deploy_pcf-opsman.ps1

#Requires -Modules @{ModuleName="pivposh";ModuleVersion="0.5"}
#requires -module NetTCPIP
#requires -module AzureRM.SQL
param(
    [Parameter(ParameterSetName = "install", Mandatory = $false)]
    [Parameter(ParameterSetName = "update", Mandatory = $false)]
    [ValidateNotNullOrEmpty()]
    [ValidateSet(
        <## 2.1 starts here
        '2.1-build.204',
        '2.1-build.212',
        '2.1-build.214',
        '2.1-build.304',
        '2.1-build.314',
        '2.1-build.318',
        '2.1-build.326',
        '2.1-build.335',
        '2.1-build.340',
        '2.1-build.341',
        '2.1-build.348',
        '2.1-build.350',
        '2.1-build.355',
        '2.1-build.361',
        '2.1-build.372',
        '2.1-build.377',
        ##>
        '2.1-build.389',
        ## 2.2 starts here ##>
        '2.2-build.292',
        '2.2-build.296',
        '2.2-build.300',
        '2.2-build.304',
        '2.2-build.312',
        '2.2-build.316',
        '2.2-build.319',
        '2.2-build.334',
        '2.2-build.352',
        '2.2-build.359',
        '2.2-build.372',
        '2.2-build.376',
        '2.2-build.380',        
        '2.2-build.382',        
        '2.2-build.386',        
        '2.2-build.398',        
        '2.2-build.406',
        '2.2-build.414',
        ## 2.3 starts here
        '2.3-build.146',
        '2.3-build.167',
        '2.3-build.170',
        '2.3-build.184',
        '2.3-build.188',
        '2.3-build.194',
        '2.3-build.212',        
        '2.3-build.224',
        '2.3-build.237',        
        '2.3-build.244',
        '2.3-build.250',
        '2.3-build.258',
        '2.3-build.268',        
        '2.3-build.274',
        '2.3-build.281',
        ## 2.4 starts here
        '2.4-build.177',
        ## 2.5 start here
        '2.5.2-build.172',
        '2.5.3-build.185',
        '2.5.4-build.189',
        '2.5.7-build.208',
        ### 2.6 start here
        '2.6.1-build.156',
        '2.6.2-build.159',
        '2.6.3-build.163',
        '2.6.4-build.166',
        '2.6.5-build.173',
        '2.6.6-build.179',
        '2.6.7-build.187',
        '2.6.8-build.192',
        '2.6.9-build.201',
        '2.6.10-build.207',
        '2.6.11-build.210',
        '2.6.12-build.222',
        '2.6.13-build.233',
        '2.6.14-build.243',
        '2.6.15-build.246',
        '2.6.16-build.252',
        ### 2.7 starts here
        '2.7.0-build.165',
        '2.7.1-build.189',
        '2.7.2-build.201',
        '2.7.3-build.208',
        '2.7.4-build.216',
        '2.7.5-build.218',
        '2.7.6-build.223'

