зеркало из
1
0
Форкнуть 0

Added customer/tenant bootstrapping examples in cmdb.

This commit is contained in:
Harald Solstad Fianbakken 2020-09-09 07:37:46 +02:00
Родитель afa19c6a75
Коммит ef268ddd10
24 изменённых файлов: 582 добавлений и 0 удалений

1
.gitignore поставляемый
Просмотреть файл

@ -322,6 +322,7 @@ __pycache__/
*.odx.cs
*.xsd.cs
.vscode/
# OpenCover UI analysis results
OpenCover/

Просмотреть файл

@ -0,0 +1 @@
CustomerName;TenantName;TenantId;CSPSubscriptions;ManagedSubscriptions
1 CustomerName TenantName TenantId CSPSubscriptions ManagedSubscriptions

Просмотреть файл

@ -0,0 +1,41 @@
## Navigation Menu
* [Getting started](../../platform-automation#platform-automation---getting-started)
* [Landing zones](../../../docs/Landing-zones.md)
- [Artifacts](../../../docs/Artifacts.md)
- **Customers**
- [Multi tenant deployments](../../../docs/Multi-tenant-deployments.md)
* [Platform automation at scale](../../../docs/Platform-automation-at-scale.md)
* [Design Guidelines](../../../docs/Design-Guidelines.md)
- [CSP and Azure AD Tenants](../../../docs/CSP-and-Azure-AD-Tenants.md)
- [Identity, Access Management and Lighthouse](../../../docs/Identity-Access-Management-and-Lighthouse.md)
- [Management Group and Subscription Organisation](../../../docs/Management-Group-and-Subscription-Organisation.md)
- [Management and Monitoring](../../../docs/Management-and-Monitoring.md)
- [Security, Governance and Compliance](../../../docs/Security-Governance-and-Compliance.md)
- [Platform Automation and DevOps](../../../docs/Platform-Automation-and-DevOps.md)
---
# Customers
Each subfolder under customers represents a customer that should be deployed. Each customer will have a list of the artifacts for deployment.
Add parameter overloads for artifacts at the right level by creating a structure with parameters files.
# Structure for customer deployment
|-- Customer (Root)
|-- artifacts.json
|-- tenant (scope)
|--DeploymentKey.DeploymentName.parameters.json
|--DeploymentKey2.DeploymentName.parameters.json
|-managementGroup (scope)
|--DeploymentKey.DeploymentName.parameters.json
|-subscriptions (scope)
|--DeploymentKey.DeploymentName.parameters.json
|--DeploymentKey2.DeploymentName.parameters.json
|-resourceGroup (scope)
|--DeploymentKey.DeploymentName.parameters.json
|--DeploymentKey2.DeploymentName.parameters.json

Просмотреть файл

@ -0,0 +1,17 @@
{
"artifacts":{
"tenant" : {},
"managementGroups" : {},
"subscriptions" : {
"Contoso" : { "name" : "LighthouseOfferManagedSubscription", "version": "1.0" }
},
"resourceGroups" : {},
"blueprints" : {}
},
"defaultDeploymentScope" : {
"tenantId": "<Tenant_ID>",
"subscription": "<Subscription_ID>",
"location" : "west europe",
"meta" : "Trigger update 1"
}
}

Просмотреть файл

@ -0,0 +1,47 @@
{
"artifacts": {
"tenant": {
"DefaultMGs": {
"name": "ManagementGroups",
"version": "1.0"
}
},
"managementGroups": {
"WELocationAudit": {
"name": "CustomLocationPolicyDefinitions",
"version": "1.0",
"scope": {
"id": "Contoso.com-Management",
"name": "Contoso.com-Management"
}
}
},
"subscriptions": {
"ProductionRG": {
"name": "ResourceGroup",
"version": "1.0"
}
},
"resourceGroups": {
"SimpleStorage1": {
"name": "StorageAccount",
"version": "1.0"
},
"SimpleStorage2": {
"name": "StorageAccount",
"version": "1.0"
},
"EmailGroup": {
"name": "action-groups/ActionGroup",
"version": "1.0"
}
},
"blueprints": {}
},
"defaultDeploymentScope": {
"tenantId": "<Tenant_ID>",
"subscription": "<Subscription_ID>",
"location": "west europe",
"meta": "Trigger update 1"
}
}

Просмотреть файл

@ -0,0 +1,9 @@
{
"$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentParameters.json#",
"contentVersion": "1.0.0.0",
"parameters": {
"storageAccountNamePrefix": {
"value": "lighthousedemotolong"
}
}
}

Просмотреть файл

@ -0,0 +1,9 @@
{
"$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentParameters.json#",
"contentVersion": "1.0.0.0",
"parameters": {
"storageAccountNamePrefix": {
"value": "hsftesting2"
}
}
}

