b3f609b5a6
Bicep refactor ( #470 )
...
* deployment names + LAW sku
* bumping acr import
* deployment name limit
* better string trimming.
* descriptive managed id name
* bumping k8s version
* api version bumps
* linter warnings
* ContainerLogV2 parent
* adding v2configmap to gitignore
* requestRoutingRule priority
2023-03-16 10:37:07 +00:00
1cb427e27b
Helper: Windows refinements ( #513 )
...
* Create aspnetapp.yml
* removing push trigger
* removing windows 2019 as an option
Signed-off-by: Gordonby <gordon.byers@microsoft.com>
* stopping kubenet + windows
Signed-off-by: Gordonby <gordon.byers@microsoft.com>
* more windows guidance
Signed-off-by: Gordonby <gordon.byers@microsoft.com>
* error message tidying
Signed-off-by: Gordonby <gordon.byers@microsoft.com>
* typo
Signed-off-by: Gordonby <gordon.byers@microsoft.com>
* margin
---------
Signed-off-by: Gordonby <gordon.byers@microsoft.com>
2023-02-22 12:50:46 +00:00
2551c271d8
Broken Link fix and Automated Workflow Broken Link Checker ( #366 )
...
* Create brokenlinks.yml
* broken link checker
* adding prodtest
* added preview fix
* remove broken link issue creator
* refined the workflows
2022-09-06 12:08:03 +01:00
d0fce515ed
Adding NSG's for custom vnet ( #234 )
...
* initial work on generic subjects and appgw refactor
* Further testing and refactor
* privarte cluster dns fix
* removing unused var
* nameing and GW ports
* Fixing port number
* reverting changes for main.bicep
* added param config for managed - public cluster
* trying with latest az cli
* Adding taints to peered vnet sample
* Successful creation of flow logs
* added basic ui for NSGs
* Added deploy param logic for params
* bastion host sku
* Nsg cluster refinement
* typo "NSG's"
* region workflow param
* res name - debug
* param augmentation
* param declaration typo
* updating location region
* Setting outputs
* region env var
* moving $RG scope
* Default val comment
* Refactoring the troubleshooting jobs
* updated path to ruworkflow
* removed invalid job
* renamed akstroubleshooting.yml
* Infra destroy needs
* try empty env
* debug out varriables
* remove doDebugSteps
* AKS null check
* enhance resname
* region to choice type
* debug job skipping
* playing with condition
* rg
* inputs.
* condition testing
* cluster resource name crop
* condition tweaks
* updated needs param
* env scope
* az cli version
* condition update
* agic pod name
* pwsh variables
* env var refactor
* continue on agic failure
* Enabled traffic analytics
* Adding Traffic Analytics parameter in nsg.bicep
* dependant job typo
* agname typo
* Added basic flow log queries
* region name typo
* added rbac note
* post deploy delay
* delay condition
* condition typo
* post deploy delay
* List available.
* trying az cli
* reformat
* environment fix
* add run cmd param
* private ci to use run cmd
* bicep warnings and private workflow testing
Signed-off-by: Gordonby <gordon.byers@microsoft.com>
* kubelogin bump
Signed-off-by: Gordonby <gordon.byers@microsoft.com>
* az cli 2.36.0
Signed-off-by: Gordonby <gordon.byers@microsoft.com>
* workflow troubleshooting
Signed-off-by: Gordonby <gordon.byers@microsoft.com>
* added appinstall to test_
Signed-off-by: Gordonby <gordon.byers@microsoft.com>
* SetupWF
Signed-off-by: Gordonby <gordon.byers@microsoft.com>
* rg
Signed-off-by: Gordonby <gordon.byers@microsoft.com>
* jsonOut
Signed-off-by: Gordonby <gordon.byers@microsoft.com>
* port 22 nsg aks subnet block
Signed-off-by: Gordonby <gordon.byers@microsoft.com>
* agic debug
Signed-off-by: Gordonby <gordon.byers@microsoft.com>
* pod cmd
Signed-off-by: Gordonby <gordon.byers@microsoft.com>
* describe agic
Signed-off-by: Gordonby <gordon.byers@microsoft.com>
* pod logs
Signed-off-by: Gordonby <gordon.byers@microsoft.com>
