Export/New-CustomAzVmss.ps1

# Will be called in VM
function Global:New-CustomAzVmss {
    [CmdletBinding()]
    <#
    .SYNOPSIS
        ...
    .DESCRIPTION
        ...
    #>

    param(
        [Parameter(Mandatory = $true)]
        [string]
        $ResourceGroupName,        
        [Parameter(Mandatory = $true)]
        [string]
        $ResourceLocation,
        [Parameter(Mandatory = $true)]
        [string]
        $Name,
        [Parameter(Mandatory = $true)]
        [int]
        $NoOfInstances,
        [Parameter(Mandatory = $true)]
        [string]
        $BaseImageName,
        [Parameter(Mandatory = $true)]
        [string]
        $VMSize,
        [Parameter(Mandatory = $true)]
        [PSCredential]
        $VMCredentials,
        [Parameter(Mandatory = $true)]
        [string]
        $ComputerNamePrefix,
        [Parameter(Mandatory = $true)]
        [string]
        $NetworkIPConfigName,
        [Parameter(Mandatory = $true)]
        [string]
        $NetworkInterfaceConfigName,        
        [Parameter(Mandatory = $true)]
        [string]
        $LoadBalancerName,
        [Parameter(Mandatory = $true)]
        [string]
        $FrontendIpConfigName,
        [Parameter(Mandatory = $true)]
        [string]
        $VirtualNetworkName,
        [Parameter(Mandatory = $true)]
        [string]
        $SubnetName,
        [Parameter(Mandatory = $false)]
        [string]
        $SubnetAddressPrefix,
        [Parameter(Mandatory = $true)]
        [switch]
        $CreatePublicIP,
        [Parameter(Mandatory = $true)]
        [string]
        $BackendAddressPoolName,
        [Parameter(Mandatory = $true)]
        [string]
        $AdminUsername,
        [Parameter(Mandatory = $true)]
        [string]
        $AdminPassword,
        [Parameter(Mandatory = $true)]
        [string]
        $KeyVaultName,
        [switch]
        $AsJob
    )
    process {
        #$input
        #$PSBoundParameters

        $VMSS = Get-AzVmss -ResourceGroupName $ResourceGroupName -VMScaleSetName $Name -ErrorAction SilentlyContinue
        if ($VMSS) {
            Write-CustomHost -Message "Scale Set $Name already exists. Stopping here."
            return
        }
        # TODO: Add handling for Subnet-creation (if not existing)
        $scriptBlock = {
            # Create Variables in Scope of ScriptBlock for all variables passed in ArgumentList
            $args[0].GetEnumerator() | ForEach-Object {
                New-Variable -Name $_.Key -Value $_.Value
            }
            Write-CustomHost -Message "Creating Scale Set $Name..."            
            $VNet = Get-AzVirtualNetwork -ResourceGroupName $ResourceGroupName -Name $VirtualNetworkName -ErrorAction SilentlyContinue
            $VMSSIPCfg = New-AzVmssIPConfig -Name $NetworkIPConfigName -SubnetId $VNet.Subnets[0].Id

            $VMSS = New-AzVmssConfig -Location $ResourceLocation -SkuCapacity $NoOfInstances -SkuName $VMSize -UpgradePolicyMode "Automatic" -IdentityType SystemAssigned `
            | Add-AzVmssNetworkInterfaceConfiguration -Name $NetworkInterfaceConfigName -Primary $True -IPConfiguration $VMSSIPCfg `
            | Set-AzVmssOSProfile -ComputerNamePrefix $ComputerNamePrefix  -AdminUsername $AdminUsername -AdminPassword $AdminPassword `
            | Set-AzVmssStorageProfile  -OsDiskCreateOption 'FromImage' -OsDiskCaching "None" `
                -ImageReferenceId (Get-AzImage -ImageName $BaseImageName -ResourceGroupName $resourceGroupName).Id

            $VMSS = New-AzVmss -ResourceGroupName $ResourceGroupName -Name $Name -VirtualMachineScaleSet $VMSS
            Write-CustomHost -Message "Done."
            
            # Check if Role "Contributor" is necessary
            $RoleDefinitionName = "Contributor"
            if (-not(Get-AzRoleAssignment -ObjectId $VMSS.Identity.PrincipalId -ResourceGroupName $ResourceGroupName -RoleDefinitionName $RoleDefinitionName -ErrorAction SilentlyContinue)) {
                Write-CustomHost -Message "Assigning access role to managed identity of VM Scale Set..."
                New-AzRoleAssignment -ObjectId $VMSS.Identity.PrincipalId -RoleDefinitionName $RoleDefinitionName -ResourceGroupName $ResourceGroupName | Out-Null
                Write-CustomHost -Message "Done."
            }
            Set-KeyVaultPermissionsForScaleSet -ResourceGroupName $ResourceGroupName -KeyVaultName $KeyVaultName -ScaleSetName $Name
        }

        # Get all parameters from within this function call
        $params = Get-FunctionParameters $MyInvocation
        if ($AsJob) {            
            Start-Job -ScriptBlock $scriptBlock -InitializationScript {Import-Module SetupD365Environment -Force} -ArgumentList $params
        }
        else {
            Invoke-Command -ScriptBlock $scriptBlock -ArgumentList $params
        }
    }
}
Export-ModuleMember -Function New-CustomAzVmss