Граф коммитов

202 Коммитов

Автор SHA1 Сообщение Дата
Kungumaraj Nachimuthu afdebb4d06 AKS and On-Premise Archetype updates (#112)
* Changes based on feedback. First round of corrections.

* Fix added for multi-subscription deployment

* Added Debug argument for troubleshooting pipeline

* Reset the context change after storage setup

* Minor update to fix type

* Added Debug flag

* Minor update

* Update to avoid switching subscription when in validation mode

* Debugging consolidation script

* More debugging

* Debugging continued

* Debugging continued 2

* Removed extra Cmdlet that pollutes the outputs

* Logging to troubleshoot invalid cache in pipeline added

* Applied a fix for AzureDevOps Cache implementation to cache objects arrays and object

* Convert cache string to object when possible

* More logging added

* Test-Json  logic may be flawed. Debugging it.

* Debug

* Pipeline bootstrap var added

* Debugging failed module - AKS

* Merged the rootcert.ps1 and rootcert.sh

* Debugging On-Prem Archetype

* Debugging On-Prem

* Feedback based on recent changes.

* Changes based on PR feedback

* Changed based on PR feedback

* Added Debug for storage accounts

* Preserving the context after bootstrap.

* Added the missing parameter

* Initialize and Teardown of Validation Resource Group logic added

* Excluding the dependency on the SetupValidationResourceGroup job because it was removed.

* Removed orphaned dependencies

* Added missing mode parameter

* Fixed  invalid function name

* Validation Resource Group default location set

* Passing the validation resource group created based on archetype instance name

* Missing variable fixed

* Missing parameter is passed to the method

* ResourceGroupName for validation RG is reset

* Minor change to validation group name

* Minor updates

* Removed the constrain to switch subscription on deploy mode only

* Setup and Teardown testing in the same job

* Resource Group name being reset on delete

* Commented out the write-host used for debugging

* Destroy the validation resource group at the end

* Setup of validation resource group is now merged with deployment resource group setup logic.

* Typo in function name

* typo in function name fixed

* Added debug lines

* Removed the extra condition that prevented the creation of rg in validation mode

* Fix for teardown of rg

* Running SecurityCenter module in debug mode

* Fix for UpdateAzureFirewall added

* Storing outputs as objects instead of hashtables.

* Avoiding ConvertTo-Json due to serialization problem

* Fix applied for Output conversion

* Comments added.

* Cleaned up comments.

* Cleaned up based on feedback item

* Change to AzureFirewall Id to reference the output

* Fixed the incorrect token

* Running storage module in debug mode

* Empty string values need to evaluate to false

* Modified cache key retrieval logic

* Validation of resource group moved inside InvokeARMOperation method

* Minor var name fix

* Debugging UpdateAzFw module

* Teardown should also create the validation resource group

* Using different secrets group

* Updated the service conn. profile

* Updated the CreateRootCertificate module

* Pipeline will now use test var group

* OnPremises pipeline's sc updated

* Updated the path after on-premises folder name change

* Added isOutput=true to bootstrap initialize

* Updated Shared Services Pipeline yaml for testing

* Shared Services OnPrem Extension updated

* Adding Debug to Azfw for troubleshooting

* P2S root certificate generation script fixed

* Debug added for vgw

* Updated the deployment name for Shared Services without OnPremises extension for testing

* Debug added for OnPremises extension for storage account

* Debug added to all modules

* Fixed indention and Null Guid issue

* Location updated

* Debugging all modules

* Minor fix

* Removed isOutput from the PowerShell script

* Fixed Test-JsonContent

* Enabled artifacts storage account

* Reverted the changes to pipeline yaml files

* Reverted changes to pipeline yaml

* Revert the change to deployment name in Shared Services

* Reverted the artifacts storage account name

* Removed comments in Test-JsonContent

* Merging the changes from AKS & OnPremises (#121)

* Continuing Shared Services deployment

* Updated the order of execution of the components

* Updated location of the Shared Services Archetype

* Modified the code to use the location from the parameters file or module configuration and not subscription

* Removed additional logic for location of the resource group and reusing the existing location var

* Updated the parameters value being passed for Disk Encryption module

* Accounting for output of simple data types

* Using Test Var Group

* Updated the SC

* Debugging EventHub

* Changed the order of execution of AKS LandingZone in pipeline

* Reordering the modules

* AKS deployment

* Fix

* Added a new rule to the firewall

* Reverted changes before PR submission

* Removed the additional Debug flag during invocation

* Reverting the ArtifactsStorageAccount and making it disabled

* Reverting the changes to Parameters.json for OnPremises Extended version

* Reverting Artifacts Storage Account Name.

