Граф коммитов

4 Коммитов

Автор SHA1 Сообщение Дата
Jorge Cotillo e830705911 initial vnext commit 2019-06-18 22:07:48 -07:00
Jorge Cotillo 88c17ba205
Major module update (#39)
* added diagnostic storage account

* added retrieval of sas token from an arm template

* added sas properties

* enabled azure security center deployment

* added solutions to log analytics plus datastores

* added storage account v2 template

* added storage account templates

* updated diagnostic storage account output parameters

* added IaaSDiagnostic wad settings

* enabled service endpoint on shared services network

* renamed module names

* updated archetype module versions

* updated archetype module versions

* fixed invalid parameters

* updated shared services archetype

* updated adds extension names

* added app rule and network rule collections to allow for log analytics egress access from VMs

* added virtual network module and updated app rule collection

* updated security center - workspace pricing tier

* enabled security center log analytics auto provisioning

* enabled update management

* added diagnostic settings to automation account

* added linux schedules

* modified shared services test archetype based on latest modifications

* added azure backup log analytics solution and whitelisted linux package managers

* updated palo alto module versions

* fixed bootstrap file encoding

* removed unused parameter

* added 1.0 version as default module version

* added cdn and made storage account template more generic

* modified templates to use common diagnostic storage account

* added diagnostic storage account

* updated ntier iaas deployment

* Added storage-account v2.0

* Added placeholders for policy,rbac and script folders in storage-account v2.0

* Updated the comments in the test scripts for storage-account module

* added v2 of storage account deployment

* added placeholder for scripts folder

* Changed the path logic to be os agnostic

* removed tokens from v2.0 storage parameters file

* Update to path concatenation logic applied

* updated sql server template

* added sql server cloudwitness service endpoint

* updated azure firewall rules and increase vmapp-lb size

* updated ntier iaas archetypes to use latest log analytics module

* updated ntier SQL Cluster IP

* updated aks, sap, cloud break and squid modules to use single diagnostic storage account

* modified sqldb to be ISO compliant

* fixed deployment of single diagnostic storage

* reduced number of integration tests. integration tests help test the python orchestration

* updated aks archetype file name

* added update management tag on linux jumpbox

* updated templates based on feedback

* fix deployment name, converted to string

* forced rebuild
2019-05-07 13:54:30 -07:00
Kungumaraj Nachimuthu 7fe1e0cf64 updated la res group name and config for la region (#30) 2019-04-12 19:14:09 -07:00
Kungumaraj Nachimuthu 7729198774 Knachimuthu/aks workload (#22)
* AKS workload added

* Clean up of unused parameters in progress

* Bash scripts added

* Initial commit for aks

* fix to storage id in aks diag settings

* Dockerfile change to include kubectl binaries installation

* Update to parameterized the users

* Bash script parameterized

* bash scripts updated and tested

* Moved RoleAssignments to separate module. Updated AKS to include the Firewall - Application Rule and remove Role Assignments.

* Added Policy to audit diagnostics enabled in AKS Cluster

* Policies for AKS added.

* helm installation removed. bash scripts that require helm is also removed.

* Added Comments to the Azure RBAC Role Assignments

* Changes from David's forked repo merged

* Permissions changes to the aks bash scripts added

* Added bash script for aks rbac role bindings

* Updated Policies for AKS

* Updates to the role-assignments

* Removing the policies for the acr and event-hub

* Minor fix to role assignment policies

* enable role assignments to AKS infra resource group (#15)

* made role-assignment template generic enough to be used by any archetype

* exposed azure firewall app rule collection as a parameter

* Added template-path to role assignments

* enabled subscription level deployment

* deleted parameters file

* Update to fix the location variable needed for subscription deployment

* moved node rbac assignment to aks deployment

* removed copy loop within nested deployment

* Role assignments module and aks node role assignments module added

* Update the archetype.test.json

* added azure firewall network rule collection on port 22. Issue #20

* enabled deployment of key vault with an empty secrets array

* Tested the changes. Updates made to archetype.json.
2019-04-09 13:03:12 -07:00