    )]
    $opsmanager_image = '2.6.9-build.201',
    # The name of the Ressource Group we want to Deploy to.
    [Parameter(ParameterSetName = "install", Mandatory = $false)]
    [Parameter(ParameterSetName = "update", Mandatory = $false)]
    [ValidateNotNullOrEmpty()]
    $resourceGroup = 'pcf',
    # Name of the Storage Resource Group for Images
    [Parameter(ParameterSetName = "install", Mandatory = $false)]
    [Parameter(ParameterSetName = "update", Mandatory = $false)]
    [ValidateNotNullOrEmpty()]
    $image_rg = 'opsmanimage_rg',    
    # region of the Deployment., local for ASDK
    [Parameter(ParameterSetName = "install", Mandatory = $false)]
    [Parameter(ParameterSetName = "update", Mandatory = $false)]
    [ValidateNotNullOrEmpty()]
    $location = $GLOBAL:AZS_Location,
    [Parameter(ParameterSetName = "install", Mandatory = $false)]
    [Parameter(ParameterSetName = "update", Mandatory = $false)]
    [ValidateNotNullOrEmpty()]
    $dnsdomain = $Global:dnsdomain,
    [Parameter(ParameterSetName = "install", Mandatory = $false)]
    [ValidateNotNullOrEmpty()]
    $boshstorageaccount,
    [Parameter(ParameterSetName = "install", Mandatory = $false)]
    [Parameter(ParameterSetName = "update", Mandatory = $false)]
    [ValidateNotNullOrEmpty()]
    $ImageStorageAccount = "opsmanagerimage", 
    [Parameter(ParameterSetName = "install", Mandatory = $false)]
    [Parameter(ParameterSetName = "update", Mandatory = $false)]
    [ValidateSet('AzureAD','ADFS')]
    [ValidateNotNullOrEmpty()]
    $Authentication = "AzureAD",
    # The Containername we will host the Images for Opsmanager in
    [Parameter(ParameterSetName = "install", Mandatory = $false)]
    [Parameter(ParameterSetName = "update", Mandatory = $false)]
    [ValidateNotNullOrEmpty()]
    $image_containername = 'images',
    [Parameter(ParameterSetName = "install", Mandatory = $false)]
    [Parameter(ParameterSetName = "update", Mandatory = $false)]
    [ValidateNotNullOrEmpty()]
    $opsManFQDNPrefix = "pcf",
    [Parameter(ParameterSetName = "install", Mandatory = $false)]
    [ValidateNotNullOrEmpty()]
    $PCF_SUBDOMAIN_NAME = "pcfdemo",
    [Parameter(ParameterSetName = "install", Mandatory = $false)]
    [ValidateNotNullOrEmpty()]
    [ValidateSet('public', 'private')]
    $PCFlbType = "public",
    [Parameter(ParameterSetName = "install", Mandatory = $false)]
    [ValidateNotNullOrEmpty()]
    [switch]$RegisterProviders,
    [Parameter(ParameterSetName = "update", Mandatory = $true)]
    [ValidateNotNullOrEmpty()]
    [switch]$OpsmanUpdate,
    [Parameter(ParameterSetName = "install", Mandatory = $false)]
    [Parameter(ParameterSetName = "update", Mandatory = $false)]
    [ValidateNotNullOrEmpty()]
    [ipaddress]$subnet = "10.0.0.0",
    [Parameter(ParameterSetName = "install", Mandatory = $false)]
    [Parameter(ParameterSetName = "update", Mandatory = $false)]
    [ValidateNotNullOrEmpty()]
    $downloadpath = "$($HOME)/Downloads",
    # [switch]$useManagedDisks, wait´s for new cpi...
    [Parameter(ParameterSetName = "install", Mandatory = $false)]
    [Parameter(ParameterSetName = "update", Mandatory = $false)]
    [ValidateNotNullOrEmpty()]
    [ValidateSet('AzureCloud', 'AzureStack')]
    $Environment = "AzureStack",
    [Parameter(ParameterSetName = "install", Mandatory = $false)]
    [Parameter(ParameterSetName = "update", Mandatory = $false)]
    [ValidateNotNullOrEmpty()]
    [switch]$PAS_AUTOPILOT,
    [Parameter(ParameterSetName = "install", Mandatory = $false)]
    [ValidateNotNullOrEmpty()]
    [ValidateSet('cf', 'srt')]
    $PASTYPE = "srt",
    [Parameter(ParameterSetName = "install", Mandatory = $false)]
    [ValidateNotNullOrEmpty()]
        [ValidateSet(
            'pivotal-mysql',
            'p-rabbitmq',
            'p-spring-cloud-services',
            'p-redis', 
            'apm', 
            'p-dataflow',
            'p-healthwatch', 
            'azure-service-broker',
            'wavefront-nozzle',
            'Pivotal_Single_Sign-On_Service',
            'p-compliance-scanner',
            'p-event-alerts',
            'minio-internal-blobstore'
            )]
    [string[]]$tiles,
    [Parameter(ParameterSetName = "update", Mandatory = $false)]
    [ValidateNotNullOrEmpty()]
    [ValidateSet('green', 'blue')]
    $deploymentcolor = "green",
    [Parameter(ParameterSetName = "install", Mandatory = $false)]
    [ValidateNotNullOrEmpty()]
    [switch]$force_product_download,
    [Parameter(ParameterSetName = "install", Mandatory = $false)]
    [ValidateNotNullOrEmpty()]
    [switch]$TESTONLY,
    [Parameter(ParameterSetName = "install", Mandatory = $false)]
    [ValidateNotNullOrEmpty()]
    [switch]
    $DO_NOT_APPLY,
    [Parameter(ParameterSetName = "install", Mandatory = $false)]
    [ValidateNotNullOrEmpty()]
    [switch]
    $DO_NOT_DOWNLOAD,
    [Parameter(ParameterSetName = "install", Mandatory = $false)]
    [ValidateNotNullOrEmpty()]
    [switch]
    $USE_MINIO,
    [Parameter(ParameterSetName = "install", Mandatory = $false)]
    [ValidateNotNullOrEmpty()]
    [switch]
    $DO_NOT_CONFIGURE_OPSMAN,
    [Parameter(ParameterSetName = "install", Mandatory = $false)]
    $compute_instances=1,
    [Parameter(ParameterSetName = "install", Mandatory = $false)]
    [ValidateNotNullOrEmpty()]
    [ValidateSet('westeurope', 'eastus','westus','southeastasia')]
    $OpsManSeedLocation = "westeurope",
    # The Azure Location to Download Opsman from
    [Parameter(ParameterSetName = "install", Mandatory = $false)]
    [ValidateNotNullOrEmpty()]
    [ValidateSet('testing', '2.3','2.4','2.5','2.6')]
    $branch = "2.6"

)

$ScriptDir = "$PSScriptRoot/scripts"
$opsmanager_uri = "https://opsmanager$($OpsManSeedLocation).blob.core.windows.net/images/ops-manager-$($opsmanager_image).vhd"
if (!(Test-Path $HOME/env.json)) {
    "Please create $HOME/env.vars see README.md for details"
}
else {
    $env_vars = Get-Content $HOME/env.json | ConvertFrom-Json
}
if (!$dnsdomain) {
    $dnsdomain = Read-Host "Please enter your DNS Domain [azurestack.external for asdk]"
}


if (!$location) {
    $Location = Read-Host "Please enter your Region Name [local for asdk]"
}

