{
   "allOf": [
      {
         "anyOf": [
            {
               "field": "Name",
               "contains": "VNet-A"
            },
            {
               "field": "Name",
               "contains": "VNetA"
            }
         ]
      },
      {
         "field": "Name",
         "notcontains": "West"
      }
   ]
}

Both "allOf" and "anyOf" are used in the code. Since the AND operator is last in the list, it is on the outer part of the code containing the two conditional statements with the OR operator.

Next steps

Learn about Network groups.
Create an Azure Virtual Network Manager instance.