* Reverting the parameters file in Shared Service Non-Extended Version

* Added RBAC to AKS

* Merging deltas / updates to AKS-OnPrem-Feedback Branch (#129)

* Updated the pipeline to run in MS Subscription

* Fixed the name of the var group

* Updated the region.

* Minor changes as per discussion

* Added NSG flow module to the archetypes - AKS and OnPremises

* Adding the enable.flow.logs under NetworkSecurityGroups module. This will be added again after merge vnext post jcotillo/governance-stage branch merge to vnext.

* Reverted back the secret group name and service connection name

* Added the Enable NSG Flow Logs module to pipeline yaml file.

* Split the AKS into three stage deployment - included ApplyGovernance stage

* Minor updates to stage names

* Updates from today's discussion

* Corrected the DeployEnvironment Stage

* Minor update

* Added the missing switch for TearDownValidationResourceGroup

* Shared Services non extended version updated

* Updates to add diagnostic settings to EventHub

* PR finalized.
2019-09-09 08:24:03 -07:00
Jorge Cotillo 0c02c2e43d moved jumpbox dependency 2019-09-08 22:57:07 -07:00
Jorge Cotillo 30d40a36a7 moved jumpboxes deployment before ad forest 2019-09-08 22:49:02 -07:00
Jorge Cotillo c0be28c844 removed |out-null from get-azcontext to prevent null from being retrieved 2019-09-08 19:22:32 -07:00
dwas01 b20d9a252b machine.learning module updates 2019-09-09 11:36:02 +12:00
Jorge Cotillo d3ddd3afff fixed definition path 2019-09-08 16:18:28 -07:00
Jorge Cotillo b133926deb Removed LandingZone from definition path 2019-09-08 10:50:54 -07:00
dwas01 9b006ac0c6 application .inisghts module updates
corrected storage account parameter sku
2019-09-08 10:23:24 +12:00
dwas01 8bbf5c168d application.inisights module updates 2019-09-08 09:42:16 +12:00
dwas01 267d6a7171 api.management module updates
new akv script and updates to readme.md
2019-09-08 08:32:59 +12:00
dwas01 fab2043241 analysis.services module updates
updates and fixes to readme.md
2019-09-08 06:06:34 +12:00
Jorge Cotillo 544838b54f Jcotillo/governance stage (#126)
* created new pipeline stage

* updated artifacts storage account reference

* updated location reference on all archetypes

* rolled back to West US region

* moved domain admin information to shared services object

* removed comments and updated kv name

* Enabled Service Map and diag strg connection

* added diagnostic and logging to resources

* enabled monitoring on PaaS services

* enable service endpoint on diagnostics

* updated adds asg

* enable accelerated networking by default

* fixed vmss template and added nsg flow logs script

* updated pipelines to match orchestration.json

* fixed onpremises pipeline reference name

* renamed environment folder

* fixed stage name

* fixed path name

* removed landing zone from shared services pipeline

* added governance

* added custom task to upload scripts to SA

* updated Linux VM SKU

* updated availability set default name

* fixed unit tests

* removed dependency

* removed log analytics dependency

* fixed NSG flow logs relative path

* updated ntier iaas archetype stage name

* fixed module name

* updated diagnostic storage account name

* updated default config

* added missing parameter

* fixed shared services parameter reference

* moved parameter files into test folder

* updated diagnostic settings

* added missing parameters to sample parameter file

* updated base on feedback

* updated test context names
2019-09-06 15:28:39 -07:00
Kungumaraj Nachimuthu 8c21c84047 Bash Script Arguments Order Fix (#122)
* Initial logic for preserve arguments order for a script module added