New-Item -ItemType Directory -Path "$($HOME)/pcfdeployer/logs" -Force | out-null
$DeployTimes = @()
$dnsZoneName = "$PCF_SUBDOMAIN_NAME.$Location.$dnsdomain"
$OM_TARGET = "$($opsManFQDNPrefix).$($dnszonename)"
Write-Verbose $OM_TARGET
function get-runningos {
    # backward copatibility for peeps runnin powershell 5
    write-verbose "trying to get os type ... "
    if ($env:windir) {
        $OS_Version = Get-Command "$env:windir\system32\ntdll.dll"
        $OS_Version = $OS_Version.Version
        $deploy_os_type = "win_x86_64"
        $webrequestor = ".Net"
    }
    elseif ($OS = uname) {
        write-verbose "found OS $OS"
        Switch ($OS) {
            "Darwin" {
                $Global:deploy_os_type = "OSX"
                $OS_Version = (sw_vers -productVersion)
                write-verbose $OS_Version
                try {
                    $webrequestor = (get-command curl).Path
                }
                catch {
                    Write-Warning "curl not found"
                    exit
                }
            }
            'Linux' {
                $Global:deploy_os_type = "LINUX"
                $OS_Version = (uname -o)
                #$OS_Version = $OS_Version -join " "
                try {
                    $webrequestor = (get-command curl).Path
                }
                catch {
                    Write-Warning "curl not found"
                    exit
                }
            }
            default {
                write-verbose "Sorry, rome was not build in one day"
                exit
            }
            'default' {
                write-verbose "unknown linux OS"
                break
            }
        }
    }
    else {
        write-verbose "error detecting OS"
    }

    $Object = New-Object -TypeName psobject
    $Object | Add-Member -MemberType NoteProperty -Name OSVersion -Value $OS_Version
    $Object | Add-Member -MemberType NoteProperty -Name OSType -Value $deploy_os_type
    $Object | Add-Member -MemberType NoteProperty -Name Webrequestor -Value $webrequestor
    Write-Output $Object
}
if ($Environment -eq "AzureStack" -and (get-runningos).OSType -ne "win_x86_64") {
    Write-Warning "can only deploy to stack from Windows with full AzureRM modules"
    Write-Host "Current Environment: $Environment"
    Write-Host "Current OSType $((get-runningos).OSType)"
    Break
}

$DIRECTOR_CONF_FILE = "$HOME/director_$($resourceGroup).json"   

Push-Location $PSScriptRoot


if (!(test-path -Path "$($HOME)/opsman.pub")) {
    if ($openSSH = (Get-Command ssh-keygen.exe -ErrorAction SilentlyContinue).source) {
        Write-Host "Using $openSSH to create OpsManager VM SSH keypair"
        ssh-keygen.exe -t rsa -f $HOME/opsman -C ubuntu -N """" -Q
    }
    elseif ($openSSH = (Get-Command 'C:\Program Files\Git\usr\bin\ssh-keygen.exe' -ErrorAction SilentlyContinue).source) {
        Write-Host "Using $openSSH to create OpsManager VM SSH keypair"
        .$OpenSSH -t rsa -f $HOME/opsman -C ubuntu -N '""' -q
    }
    else {    
        write-host "ssh-keygen not found and no Required $($HOME)/opsman.pub key installed
        not found. you may want to:
         - use ssh-keygen from git-bash
         - on Windows 10 / Server 2019 use openssh client
         - Use WSL to Create the keypair
        

        create a key:
        ssh-keygen -t rsa -f $HOME/opsman -C ubuntu
        "
        Pop-Location
        Break
    }
}
if (!(test-path -Path "$($HOME)/root.pem") -and $dnsdomain -eq "azurestack.external") {
    write-host "Assuming ASDK, Required $($HOME)/root.pem for ASDK not found.
    We need the Azurestack Root CA in pem format as root.pem. If on ASDK, please export from ESRC, otherwise see your Admin"
    Pop-Location
    Break
}

if (!(test-path -Path "$($HOME)/$($dnsZoneName).crt")) {
    write-host "Required$($HOME)/$($dnsZoneName).crt not found. 
    Now Generating Self Signed Certificates
    "
    $command = "$ScriptDir/create_certs.ps1 -PCF_SUBDOMAIN_NAME $PCF_SUBDOMAIN_NAME -PCF_DOMAIN_NAME $($location).$($dnsdomain) -OM_TARGET $OM_TARGET"
    Write-Host "Now running $command"
    Invoke-Expression -Command $command
}

if (!(test-path -Path "$($HOME)/$($dnsZoneName).key")) {
    write-host "Required$($HOME)/$($dnsZoneName).key not found. 
    Now Generating Self Signed Certificates
    "
    $command = "$ScriptDir/create_certs.ps1 -PCF_SUBDOMAIN_NAME $PCF_SUBDOMAIN_NAME -PCF_DOMAIN_NAME $($location).$($dnsdomain) -OM_TARGET $OM_TARGET"
    Write-Host "Now running $command"
    Invoke-Expression -Command $command
}