* typos
Signed-off-by: Gordonby <gordon.byers@microsoft.com>
* podlogs
Signed-off-by: Gordonby <gordon.byers@microsoft.com>
* agiclogs
Signed-off-by: Gordonby <gordon.byers@microsoft.com>
* consolidate steps
Signed-off-by: Gordonby <gordon.byers@microsoft.com>
* good config for edge K8S testing
Signed-off-by: Gordonby <gordon.byers@microsoft.com>
* remove Write-Output $DenyLogs[0].Count - null problem
Signed-off-by: Gordonby <gordon.byers@microsoft.com>
* bumping k8s version to be the same as the portal default
Signed-off-by: Gordonby <gordon.byers@microsoft.com>
* bumping AzureVote Helm chart version
Signed-off-by: Gordonby <gordon.byers@microsoft.com>
* flow log, continue on deny
Signed-off-by: Gordonby <gordon.byers@microsoft.com>
* null issue
Signed-off-by: Gordonby <gordon.byers@microsoft.com>
* AGIC image version
Signed-off-by: Gordonby <gordon.byers@microsoft.com>
* inputs.USERUNCMD
Signed-off-by: Gordonby <gordon.byers@microsoft.com>
* debug log query
Signed-off-by: Gordonby <gordon.byers@microsoft.com>
* testing byo early k8s version
Signed-off-by: Gordonby <gordon.byers@microsoft.com>
* remove kubernetesVersion
* k8s default v for BYO
Signed-off-by: Gordonby <gordon.byers@microsoft.com>
* agic usrruncmd
Signed-off-by: Gordonby <gordon.byers@microsoft.com>
* netflow continue on error
Signed-off-by: Gordonby <gordon.byers@microsoft.com>
* removing local dev sample
Signed-off-by: Gordonby <gordon.byers@microsoft.com>
* styling the checkboxes
2022-05-10 12:29:08 +01:00
def467e9cc
Add Default Deny Network Policy ( #179 )
...
* Getting byoPrivateCi to use Refactored AzVoteApp
* UI Changes to produce Post Script network policy change
* clarified networkpolicywording
* Adding internet NSG Http in rule
* Adding auto compiled bicep json
* updated netpolicy with comment
* additional logs on clusterissuer
* set default in config.json
* added support for run command
* updated branch refs to release
* stopping using privatepool for param template params
2022-01-13 09:46:42 +00:00
c77d8a15c5
Addressing Well Architected Framework gaps ( #149 )
...
* first cut of WAF rule gaps
* introducing capturing of azcmds to file
* updating ResourceGroup Name in UI
* path problem and cmd replace
* oops. token mistake
* shifting to complete mode deployment
* adding conditions to cover forks
* Making full deployment optional in a manual run
* Excluding Azure.AppGw.UseHTTPS rule as AGIC managed
* More WAF param tweaks for better coverage
* shifted disableLocalAccounts to param
* param metadata
* changing default of AksDisableLocalAccounts to false.
* added ui and playwrite test for disabledlocalaccounts
* disabling local accounts for basic cluster
* removing the use of admin local account login
* using aks-se
* download kubelogin binary
* Kubelogin
* Changing RG used by Publish actions to be dedicated.
* setting aksDisableLocalAccounts for the WAF param config
* bumping template version in web app
* case issue with aksDisableLocalAccounts
* implementing keiths suggestion of default value cover on the new param.
* removing invalid inputProps from TextFields
* fixing != !== issue i spotted in the jscode
* fixed up playwright test to be better
* userauth cspell dictionary update
2021-12-07 12:11:34 +00:00
03fba9c74c
Setting length limit on the cluster name in Web App ( #104 )
...
* Kubectl added to Dev container
* Cluster name limit in the webapp
* Swap dev container to ubuntu to support playwright
2021-11-04 10:43:39 +00:00
16df724d7b
Added Private IP AppGw frontend config ( #17 )
...
* Adding AppGwPrivate Config
* Fixed config for both private/public
2021-07-09 07:27:00 +01:00
a12e5e342e
fix params and add external-dns links
2021-06-28 16:13:29 +01:00
Gordon Byers
keith