terraform/ecc-azure-336-vmss_encryption_at_host/red/vmss.tf

resource "azurerm_linux_virtual_machine_scale_set" "this" {
  name                            = "lss${var.prefix}-red"
  resource_group_name             = azurerm_resource_group.this.name
  location                        = azurerm_resource_group.this.location
  sku                             = "Standard_B1s"
  disable_password_authentication = false
  admin_username                  = random_string.this.result
  admin_password                  = random_password.this.result
  instances                       = 1

  source_image_reference {
    publisher = "Canonical"
    offer     = "UbuntuServer"
    sku       = "16.04-LTS"
    version   = "latest"
  }

  os_disk {
    storage_account_type = "Standard_LRS"
    caching              = "ReadWrite"
  }

  network_interface {
    name    = "linuxvmssnic"
    primary = true

    ip_configuration {
      name      = "linuxvmssipconf"
      primary   = true
      subnet_id = azurerm_subnet.linuxvmss.id
    }
  }

  encryption_at_host_enabled = false

  tags = var.tags
}

resource "azurerm_windows_virtual_machine_scale_set" "this" {
  name                = "wss${var.prefix}"
  resource_group_name = azurerm_resource_group.this.name
  location            = azurerm_resource_group.this.location
  sku                 = "Standard_B1s"
  admin_username      = random_string.this.result
  admin_password      = random_password.this.result
  instances           = 1

  source_image_reference {
    publisher = "MicrosoftWindowsServer"
    offer     = "WindowsServer"
    sku       = "2016-Datacenter-Server-Core"
    version   = "latest"
  }

  os_disk {
    storage_account_type = "Standard_LRS"
    caching              = "ReadWrite"
  }

  network_interface {
    name    = "winvmssnic"
    primary = true

    ip_configuration {
      name      = "winvmssipconf"
      primary   = true
      subnet_id = azurerm_subnet.winvmss.id
    }
  }

  encryption_at_host_enabled = false

  tags = var.tags
}