Просмотреть файл

@ -0,0 +1,9 @@
{
"$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentParameters.json#",
"contentVersion": "1.0.0.0",
"parameters": {
"storageAccountNamePrefix": {
"value": "hsftesting3"
}
}
}

Просмотреть файл

@ -0,0 +1,9 @@
{
"$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentParameters.json#",
"contentVersion": "1.0.0.0",
"parameters": {
"storageAccountNamePrefix": {
"value": "sittesting"
}
}
}

Просмотреть файл

@ -0,0 +1,51 @@
{
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentParameters.json#",
"contentVersion": "1.0.0.0",
"parameters": {
"actionGroupName": {
"value": "EmailGroup"
},
"actionGroupShortName": {
"value": "EmailGroup"
},
"emailReceivers": {
"value": [
{
"name": "robin",
"emailAddress": "robin@contoso.com"
},
{
"name": "alfred",
"emailAddress": "alfred@contoso.com"
}
]
},
"smsReceivers": {
"value": []
},
"webhookReceivers": {
"value": []
},
"itsmReceivers": {
"value": []
},
"azureAppPushReceivers": {
"value": []
},
"automationRunbookReceivers": {
"value": []
},
"voiceReceivers": {
"value": []
},
"logicAppReceivers": {
"value": []
},
"azureFunctionReceivers": {
"value": []
},
"armRoleReceivers": {
"value": []
}
}
}

Просмотреть файл

@ -0,0 +1,24 @@
{
"$schema": "https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentParameters.json#",
"contentVersion": "1.0.0.0",
"parameters": {
"mspOfferName": {
"value": "NerdsOfNorway"
},
"mspOfferDescription": {
"value": "This is the ultimate MSP"
},
"managedByTenantId": {
"value": "<Managed_BY_Tenant_ID>"
},
"authorizations": {
"value": [
{
"principalId": "<Identity_Object_ID>",
"principalIdDisplayName": "Tier 1 Support",
"roleDefinitionId": "b24988ac-6180-42a0-ab88-20f7382dd24c"
}
]
}
}
}

Просмотреть файл

@ -0,0 +1,9 @@
{
"$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentParameters.json#",
"contentVersion": "1.0.0.0",
"parameters": {
"subscriptionId": {
"value": "<Subscription_ID_to_be_added_to_MG>"
}
}
}

Просмотреть файл

@ -0,0 +1,12 @@
{
"$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentParameters.json#",
"contentVersion": "1.0.0.0",
"parameters": {
"resourceGroupName": {
"value": "prod-github-actions"
},
"resourceGroupLocation": {
"value": "west europe"
}
}
}

Просмотреть файл

@ -0,0 +1,56 @@
{
"identity": {
"type": "SystemAssigned"
},
"location": "westeurope",
"properties": {
"description": "Assignment of CAF Foundation blueprint",
"blueprintId": "",
"locks": {
"mode": "None"
},
"parameters": {
"Policy_CostCenter_Tag": {
"value": "IT"
},
"Policy_Allowed-Locations": {
"value": [
"westeurope"
]
},
"Policy_Resource-Types-DENY": {
"value": [
"Microsoft.Network/expressRouteCircuits"
]
},
"Policy_Allowed-StorageAccount-SKUs": {
"value": [
"Standard_LRS",
"Standard_GRS"
]
},
"Policy_Allowed-VM-SKUs": {
"value": [
"Standard_DS1_v2",
"Standard_F2s_v2"
]
},
"Organization_Name": {
"value": "Fabrikam"
},
"KV-AccessPolicy": {
"value": "a2aa9476-49b7-498d-a049-d296c296faf6"
},
"LogAnalytics_DataRetention": {
"value": 30
},
"LogAnalytics_Location": {
"value": "North Europe"
},
"AzureRegion": {
"value": "westeurope"
}
},
"resourceGroups": {}
}
}

Просмотреть файл

@ -0,0 +1,27 @@
{
"identity": {
"type": "SystemAssigned"
},
"location": "westeurope",
"properties": {
"description": "Assignment of Sample blueprint",
"blueprintId": "",
"locks": {
"mode": "None"
},
"parameters": {
"rg_name": {
"value": "DemoRgBp"
},
"arm_location": {
"value": "westeurope"
},
"allowedlocations_listOfAllowedLocations": {
"value": [
"westeurope"
]
}
},
"resourceGroups": {}
}
}

Просмотреть файл

@ -0,0 +1,26 @@
{
"artifacts": {
"tenant": {},
"managementGroups": {},
"subscriptions": {},
"resourceGroups": {},
"blueprints": {
"assign": {
"name": "Sample-blueprint",
"version": "1.0",
"scope": {
"managementGroupID": "",
"subscription": "bc74a211-7bca-4358-aa0a-6dc6086c8f16"
}
}
}
},
"defaultDeploymentScope": {
"tenantId": "<Tenant_ID>",
"subscription": "<Subscription_ID>",
"location": "west europe",
"meta": "Trigger update4"
}
}