if (!(test-path -Path "$($HOME)/$($OM_TARGET).key")) {
    write-host "Required$($HOME)/$($OM_TARGET).key not found. 
    Now Generating Self Signed Certificates
    "
    $command = "$ScriptDir/create_certs.ps1 -PCF_SUBDOMAIN_NAME $PCF_SUBDOMAIN_NAME -PCF_DOMAIN_NAME $($location).$($dnsdomain) -OPSMANFQDNPREFIX $OpsManFQDNPrefix"
    Write-Host "Now running $command"
    Invoke-Expression -Command $command
}

if (!(test-path -Path "$($HOME)/$($OM_TARGET).crt")) {
    write-host "Required$($HOME)/$($OM_TARGET).crt not found. 
    Now Generating Self Signed Certificates
    "
    $command = "$ScriptDir/create_certs.ps1 -PCF_SUBDOMAIN_NAME $PCF_SUBDOMAIN_NAME -PCF_DOMAIN_NAME $($location).$($dnsdomain) -OM_TARGET $OM_TARGET"
    Write-Host "Now running $command"
    Invoke-Expression -Command $command
}

# The SSH Key for OpsManager
$OPSMAN_SSHKEY = Get-Content "$HOME/opsman.pub"
$dnsZoneName = "$PCF_SUBDOMAIN_NAME.$Location.$dnsdomain"
$blobbaseuri = (Get-AzureRmContext).Environment.StorageEndpointSuffix
$BaseNetworkVersion = [version]$subnet.IPAddressToString
$mask = "$($BaseNetworkVersion.Major).$($BaseNetworkVersion.Minor)"
$infrastructure_cidr = "$mask.8.0/26"
$infrastructure_range = "$mask.8.1-$mask.8.10"
$infrastructure_gateway = "$mask.8.1"
$internal_lb_cidr = "$mask.8.64/28"
$internal_lb_range = "$mask.8.65-$mask.8.69"
$internal_lb_gateway = "$mask.8.65"
$pas_cidr = "$Mask.0.0/22"
$pas_range = "$mask.0.1-$mask.0.10"
$pas_gateway = "$mask.0.1"
$services_cidr = "$Mask.4.0/22"
$services_range = "$mask.4.1-$mask.4.10"
$services_gateway = "$mask.4.1"

Write-Host "Using the following Network Assignments:" -ForegroundColor Magenta
Write-Host "$resourceGroup-virtual-network/$resourceGroup-infrastructure-subnet  : cidr $infrastructure_cidr,exclude_range $infrastructure_range,gateway $infrastructure_gateway"
Write-Host "$resourceGroup-virtual-network/$resourceGroup-services-subnet        : cidr $services_cidr,exclude_range $services_range,gateway $services_gateway"
Write-Host "$resourceGroup-virtual-network/$resourceGroup-pas-subnet             : cidr $pas_cidr,exclude_range $pas_range,gateway $pas_gateway"
Write-Host "$resourceGroup-virtual-network/$resourceGroup-lb-subnet              : cidr $internal_lb_cidr,exclude_range $internal_lb_range,gateway $internal_lb_gateway"
Write-Host "$($opsManFQDNPrefix)green $Mask.8.4/32"
Write-Host "$($opsManFQDNPrefix)blue $Mask.8.5/32"
Write-Host "Selected loadbalancer type is $PCFlbType"
Write-Host "Using $Authentication as Identity provider for Azure"
Write-Host

if ($PsCmdlet.ParameterSetName -eq "install") {
    if ($tiles) {
        [switch]$PAS_AUTOPILOT = $true
        if ($tiles -contains 'p-spring-cloud-services') {
            $tiles = ('pivotal-mysql', 'p-rabbitmq', 'p-spring-cloud-services') + $tiles
            $tiles = $tiles | Select-Object -Unique
            if ($compute_instances -lt 2) {
                $compute_instances = 2
            }
        }
        if ($tiles -contains 'dataflow') {
            $tiles = ('pivotal-mysql', 'p-rabbitmq', 'p-redis', 'p-dataflow') + $tiles
            $tiles = $tiles | Select-Object -Unique
        }
        if ($tiles -contains 'azure-service-broker') {
            if (!$env_vars.AZURE_CLIENT_ID `
                    -or !$env_vars.AZURE_CLIENT_SECRET `
                    -or !$env_vars.AZURE_REGION `
                    -or !$env_vars.AZURE_SUBSCRIPTION_ID `
                    -or !$env_vars.AZURE_TENANT_ID `
                    -or !$env_vars.AZURE_DATABASE_ENCRYPTION_KEY  
            ) {
                Write-Host -ForegroundColor White "Microsoft Azure Service Broker needs
                AZURE_CLIENT_ID 
                AZURE_CLIENT_SECRET 
                AZURE_REGION 
                AZURE_SUBSCRIPTION_ID 
                AZURE_TENANT_ID
                AZURE_DATABASE_ENCRYPTION_KEY
to be set correctly with role `contributor`for the Service Principal at the AZURE subscription level"
                Pop-Location
                break
            }

