Radme changes
This commit is contained in:
Родитель
e2be6aceb5
Коммит
3617312d53
|
@ -76,9 +76,12 @@ The configuration for this environment creation is read from the following locat
|
|||
|
||||
## :green_circle: PART 3. Deployment Details
|
||||
### Deployment Layers - Summary
|
||||
|
||||
[Deploy.ps1](Deploy.ps1) provides a simple way for you to deploy all of the terraform layers included in this deployment at once. In practice, when setting up a CICD based deployment you will most likely choose to break this up and deploy each layer separately. The table below provides a summary of the different terraform layers included in this solution. Click the links in the first column to browse detailed layer documentation prodcued using [https://terraform-docs.io/](https://terraform-docs.io/)
|
||||
|
||||
Layer | Description | Permissions Required when using Service Principal | Permissions Required when using User Principal
|
||||
| --- | --- | --- | --- |
|
||||
[Terraform Layer Zero](./terraform_layer0/tformdocs.md) | Deploys the spoke VNET with subnets, dns zones, bastion & a VM for the CICD agent | Resouce Group Owner <br /> <br /> Blob Contributor on Terraform's State Storage Account | Resouce Group Owner <br /> <br /> Blob Contributor on Terraform's State Storage Account
|
||||
[Terraform Layer One](./terraform_layer1/tformdocs.md)| Register AAD Enterprise Applications & Service Principals | Application.ReadWrite.OwnedBy <br /><br /> Blob Contributor on Terraform's State Storage Account| Application Administrator (Role) <br /> <br /> Blob Contributor on Terraform's State Storage Account
|
||||
Terraform Layer Two | Core IAC deployment for approx. 70 ADS Go fast resources | Resource Group Owner <br /> <br /> Blob Contributor on Terraform's State Storage Account| Resource Group Owner <br /><br /> Blob Contributor on Terraform's State Storage Account
|
||||
Terraform Layer Three | Update AAD Enterprise Applications by granting required roles and permissions to managed service identities created in Layer Two <br /> <br /> Create Private Endpoints for Purview | Application.ReadWrite.OwnedBy <br /> (Must be same identity as that which was used to run Layer One) <br /> <br /> Blob Contributor on Terraform's State Storage Account | Application Administrator (Role), <br /> <br /> Network Contributor <br /> <br /> Blob Contributor on Terraform's State Storage Account
|
||||
[Terraform Layer Two](./terraform_layer2/tformdocs.md)| Core IAC deployment for approx. 70 ADS Go fast resources | Resource Group Owner <br /> <br /> Blob Contributor on Terraform's State Storage Account| Resource Group Owner <br /><br /> Blob Contributor on Terraform's State Storage Account
|
||||
[Terraform Layer Three](./terraform_layer3/tformdocs.md)| Update AAD Enterprise Applications by granting required roles and permissions to managed service identities created in Layer Two <br /> <br /> Create Private Endpoints for Purview | Application.ReadWrite.OwnedBy <br /> (Must be same identity as that which was used to run Layer One) <br /> <br /> Blob Contributor on Terraform's State Storage Account | Application Administrator (Role), <br /> <br /> Network Contributor <br /> <br /> Blob Contributor on Terraform's State Storage Account
|
||||
|
|
Загрузка…
Ссылка в новой задаче