devops-governance/CHANGELOG.md

4.0 KiB

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

0.3.0 (2021-06-14)

Features

  • concept: remove drafts, link to now published official AAC and CAF docs, closes #24 (d2f14b2)
  • docs-terraform: update for clarity (16cd300)
  • naming: clean up variable name and output schema, improve conventions (fcff295)
  • terraform: default to local backend for lower barrier to entry (2a2ab95)
  • terraform: simplify for single plan and deploy, use Key Vault RBAC instead of access policies #22 (c2d3d95)

Bug Fixes

  • ado permissions errors by specifying dependency, closes #24 (f4c68eb)

0.2.0 (2021-03-19)

Updates and Fixes

  • concept: update and newer end-to-end overview graphic (ee1167a)
  • permissions: use admin aad group for project admins (#7) (c0bece4)
  • roles: introduce 3rd AAD group for total devs, admins, and all, #12 (02524a6)

0.1.0 (2020-12-02)

Initial Release

Governance Model

  • Azure AD (AAD)
    • create demo AAD groups used for RBAC across ARM and Azure DevOps
  • Azure Resource Manager (ARM)
    • Deploys different deployment environments to different Resource Groups (for convenience. See README.md for details.)
  • Azure DevOps (AzDO)
    • Bootstrap organization with projects
    • Setup Service Connections
    • Apply RBAC

Sample Project Features

  • Includes Azure Pipelines
    • Terraform code quality checks
    • automated and scheduled configuration drift detection - results are posted to GitHub Pull Requests.
    • automated deployments
  • Documentation with detailed explanations:

Linked Git Commits

Note: initial release did not follow strictly to conventional commits standard. Those that did are left here for reference.

  • aad-groups: for demo org team structure (314f52c)
  • azure-devops: create projects and respective service connections to ARM resources (7c1f8d9)
  • rbac: key vault data plane access example (455a5df)
  • setup: setup.azcli for blob account for terraform statefile, #1 (5afe3ee)