  
        } 
        Write-Host -ForegroundColor White -NoNewline "Going to deploy PCF $PASTYPE with the Following Tiles: "
        Write-Host -ForegroundColor Green  "$($tiles -join ",")"
    }
    elseif ($PAS_AUTOPILOT.IsPresent) {
        Write-Host -ForegroundColor White "Going to deploy PCF $PASTYPE without Tiles"
    }    

}

if (!$boshstorageaccount) {
    $boshstorageaccount = 'boshstorage'
    $boshstorageaccount = ($resourceGroup + $boshStorageaccount) -Replace '[^a-zA-Z0-9]', ''
    $boshstorageaccount = ($boshStorageaccount.subString(0, [System.Math]::Min(23, $boshstorageaccount.Length))).tolower()
}
$opsManVHD = Split-Path -Leaf $opsmanager_uri
$opsmanVersion = $opsManVHD -replace ".vhd", ""
Write-host "Preparing to deploy OpsMan $opsmanVersion for $deploymentcolor deployment" -ForegroundColor $deploymentcolor
$storageType = 'Standard_LRS'
$StopWatch_prepare = New-Object System.Diagnostics.Stopwatch
$StopWatch_deploy = New-Object System.Diagnostics.Stopwatch
$StopWatch_prepare.Start()
if (!$OpsmanUpdate) {
    Write-Host "==>Creating ResourceGroups $resourceGroup" -nonewline   
   New-AzureRmResourceGroup -Name $resourceGroup -Location $location -Force -ErrorAction SilentlyContinue | Out-Null
    Write-Host -ForegroundColor green "[done]"
    Write-Host "==>Assigning Contributer Role for /subscriptions/$((Get-AzureRmContext).Subscription.Id) to client_id $($env_vars.client_id)" -nonewline   
    New-AzureRmRoleAssignment -Scope "/subscriptions/$((Get-AzureRmContext).Subscription.Id)" `
        -ServicePrincipalName $env_vars.client_id `
        -RoleDefinitionName Contributor -ErrorAction SilentlyContinue | Out-Null
    Write-Host -ForegroundColor green "[done]"
    if ((get-runningos).OSType -eq 'win_x86_64' -or $Environment -ne 'AzureStack') {
        $account_available = Get-AzureRmStorageAccountNameAvailability -Name $ImageStorageAccount -ErrorAction SilentlyContinue
        $account_free = $account_available.NameAvailable
    }
    else {
        Write-Warning "we have a netcore bug with azurestack and can not test stoprageaccount availabilty"
        $account_free = $true
    }
    # bug not working in netcore against azurestack, as we can not set profiles :-( 
    # waiting for new az netcore module with updated api profiles
    # new 
    if ($account_free -eq $true) {

        Write-Host "==>Creating StorageAccount $ImageStorageAccount"
        if ((get-runningos).OSType -eq 'win_x86_64' -or $Environment -ne 'AzureStack') {
            ## test RG
            try {
                Write-Host -ForegroundColor White -NoNewline "Checking for RG $image_rg "
                $RG = Get-AzureRmResourceGroup -Name $image_rg -Location local -ErrorAction Stop  
            }
            catch {
                Write-Host -ForegroundColor yellow [need to create]
                Write-Host -ForegroundColor White -NoNewline "Creating Image RG $image_rg"        
                $RG = New-AzureRmResourceGroup -Name $image_rg -Location $location
                Write-Host -ForegroundColor Green [Done]
            }
            $new_acsaccount = New-AzureRmStorageAccount -ResourceGroupName $image_rg `
                -Name $ImageStorageAccount -Location $location `
                -Type $storageType # -ErrorAction SilentlyContinue
            if (!$new_acsaccount) {
                $new_acsaccount = Get-AzureRmStorageAccount -ResourceGroupName $image_rg | Where-Object StorageAccountName -match $ImageStorageAccount
            }    
            $new_acsaccount | Set-AzureRmCurrentStorageAccount
            Write-Host "Creating Container `"$image_containername`" in $($new_acsaccount.StorageAccountName)"
            New-AzureStorageContainer -Name $image_containername -Permission blob |  Out-Null
        }
        else {
            write-host "Scenario currently not supported"
            BREAK
            New-AzureRmResourceGroupDeployment -TemplateFile $PSScriptRoot/createstorageaacount.json -ResourceGroupName $resourceGroup -storageAccountName $ImageStorageAccount
        }
        Write-Host -ForegroundColor green "[done]"
    }
    else {
        Write-Host "$ImageStorageAccount already exists, operations might fail if not owner in same location" 
    }  
}
$urlOfUploadedImageVhd = ('https://' + $ImageStorageAccount + '.blob.' + $blobbaseuri + '/' + $image_containername + '/' + $opsManVHD)
Write-Host "Starting upload Procedure for $opsManVHD into storageaccount $ImageStorageAccount, this may take a while"
if ($Environment -eq 'AzureStack') {
    Write-Host "==>Checking OS Transfer Type" -nonewline 
    $transfer_type = (get-runningos).Webrequestor
    Write-Host -ForegroundColor Green "[using $transfer_type for transfer]"
    $file = split-path -Leaf $opsmanager_uri
    $localPath = "$Downloadpath/$file"
    if (!(Test-Path $localPath) -and !($DO_NOT_DOWNLOAD.IsPresent)) {
        switch ($transfer_type) {
            ".Net" {  
                Start-BitsTransfer -Source $opsmanager_uri -Destination $localPath -DisplayName OpsManager
            }
            Default {
                curl -o $localPath $opsmanager_uri
            }
        }
    }  
    try {
        $new_arm_vhd = Add-AzureRmVhd -ResourceGroupName $image_rg -Destination $urlOfUploadedImageVhd `
            -LocalFilePath $localPath -OverWrite:$false -ErrorAction Stop
    }
    catch [InvalidOperationException] {
        Write-Warning "Image already exists for $opsManVHD, not overwriting"
    }
    <#
    catch [CloudException] {
        Write-Warning " we make and educated guess that we use in-region copy"
    }#>
    catch {
        Write-Warning "Unknown Exception"
        $_
        break
    }

