Subnet Management

POST /api/azure/subnet/create
Content-Type: application/json

{
  "subscriptionId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
  "rgName": "my-resource-group",
  "vnetName": "my-vnet",
  "subnetName": "web-subnet",
  "addressPrefix": "10.0.1.0/24"
}

def subnet_create():
    credential = FlaskCredential()
    network_client = NetworkManagementClient(credential, subscription_id)
    
    poller = network_client.subnets.begin_create_or_update(
        rg,
        vnet,
        subnet_name,
        {"address_prefix": address_prefix}
    )
    result = poller.result()  # Wait for completion

{
  "message": "✅ Utworzono subnet: web-subnet w VNet: my-vnet",
  "subnet": "web-subnet"
}

{
  "error": "Brak wymaganych danych"
}

{
  "error": "Unauthorized"
}

{
  "error": "Detailed error from Azure SDK"
}

for subnet in nt_client.subnets.list(rg_name, vnet_name):
    vnet_info["subnets"].append(subnet.name)

POST /api/gcp/subnet/create
Content-Type: application/json

{
  "projectId": "my-gcp-project",
  "region": "us-central1",
  "vpcName": "my-vpc",
  "subnetName": "us-central1-subnet",
  "ipCidrRange": "10.0.1.0/24"
}

def create_gcp_subnet():
    credentials = SessionCredentials(gcp_account)
    subnetworks_client = compute_v1.SubnetworksClient(credentials=credentials)
    
    network_url = f"projects/{project_id}/global/networks/{vpc_name}"
    
    subnet_resource = compute_v1.Subnetwork(
        name=subnet_name,
        ip_cidr_range=ip_cidr_range,
        network=network_url,
    )
    
    sub_create_request = compute_v1.InsertSubnetworkRequest(
        project=project_id,
        region=region,
        subnetwork_resource=subnet_resource,
    )
    
    operation = subnetworks_client.insert(request=sub_create_request)
    operation.result()  # Wait for completion

{
  "message": "Subnet 'us-central1-subnet' został pomyślnie utworzony w sieci 'my-vpc'."
}

{
  "error": "Pola 'projectId', 'region', 'vpcName', 'subnetName' oraz 'ipCidrRange' są wymagane."
}

{
  "error": "Nie znaleziono aktywnego konta GCP w sesji"
}

{
  "error": "Brak uprawnień do tworzenia subnetu w projekcie 'my-gcp-project' lub sieci 'my-vpc'. Szczegóły: ..."
}

{
  "error": "Sieć VPC 'my-vpc' nie została znaleziona w projekcie 'my-gcp-project'."
}

{
  "error": "Subnet o nazwie 'us-central1-subnet' już istnieje w regionie 'us-central1'."
}

subnet_request = compute_v1.AggregatedListSubnetworksRequest(project=project_id)
subnet_iterator = subnetworks_client.aggregated_list(request=subnet_request)

for region, response in subnet_iterator:
    if response.subnetworks:
        all_subnets_in_project[region] = list(response.subnetworks)

# Match subnets to their parent VPC
network_url_suffix = f"/{network.name}" 
for region, subnets_in_region in all_subnets_in_project.items():
    for subnet in subnets_in_region:
        if subnet.network.endswith(network_url_suffix):
            vpc_data["subnets"].append({
                "name": subnet.name,
                "region": region.split('/')[-1],
                "ipCidrRange": subnet.ip_cidr_range,
            })

VNet: prod-vnet (10.0.0.0/16)
├── frontend-subnet (10.0.1.0/24) - Web servers
├── backend-subnet (10.0.2.0/24) - Application servers
└── database-subnet (10.0.3.0/24) - Database servers

VPC: prod-vpc
├── us-central1-frontend (10.0.1.0/24) - Web tier
├── us-central1-backend (10.0.2.0/24) - App tier
└── us-central1-database (10.0.3.0/24) - Data tier

VPC: global-app-vpc
├── us-central1-app (10.1.0.0/20) - 4,092 IPs
├── europe-west1-app (10.2.0.0/20) - 4,092 IPs
└── asia-east1-app (10.3.0.0/20) - 4,092 IPs

VNet: dev-vnet (10.0.0.0/16)
├── dev-web (10.0.1.0/24)
├── dev-app (10.0.2.0/24)
└── dev-db (10.0.3.0/24)

VNet: prod-vnet (10.1.0.0/16)
├── prod-web (10.1.1.0/24)
├── prod-app (10.1.2.0/24)
└── prod-db (10.1.3.0/24)

Azure VNet: 10.0.0.0/16
├── 10.0.1.0/24
├── 10.0.2.0/24
└── 10.0.3.0/24

GCP VPC: 10.1.0.0/16
├── 10.1.1.0/24
├── 10.1.2.0/24
└── 10.1.3.0/24

Azure VNet: 10.0.0.0/16
└── 10.0.1.0/24

GCP VPC: 10.0.0.0/16  ❌ Overlaps with Azure!
└── 10.0.1.0/24       ❌ Same range!

Subnet: web-subnet
└── NSG: web-nsg
    ├── Allow HTTP (80) from Internet
    ├── Allow HTTPS (443) from Internet
    └── Deny all other inbound

VPC: prod-vpc
└── Firewall Rules
    ├── allow-http (target: web-subnet)
    ├── allow-ssh (target: admin-subnet)
    └── deny-all-ingress (priority: 65535)

subnet_resource = compute_v1.Subnetwork(
    name=subnet_name,
    ip_cidr_range=ip_cidr_range,
    network=network_url,
    private_ip_google_access=True  # Enable Private Google Access
)

if "access_token" not in session:
    return jsonify({"error": "Unauthorized"}), 401

accounts = session.get("accounts", [])
gcp_account = next((acc for acc in accounts if acc.get("provider") == "gcp"), None)

if not gcp_account or not gcp_account.get("refresh_token"):
    return jsonify({"error": "Authentication required"}), 401

# Check VNet address space
ntclient.virtual_networks.get(rg_name, vnet_name).address_space

# List existing subnets
ntclient.subnets.list(rg_name, vnet_name)

# Check if VPC exists
networks_client.get(project=project_id, network=vpc_name)

# List existing subnets in region
subnetworks_client.list(project=project_id, region=region)

# Expand from /24 to /23
subnet.ip_cidr_range = "10.0.1.0/23"  # Doubles available IPs
subnetworks_client.patch(...)