1# Bicep adapter
2 
3Production IaC, repeatable deployments, supports `az deployment group what-if` preview before commit.
4 
5## Template
6 
7Emit [`examples/bicep/main.bicep`](../../examples/bicep/main.bicep) alongside the README. Single-file template — no modules to wire. Parameters (`vmName`, `adminUsername`, `adminPublicKey` required; others have defaults).
8 
9Always emit `examples/bicep/README.md` next to the template so the artifact is self-contained (Plan Card, prereqs, quickstart, parameter table, cleanup).
10 
11## Deploy
12 
13```bash
14az deployment group what-if \
15  --resource-group {resourceGroup} \
16  --template-file main.bicep \
17  --parameters vmName={vmName} adminUsername={adminUsername} \
18               adminPublicKey="$(cat ~/.ssh/id_rsa.pub)"
19 
20az deployment group create \
21  --resource-group {resourceGroup} \
22  --template-file main.bicep \
23  --parameters vmName={vmName} adminUsername={adminUsername} \
24               adminPublicKey="$(cat ~/.ssh/id_rsa.pub)"
25```
26 
27Always run `what-if` first — it's free and surfaces any quota / role / naming conflict before the change lands.
28 
29## VMSS
30 
31Swap `Microsoft.Compute/virtualMachines@2024-07-01` for `Microsoft.Compute/virtualMachineScaleSets@2024-07-01`. Add `sku: { name: vmSize, capacity: instanceCount }`, `properties.orchestrationMode: 'Flexible'`, and move `osProfile` / `storageProfile` / `networkProfile` inside `properties.virtualMachineProfile`.
32 
33## Notes
34- Secure params (`adminPassword`, `adminPublicKey`) are `@secure()`; don't echo them in logs.
35- For `zone`, pass `'1'`/`'2'`/`'3'` to pin a zone, or `''` for regional. The template handles both via `empty(zone) ? null : [zone]`.
36- For private VMs, set `publicIPAllocationMethod` to nothing and drop the `publicIPAddress` block from the NIC.
37