}
else {
    # Blob Copy routine
    $src_context = New-AzureStorageContext -StorageAccountName opsmanagerwesteurope -Anonymous
    $dst_context = (Get-AzureRmStorageAccount -ResourceGroupName $image_rg -Name $ImageStorageAccount).context
    ## check for blob
    Write-Host "==>Checking blob $opsManVHD exixts in container $image_containername for Storageaccount $ImageStorageAccount" -NoNewline
    $ExistingBlob = Get-AzureStorageBlob -Context $dst_context -Blob $opsManVHD -Container $image_containername -ErrorAction SilentlyContinue
    if (!$ExistingBlob) {
        Write-Host -ForegroundColor Green "[blob needs to be uploaded]"
        # check container
        Write-Host "==>Checking container $image_containername exists for Storageaccount $ImageStorageAccount" -NoNewline
        $ContainerExists = (Get-AzureStorageContainer -Name $image_containername -Context $dst_context -ErrorAction SilentlyContinue)
        If (!$ContainerExists) {
            Write-Host -ForegroundColor Green "[creating container]"
            $container = New-AzureStorageContainer -Name $image_containername -Permission Off -Context $dst_context            
        }
        else {
            Write-Host -ForegroundColor blue "[container already exists]"
        }
        Write-Host "==>copying $opsManVHD into Storageaccount $ImageStorageAccount" -NoNewline
        $copy = Get-AzureStorageBlob -Container images -Blob $opsManVHD -Context $src_context | `
            Start-AzureStorageBlobCopy -DestContainer $image_containername -DestContext $dst_context
        $complete = $copy | Get-AzureStorageBlobCopyState -WaitForComplete
        Write-Host -ForegroundColor green "[done copying]"
    }
    else {
        Write-Host -ForegroundColor Blue "[blob already exixts]"
    }
}

<## next section will be templated soon
Write-Host "==>Creating Custom Image $opsmanVersion in ResourceGroup $resourceGroup" -nonewline   

$imageConfig = New-AzureRmImageConfig `
-Location $location
$imageConfig = Set-AzureRmImageOsDisk `
-Image $imageConfig `
-OsType Linux `
-OsState Generalized `
-BlobUri $urlOfUploadedImageVhd `
-DiskSizeGB 127 `
-Caching ReadWrite
$newImage = New-AzureRmImage `
-ImageName $opsmanVersion `
-ResourceGroupName $resourceGroup `
-Image $imageConfig
Write-Host -ForegroundColor green "[done]"
## end template soon #>

$StopWatch_prepare.Stop()
if ($RegisterProviders.isPresent) {
    foreach ($provider in
        ('Microsoft.Compute',
            'Microsoft.Network',
            'Microsoft.Storage')
    ) {
        Get-AzureRmResourceProvider -ProviderNamespace $provider | Register-AzureRmResourceProvider
    }
}
if ( $useManagedDisks.IsPresent) {
    $ManagedDisks = "yes"
}
else {
    $ManagedDisks = "no" 
}
$parameters = @{}
$parameters.Add("SSHKeyData", $OPSMAN_SSHKEY)
$parameters.Add("opsManFQDNPrefix", $opsManFQDNPrefix)
$parameters.Add("opsManVHD", $opsManVHD)
$parameters.Add("deploymentcolor", $deploymentcolor)
$parameters.Add("mask", $mask)
$parameters.Add("location", $location)
$parameters.Add("OpsManImageURI", $urlOfUploadedImageVhd)


$StopWatch_deploy.Start()
#     $parameters.Add("storageEndpoint", "blob.$blobbaseuri")

Write-host "Starting deployment of PCF Control Plane using ARM template and  $deploymentcolor deployment of $opsManFQDNPrefix $opsmanVersion" -ForegroundColor $deploymentcolor
if (!$OpsmanUpdate) {
    $parameters.Add("dnsZoneName", $dnsZoneName)
    $parameters.Add("boshStorageAccountName", $boshstorageaccount)
    $parameters.Add("Environment", $Environment)
    $parameters.Add("pcflbConnection", $PCFlbType)
    $parameters.Add("useManagedDisks", $ManagedDisks)
    