* Changes made based on feedback

* Added new bash script

* Removing debug statements for clean up prior to PR submission

* Updates made as per feedback.
2019-09-04 14:54:01 -07:00
Jorge Cotillo c349884086 Task 7157, tear down an environment (#123)
* Task 757, tear down an environment

* fixed cross subscription validation
2019-09-04 12:06:02 -07:00
dwas01 b6d3549ebe analysis.services.akv.secrects script added 2019-09-04 10:19:15 +12:00
dwas01 bb280743be app.insights module updates 2019-09-04 10:11:16 +12:00
Jorge Cotillo 4200d02003 updated domain admin user name parameter value 2019-08-29 10:48:36 -07:00
Jorge Cotillo 844b6a71a6 Merge branch 'vnext' of https://github.com/Azure/vdc into vnext 2019-08-29 10:48:11 -07:00
Jorge Cotillo 6f11afd4e0 removed credentials from onprem 2019-08-29 09:10:26 -07:00
Jorge Cotillo 07eba21608
Fixed dependencies and onprem virtual gateway parameters (#119)
* fixed bugs: 7105, 7107, implemented task: 7088

* enabled public ip on dc, updated hard coded onprem organization name

* Disabled certificate creation in onprem. added blob upload inline script

* Updated artifacts reference, included onprem deployment instance name

* updated dependencies

* Updated onprem parameters reference
2019-08-29 08:52:37 -07:00
Jorge Cotillo 85f24aca1f Bug fix and task implementation (#118)
* fixed bugs: 7105, 7107, implemented task: 7088

* enabled public ip on dc, updated hard coded onprem organization name

* Disabled certificate creation in onprem. added blob upload inline script

* Updated artifacts reference, included onprem deployment instance name
2019-08-29 08:24:42 -05:00
dwas01 1c5e4268db api.management readme.md updates 2019-08-29 17:19:57 +12:00
dwas01 334b23e6de analysis.services readme.md updates 2019-08-29 17:19:27 +12:00
dwas01 08f0d30555 api.management test module and readme updates 2019-08-29 16:37:57 +12:00
dwas01 f159337fe0 analysis.services readme and module test updates 2019-08-29 16:32:21 +12:00
dwas01 ffe9875d04 6484 api managment, 6593 analyis services modules (#116)
* 6484 api managment, 6593 analyis services modules

* modules test updates

* defaults updated
2019-08-28 19:34:54 -07:00
Jorge Cotillo 264075d170 gw fix 2019-08-28 12:42:11 -07:00
Jorge Cotillo 13ff14058c added logic to disable single deployment when enabled property is set to false 2019-08-28 12:07:55 -07:00
Jorge Cotillo d2d89cb8df removed files 2019-08-28 11:30:44 -07:00
Jorge Cotillo cb6163d962 added virtual network reference to keyvault 2019-08-28 09:45:58 -07:00
Jorge Cotillo d6b1f3d3f2 updated org name parameter 2019-08-28 08:18:58 -07:00
Jorge Cotillo 327c4d9465 renamed folder 2019-08-28 08:15:31 -07:00
Jorge Cotillo 33ddd109ac updated extension name 2019-08-26 09:14:35 -07:00
Jorge Cotillo cfd3849b34 replaced extension 2019-08-26 08:14:39 -07:00
Jorge Cotillo e382eee5cc added KeyVault dependency 2019-08-26 01:07:34 -07:00
Jorge Cotillo 7843f0dfc8
Jcotillo/ntier iaas fixes (#110)
* initial commit