Просмотреть файл

@ -0,0 +1,35 @@
{
"artifacts": {
"tenant": {
"BU": {
"name": "ManagementGroups",
"version": "1.0"
}
},
"managementGroups": {
"defaultMgmntGroupPolicies": {
"name": "DefaultPoliciesWithAssignment",
"version": "1.0",
"scope": {
"id": "Marketing",
"name": "Marketing"
}
}
},
"subscriptions": {
},
"resourceGroups": {
"SimpleStorage1": {
"name": "StorageAccount",
"version": "1.0"
}
},
"blueprints": {}
},
"defaultDeploymentScope": {
"tenantId": "<Tenant_ID>",
"subscription": "<Subscription_ID>",
"location": "west europe",
"meta": "Trigger update"
}
}

Просмотреть файл

@ -0,0 +1,19 @@
{
"artifacts":{
"tenant" : {},
"managementGroups" : {},
"subscriptions" : {
"DefaultOffer" : { "name" : "LighthouseOfferManagedSubscription", "version": "1.0" }
},
"resourceGroups" : {},
"blueprints" : {
}
},
"defaultDeploymentScope" : {
"tenantId": "<Tenant_ID>",
"subscription": "<Subscription_ID>",
"location" : "west europe",
"meta" : "Trigger update"
}
}

Просмотреть файл

@ -0,0 +1,26 @@
{
"artifacts": {
"tenant": {
"BU": {
"name": "ManagementGroups",
"version": "1.0"
},
"IT": {
"name": "ManagementGroups",
"version": "1.0"
}
},
"managementGroups": {},
"subscriptions": {},
"resourceGroups": {},
"blueprints": {}
},
"defaultDeploymentScope": {
"tenantId": "<Tenant_ID>",
"subscription": "<Subscription_ID>",
"location": "west europe",
"meta": "Trigger update"
}
}

Просмотреть файл

@ -0,0 +1,9 @@
{
"$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentParameters.json#",
"contentVersion": "1.0.0.0",
"parameters": {
"storageAccountNamePrefix": {
"value": "sittesting"
}
}
}

Просмотреть файл

@ -0,0 +1,51 @@
{
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentParameters.json#",
"contentVersion": "1.0.0.0",
"parameters": {
"actionGroupName": {
"value": "EmailGroup"
},
"actionGroupShortName": {
"value": "EmailGroup"
},
"emailReceivers": {
"value": [
{
"name": "robin",
"emailAddress": "robin@fabrikam.com"
},
{
"name": "alfred",
"emailAddress": "alfred@fabrikam.com"
}
]
},
"smsReceivers": {
"value": []
},
"webhookReceivers": {
"value": []
},
"itsmReceivers": {
"value": []
},
"azureAppPushReceivers": {
"value": []
},
"automationRunbookReceivers": {
"value": []
},
"voiceReceivers": {
"value": []
},
"logicAppReceivers": {
"value": []
},
"azureFunctionReceivers": {
"value": []
},
"armRoleReceivers": {
"value": []
}
}
}

Просмотреть файл

@ -0,0 +1,50 @@
{
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentParameters.json#",
"contentVersion": "1.0.0.0",
"parameters": {
"actionGroupName": {
"value": "ITSMGroup"
},
"actionGroupShortName": {
"value": "ITSMGroup"
},
"emailReceivers": {
"value": []
},
"smsReceivers": {
"value": []
},
"webhookReceivers": {
"value": []
},
"itsmReceivers": {
"value": [
{
"name": "itsmReceiver",
"workspaceId": "GEN-UNIQUE-20",
"connectionId": "1234567890",
"ticketConfiguration": "1234567890",
"region": "eastus"
}
]
},
"azureAppPushReceivers": {
"value": []
},
"automationRunbookReceivers": {
"value": []
},
"voiceReceivers": {
"value": []
},
"logicAppReceivers": {
"value": []
},
"azureFunctionReceivers": {
"value": []
},
"armRoleReceivers": {
"value": []
}
}
}

Просмотреть файл

@ -0,0 +1,22 @@
{
"$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentParameters.json#",
"contentVersion": "1.0.0.0",
"parameters": {
"topManagementGroup": {
"value": "Fabrikam"
},
"topManagementGroupDisplayName": {
"value": "Fabrikam"
},
"subGroups": {
"value": ["Marketing","IT", "HR"]
},
"subGroupsDisplayNames": {
"value": ["Marketing","IT", "HR"]
}
}
}

Просмотреть файл

@ -0,0 +1,22 @@
{
"$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentParameters.json#",
"contentVersion": "1.0.0.0",
"parameters": {
"topManagementGroup": {
"value": "IT"
},
"topManagementGroupDisplayName": {
"value": "IT"
},
"subGroups": {
"value": ["Production","Development", "QA"]
},
"subGroupsDisplayNames": {
"value": ["Production","Development", "QA"]
}
}
}