 
    if ($TESTONLY.IsPresent) {
        Test-AzureRmResourceGroupDeployment -ResourceGroupName $resourceGroup -Mode Incremental -TemplateFile $PSScriptRoot/azuredeploy.json -TemplateParameterObject $parameters
    }
    else {
        New-AzureRmResourceGroupDeployment -Name $resourceGroup -ResourceGroupName $resourceGroup -Mode Incremental -TemplateFile $PSScriptRoot/azuredeploy.json -TemplateParameterObject $parameters
        $MyStorageaccount = Get-AzureRmStorageAccount -ResourceGroupName $resourceGroup | Where-Object StorageAccountName -match $boshstorageaccount
        $MyStorageaccount | Set-AzureRmCurrentStorageAccount
        Write-Host "Creating Container Stemcell in $($MyStorageaccount.StorageAccountName)"
        $Container = New-AzureStorageContainer -Name stemcell -Permission Blob
        Write-Host  "Creating Container bosh in $($MyStorageaccount.StorageAccountName)"
        $Container = New-AzureStorageContainer -Name bosh
        Write-Host "Creating Table Stemcells in $($MyStorageaccount.StorageAccountName)"
        $Table = New-AzureStorageTable -Name stemcells
        if (!$useManagedDisks.IsPresent) {
            $Storageaccounts = Get-AzureRmStorageAccount -ResourceGroupName $resourceGroup | Where-Object StorageAccountName -match Xtra
            
            foreach ($Mystorageaccount in $Storageaccounts) {
                $MyStorageaccount | Set-AzureRmCurrentStorageAccount
                Write-Host "Creating Container Stemcell in $($MyStorageaccount.StorageAccountName)"
                $Container = New-AzureStorageContainer -Name stemcell -Permission Blob
                Write-Host "Creating Container bosh in $($MyStorageaccount.StorageAccountName)"
                $Container = New-AzureStorageContainer -Name bosh
            }
            $deployment_storage_account = $MyStorageaccount.StorageAccountName
            $deployment_storage_account = $deployment_storage_account -replace ".$"
            $deployment_storage_account = "*$($deployment_storage_account)*"    
        }
        $MYSQLStorageaccount = Get-AzureRmStorageAccount -ResourceGroupName $resourceGroup | Where-Object StorageAccountName -match mysqlstrg
        $MYSQLStorageaccount | Set-AzureRmCurrentStorageAccount
        Write-Host "Creating Container backups in $($MYSQLStorageaccount.StorageAccountName)"
        $Container = New-AzureStorageContainer -Name backups -Permission Blob
        $MYSQL_KEY = $MYSQLStorageaccount | Get-AzureRmStorageAccountKey
        $mysql_storage_account = $MYSQLStorageaccount.StorageAccountName
        $mysql_storage_key = $MYSQL_KEY[0].Value
        Write-Host "Creating Director Environment $DIRECTOR_CONF_FILE"
        # will create director.json for future
        $JSon = [ordered]@{
            OM_TARGET                = "$OM_TARGET"
            domain                   = "$($location).$($dnsdomain)"
            PCF_SUBDOMAIN_NAME       = $PCF_SUBDOMAIN_NAME
            boshstorageaccountname   = $boshstorageaccount 
            RG                       = $resourceGroup
            mysqlstorageaccountname  = $mysql_storage_account
            mysql_storage_key        = $mysql_storage_key
            deploymentstorageaccount = $deployment_storage_account
            pas_cidr                 = $pas_cidr
            pas_range                = $pas_range
            pas_gateway              = $pas_gateway 
            infrastructure_range     = $infrastructure_range
            infrastructure_cidr      = $infrastructure_cidr 
            infrastructure_gateway   = $infrastructure_gateway
            services_cidr            = $services_cidr
            services_gateway         = $services_gateway
            services_range           = $services_range
            downloaddir              = $downloadpath
            force_product_download   = $force_product_download.IsPresent.ToString()
            branch                  = $branch
            Authentication          = $Authentication
        } | ConvertTo-Json
        $JSon | Set-Content $DIRECTOR_CONF_FILE


        Write-Host "now we are going to try and configure OpsManager"
        if (!$DO_NOT_CONFIGURE_OPSMAN.IsPresent) {
            $StopWatch_deploy_opsman = New-Object System.Diagnostics.Stopwatch
            $StopWatch_deploy_opsman.Start()
            if ($DO_NOT_APPLY.IsPresent) {
                $command = "$ScriptDir/init_om.ps1 -DIRECTOR_CONF_FILE $DIRECTOR_CONF_FILE -DO_NOT_APPLY"
            }
            elseif ($USE_MINIO.IsPresent) {
                $command = "$ScriptDir/init_om.ps1 -DIRECTOR_CONF_FILE $DIRECTOR_CONF_FILE -USE_MINIO"    
            }
            else {
                $command = "$ScriptDir/init_om.ps1 -DIRECTOR_CONF_FILE $DIRECTOR_CONF_FILE"    
            }
            switch ($branch)
            {
                '2.6' {
                    $stemcell = '315'
                }                
                '2.5' {
                    $stemcell = '250'
                }
                '2.4' {
                    $stemcell = '170'
                } 
                default {
                    $stemcell = "97"
                }   