* updated ntier-iaas azure devops pipeline

* updated azdo service connection

* updated service connection

* updated variable group name

* added spn environment keys

* removed artifacts storage validation

* updated simulated onprem pipeline

* updated depedency

* removed invalid dependency

* parameter updates

* updated ntier iaas pipeline

* added pipeline variables

* fixed dependencies

* fixed module definition name

* fixed reference output retrieval

* updated module definition name

* updated dependencies
2019-08-26 01:06:06 -07:00
Jorge Cotillo 9a2823a151 renamed ASE SQLDB archetype 2019-08-24 00:49:47 -07:00
Jorge Cotillo c64adb9961 added policy and rbac tests 2019-08-24 00:24:21 -07:00
Jorge Cotillo 6a8a7d7827 fixed unit test 2019-08-24 00:24:10 -07:00
Kungumaraj Nachimuthu 2c83f220e1 AKS Archetype (#96)
* AKS Archetype - Initial Commit

* Change in pipeline variable group for testing

* Corrected dependency to the teardown of validation resource group

* Corrected the dependsOn for TearDownValidationResourceGroup

* Changed the Azure Subscription

* Changed from SharedServices to AKS in pipeline.yml

* Added missing Tests folder

* Removing duplicate task

* Updates to new modules

* Separate module for application rule

* Update to application rule module

* Clean up

* Cleaned up security center module

* Multiple var groups

* Added var groups for AKS

* Added env vars for User group IDs

* Updated the Packer agent file to include the az cli installation

* Splitting into Archetype and LandingZone

* Updated the paths in pipeline.yml after restructuring folders

* More updates to file paths

* AzureSecurityCenter correction

* Separate module for updating Azure Firewall

* Code fix for prevention of resource group while executing scripts

* Corrections to the orchestration and parameters file

* Added the Azure Firewall update section to the pipeline yml file

* Fixed json parameters file for AKS module that was formatted incorrectly

* Minor fixes to Virtual Network

* Updated the subscription GUIDs and added a subscription info for AKS

* Changed vNet to VirtualNetwork. Also, added dependsOn for AKS Archetype in Orchestration file.

* Changed the KeyVault behavior to enable Service EndPoint after Landing Zone deployment.

* Orchestration and Pipeline updates for AKS Archetype

* AKS Archetype pipeline / orchestration update

* Fixed unsupported versions for aks

* Changes based on feedback from AKS Archetype review

* Minor changes - feedback work continued

* Pipeline changes specific to AKS LandingZone

* AKS Archetype - Initial Commit

* Change in pipeline variable group for testing

* Corrected dependency to the teardown of validation resource group

* Corrected the dependsOn for TearDownValidationResourceGroup

* Changed the Azure Subscription

* Changed from SharedServices to AKS in pipeline.yml

* Added missing Tests folder

* Removing duplicate task

* Updates to new modules

* Separate module for application rule

* Update to application rule module

* Clean up

* Cleaned up security center module

* Multiple var groups

* Added var groups for AKS

* Added env vars for User group IDs

* Updated the Packer agent file to include the az cli installation

* Splitting into Archetype and LandingZone

* Updated the paths in pipeline.yml after restructuring folders

* More updates to file paths

* AzureSecurityCenter correction

* Separate module for updating Azure Firewall

* Code fix for prevention of resource group while executing scripts

* Corrections to the orchestration and parameters file

* Added the Azure Firewall update section to the pipeline yml file

* Fixed json parameters file for AKS module that was formatted incorrectly

* Minor fixes to Virtual Network

* Updated the subscription GUIDs and added a subscription info for AKS

* Changed vNet to VirtualNetwork. Also, added dependsOn for AKS Archetype in Orchestration file.

* Changed the KeyVault behavior to enable Service EndPoint after Landing Zone deployment.

* Orchestration and Pipeline updates for AKS Archetype

* AKS Archetype pipeline / orchestration update

* Fixed unsupported versions for aks

* Changes based on feedback from AKS Archetype review

* Minor changes - feedback work continued

* Pipeline changes specific to AKS LandingZone

* Changes based on testing firewall rules update logic

* Pipeline yml file updated

* Minor update

* Minor update

* Minor update

* Minor correction to file path

* Minor file path correction

* Minor correction

* Debug statements added

* Fix for Azure Firewall scripts

* Updated

* Updated

* Minor update

* Pipeline jobs rearranged.

* File path fixed

* Fixes to chmod script

* Minor fixes

* Updated the dependencies

* Corrected the bootstrap var in pipeline

* Live updates from feedback review

* Fixes based on today's review
2019-08-23 22:48:47 -07:00
Jorge Cotillo e514547774 Jcotillo/ntier iaas v2 (#109)
* initial push of ntier iaas modules

* added azure bastion subnet

* updated landing zone dependencies, added topological sort

* added topological sort implementation

* added project file

* added newtonsoft package

* added todo comment

* added circular reference verification on topological sort

* moved landing zone to its own folder. added domain join extension to vm template

* added joined to domain extension on VMSS

* renamed sql server always on template and added join domain extension in vmss

* fixed unit test

* fixed all unit tests

* added IIS template

* added parameters to ntier-iaas archetype

* finished orchestration of ntier-iaas

* fixed unit test

* added missing files

* updated parameter values

* fix access token retrieval

* added missing module definitions
2019-08-23 22:31:50 -07:00
Kungumaraj Nachimuthu 51b3710985 Kunachim/on prem v2 (#100)
* Initial commit for On-Premise Archetype

* Corrected depends-on for pipeline

* Moving ArtifactsStorageAccount module to the top and adding a ADO task for uploading scripts required for AD module

* Added a dependency to upload scripts for AD module

* Added a separate stage for uploading artifacts.

* Invalid dependency removed

* Importing Az.Storage Module before executing other commands.

* Printing out modules path

* Remove Artifacts storage from test

* Minor change to UploadScripts module

* Minor change

* Minor Change to update PSModulePath

* Testing

* Minor path fix

* Minor changes to file path regex to be non-greedy

* Pipeline fixed with reorder Artifacts storage and scripts upload to Artifacts storage

* Minor updates

* Moved the Installation of the PowerShell modules one folder up

* Point-to-Site VPN added to On-Premise Archetype

* Cleaned up the scripts for VPN Root Cert creation

* Finalized Script

* Modularization of Virtual Machine templates (#101)

* initial commit

* moved parameters file outside of the module

* initial commit of new Jumpbox design

* added encryption task

* removed unnecessary parameters

* initial implementation of encryption using kek

* fixed output storage from custom script

* Added format data disks DSC

* added adds dsc that excludes disk formatting

* removed dsc folder

* added policy and rbac tests

* removed 0 file

* updated template static test

* updated ad and adds templates

* updated non-extended shared services environment

* updated display names

* added enable key vault service endpoint task

* fix validate dependency

* fixed task name

* fixed module definition reference

* fixed azure firewall api version

* fixed pipeline and added new environment variable

* updated azure firewall api version

* fixed key vault access policy

* updated parameters comment

* updated zones copy loop

* updated zones condition

* fixed parameters.json error

* removed double quote encoding

* added string array to zones

* updated description name

* updated output reference to lowercase

* enabled debug on AD encryption

* enabled debug on AD encryption

* moved enabling service endpoint of Key Vault after VM deployment

* disabled validation stage

* enabled pipelines

* added SQL Analytics solution

* removed uneeded parameter

* added disk verification before formatting a disk

* updated DSC code

* removed data jumpbox datadisk

* added drive letter parameter to adds

* added workaround to prevent storage initialization multiple times

* added get public IP ps1

* removed finally block

* updated get ip ps1 path

* updated network rules copy loop:

* removed networkacls from initial key vault deployment

* explicit set of ps1 argument

* updated initialize file

* fixed return type

* fixed return type from getSasToken function

* added ashashtable to convert from json cmdlet

* added networkAcls with IP whitelisting

* added test-jsoncontent to helper

* added debug

* updated storage account details cache value

* removed debug flag

* updated set variable syntax

* fixed variable name

* added -Compress to JSON string creation

* updated default action on kv networkacls

* added global variable

* updated variable name

* Update pipeline.yml for Azure Pipelines

* moved org name as env variable

* update pipeline

* Update pipeline.yml for Azure Pipelines

* added additional logging info

* temp reduced validation tasks

* fixed dependency

* removed global variable from pipeline

* enabled debug on deployment

* enabled debug

* moved similar tasks into same job

* updated shared services extended pipeline

* removed write-host

* enabled multi-stage jobs

* added env variables

* updated variable set

* removed comments from inline script

* updated pipeline, pass variable between jobs

* added missing environment variable retrieval

* removed unnecessary write-host

* added vnet dependency

* updated job output dependency name

* added multi-job variable

* updated modules path of shared services onprem extension

* fixed parameters

* removed active directory reference

* added Virtual Network dependency

* added spn access policy

* moved dns server as a separate task

* removed additional api calls

* removed duplicate

* added logic for more than one resource ids

* Added exponential backoff logic (#103)

* output az graph query

* Update pipeline.yml for Azure Pipelines

* Restore pipeline stages

* added exponential backoff

* added exponential backoff

* added debug function

* Exception handling functions added to Helper (#102)

* Applied the changes

* Minor changes to the exception

* Cleanup

* Cleaned up one of the function

* minor change

* Merged the Exponential backoff logic with Get exception

* Fix for excluding resource ids from file path parse logic

* fixed - expression syntax

* updated required parameter

* removed dns server task

* enhanced error message details

* updated adds vm name

* added exception analyzer to ARM REST API call

* fixed Get-Exception cmdlet invocation

* added comments to set-context cmdlet

* Added KeyVault service point

* Updated the Archetype to include the new Active Directory Module and new Virtual Machine Module.

* Updated the On-Premise Pipeline

* Minor updates to the pipeline yml file

* Added missing dependency

* Minor update

* More updates to dependencies

* enable pip only if sepcified

* Minor update to enable Pip in VGW

* Minor update to VGW

* CHanged casing on labvm files (#106)

* Error parser logic fixed (#108)

* Initial commit for On-Premise Archetype

* Corrected depends-on for pipeline

* Moving ArtifactsStorageAccount module to the top and adding a ADO task for uploading scripts required for AD module

* Added a dependency to upload scripts for AD module

* Added a separate stage for uploading artifacts.

* Invalid dependency removed

* Importing Az.Storage Module before executing other commands.

* Printing out modules path

* Remove Artifacts storage from test

* Minor change to UploadScripts module

* Minor change

* Minor Change to update PSModulePath

* Testing

* Minor path fix

* Minor changes to file path regex to be non-greedy

* Pipeline fixed with reorder Artifacts storage and scripts upload to Artifacts storage

* Minor updates

* Moved the Installation of the PowerShell modules one folder up

* Point-to-Site VPN added to On-Premise Archetype

* Cleaned up the scripts for VPN Root Cert creation

* Finalized Script

* Added KeyVault service point

* Updated the Archetype to include the new Active Directory Module and new Virtual Machine Module.

* Updated the On-Premise Pipeline

* Minor updates to the pipeline yml file

* Added missing dependency

* Minor update

* More updates to dependencies

* enable pip only if sepcified

* Minor update to enable Pip in VGW

* Minor update to VGW

* Pipeline yml fixes

* Typo fix

* Access policies added to KeyVault to App and User.

* Pipeline yml updated with feedback from today's review
2019-08-23 22:21:47 -07:00
Kungumaraj Nachimuthu 409770cc0b Error parser logic fixed (#108) 2019-08-21 16:38:34 -07:00
Telmo Sampaio 3970414307 CHanged casing on labvm files (#106) 2019-08-20 12:20:58 -07:00
Jorge Cotillo 7f5a936121 added comments to set-context cmdlet 2019-08-18 16:41:25 -07:00
Jorge Cotillo 546f201162 fixed Get-Exception cmdlet invocation 2019-08-17 22:16:16 -07:00
Jorge Cotillo b98130c5cc added exception analyzer to ARM REST API call 2019-08-17 15:08:07 -07:00
Jorge Cotillo 3dd8eb7b83 updated adds vm name 2019-08-16 20:27:56 -07:00
Jorge Cotillo cb084c16b9 enhanced error message details 2019-08-16 20:02:03 -07:00
Jorge Cotillo feeef75153 removed dns server task 2019-08-16 18:58:00 -07:00