            }
            switch ($pastype){
            'cf' {
                $compute_instances = [math]::ceiling($compute_instances/3)*3
            }
}
            Write-Host "Calling $command" 
            Invoke-Expression -Command $Command | Tee-Object -Append -FilePath "$($HOME)/pcfdeployer/logs/init-om-$(get-date -f yyyyMMddhhmmss).log"
            $StopWatch_deploy_opsman.Stop()
            $DeployTimes += "opsman deployment took $($StopWatch_deploy_opsman.Elapsed.Hours) hours, $($StopWatch_deploy_opsman.Elapsed.Minutes) minutes and  $($StopWatch_deploy_opsman.Elapsed.Seconds) seconds"
            $ScriptHome = $PSScriptRoot
            if ($PAS_AUTOPILOT.IsPresent) {
                $StopWatch_deploy_stemcells = New-Object System.Diagnostics.Stopwatch
                $StopWatch_deploy_stemcells.Start()
                $command = "$ScriptDir/get-lateststemcells.ps1 -DIRECTOR_CONF_FILE $DIRECTOR_CONF_FILE -Families 97,170,250"
                Write-Host "Calling $command" 
                Invoke-Expression -Command $Command | Tee-Object -Append -FilePath "$($HOME)/pcfdeployer/logs/stemcells-$(get-date -f yyyyMMddhhmmss).log"
                $StopWatch_deploy_stemcells.Stop()
                $DeployTimes += "Stemcell deployment took $($StopWatch_deploy_stemcells.Elapsed.Hours) hours, $($StopWatch_deploy_stemcells.Elapsed.Minutes) minutes and  $($StopWatch_deploy_stemcells.Elapsed.Seconds) seconds"
                
                $StopWatch_deploy_pas = New-Object System.Diagnostics.Stopwatch
                $StopWatch_deploy_pas.Start()
                if (($tiles) -or ($DO_NOT_APPLY.IsPresent)) {
                    $command = "$ScriptHome/scripts/deploy_pas.ps1 -PRODUCT_NAME $PASTYPE -DIRECTOR_CONF_FILE $DIRECTOR_CONF_FILE -compute_instances $compute_instances -DO_NOT_APPLY"
                }
                else {
                    $command = "$ScriptHome/scripts/deploy_pas.ps1 -PRODUCT_NAME $PASTYPE -DIRECTOR_CONF_FILE $DIRECTOR_CONF_FILE -compute_instances $compute_instances"
                }
                Write-Host "Calling $command" 
                Invoke-Expression -Command $Command | Tee-Object -Append -FilePath "$($HOME)/pcfdeployer/logs/pas-$(get-date -f yyyyMMddhhmmss).log"
                $StopWatch_deploy_pas.Stop()
                $DeployTimes += "PAS deployment took $($StopWatch_deploy_pas.Elapsed.Hours) hours, $($StopWatch_deploy_pas.Elapsed.Minutes) minutes and  $($StopWatch_deploy_pas.Elapsed.Seconds) seconds"


                $StopWatch_deploy = New-Object System.Diagnostics.Stopwatch
                if ($tiles) {            
                    $StopWatch_deploy.Start()
                    if ($DO_NOT_APPLY.IsPresent)
                        {
                    $command = "$ScriptHome/scripts/tile_deployer.ps1 -DIRECTOR_CONF_FILE $DIRECTOR_CONF_FILE -tiles $($tiles -join ',') -DO_NOT_APPLY"
                    }
                    else {
                        $command = "$ScriptHome/scripts/tile_deployer.ps1 -DIRECTOR_CONF_FILE $DIRECTOR_CONF_FILE -tiles $($tiles -join ',')"
                    }
                    Write-Host "Calling $command" 
                    Invoke-Expression -Command $Command | Tee-Object -Append -FilePath "$($HOME)/pcfdeployer/logs/deployment-$(get-date -f yyyyMMddhhmmss).log"
                    $StopWatch_deploy.Stop()
                    $DeployTimes += "$tile deployment took $($StopWatch_deploy.Elapsed.Hours) hours, $($StopWatch_deploy.Elapsed.Minutes) minutes and  $($StopWatch_deploy.Elapsed.Seconds) seconds"
                }
            }    
        }
    }
}
else {
    if ($TESTONLY.IsPresent) {
        Test-AzureRmResourceGroupDeployment `
            -ResourceGroupName $resourceGroup -Mode Incremental -TemplateFile .\azuredeploy_update.json `
            -TemplateParameterObject $parameters
    }
    else {
        New-AzureRmResourceGroupDeployment -Name OpsManager `
            -ResourceGroupName $resourceGroup -Mode Incremental -TemplateFile .\azuredeploy_update.json `
            -TemplateParameterObject $parameters
    }  
 
}
$StopWatch_deploy.Stop()

Write-Host "Preparation and BLOB copy job took $($StopWatch_prepare.Elapsed.Hours) hours, $($StopWatch_prepare.Elapsed.Minutes) minutes and $($StopWatch_prepare.Elapsed.Seconds) seconds" -ForegroundColor Magenta
Write-Host "Deployment took $($StopWatch_deploy.Elapsed.Hours) hours, $($StopWatch_deploy.Elapsed.Minutes) minutes and  $($StopWatch_deploy.Elapsed.Seconds) seconds" -ForegroundColor Magenta
$DeployTimes
Pop-Location