v0.6.0
Highlights
📯 Cross-Module reference alignment: To increase consistency and avoid code duplication, all modules previously leveraging nested templates for resources of a different resource type are now referencing the same CARML module
📯 Added Bicep + JSON deployment examples to all module readme files
📯 Added CARML logical layers and personas Wiki page
Modules
- New modules:
- App Configuration Stores with Key Values
- Compute NetworkInterfaces
- DataProtection Backupvaults
- OperationsManagement Solutions
- Authorization Locks
- Improved modules:
- Cognitive Services: Set secure defaults
- EventGrid: Set secure defaults
- Storage Accounts: Implemented Customer-Managed Keys
- SQL Server: Added private endpoint and vulnerability assessments
- Private DNS records: Added Role assignments
- VirtualMachine: Configure boot diagnostics with managed storage account
- Eventhub: Added Network Rules
- VMSS: Added Condition to EncryptionAtHost
- OperationalInsights: Added etag parameter to SavedSearches
- Azure Firewall: Added Public IP
- Bastion Hosts: Added Public IP
- ACR: Added webhooks and updated ACR CMK implementation
- BatchAccounts: Added configuration options
- AKS: Added Application Gateway Ingress Controler (AGIC) addon
- Updated API version for Role assignments, ML Workspace, Eventhub, Recovery Services Vault, Compute Galleries
- Improved parameter metadata descriptions & module readmes:
- Updated parent-child resource conditional description
- Improved parameter description formatting
- Update conditional parameters descriptions to include the condition under which they are required
- Merged Azure Resource Reference documentation links with the list of deployed resource types
- Changed telemetry implementation to only deploy a single PID: Disabled telemetry on child resources and on cross-referenced resources
- Added location output to all templates supporting it
- Added multiple VM deployment example
CI Environment
- Improved robustness and duration of environment setup task on agents
- Improved resource removal logic:
- Implemented purge for AppConfiguration
- Added role assignment removal
- Added registrationDefinitions removal
- Improved lock removal
- Cleanup custom removal logic for VWan
- Improved GitHub workflows:
- Updated GitHub Workflows to use Azure/PowerShell action
- Improved ADO pipelines:
- Fixed ADO publishing to Bicep registry
- Fixed ADO triggerpath
- Updated conditions for ADO dependency pipeline
- Created Issue-Assignment pipeline to automate assignment of new issues to the intended project
Static Validation
- New Pester tests:
- All parameter descriptions should end with a period
- Conditional parameters description should contain the condition under which they are required
- Added exception handling for resources not having standard outputs
- Reworked tests to not use HTML & shared functions
- Expanded Pester test output
Wiki
- Overarching review and lingo update
- Improved solution examples
- Extended Contribution flow section
- Updated required GitHub settings to successfully run static validation
- Added Management Group module notes to known issues
Utilities
- Enabled generation script to add Bicep + JSON deployment examples to module readmes
- Added
Get-FormattedGitHubRelease
function to support release highlights (these highlights :) ) - Improved
Set-ModuleReadMe
utility when called w/ relative path
Fixes
- Workaround for Az CLI bug introduced by latest CLI version (2.37.0) used by the ubuntu-20.04 agents
- Replace space with %20 in the ADO projectname
- Fixed pipeline name parsing in
Register-AzureDevOpsPipeline
utility - Update casing for IPsec connections
- Added missing output to Tags module
- Fixed all parameter descriptions to comply with updated static validation
- Fixed KeyVault reference for Bicep example in ReadMes
- Updated references to the global variables file
- Fixed typo in global test
- Swapped the values for tenantId and deploymentSpId
- Corrected AVD Host pool parameter for dependency pipeline
- Added principalType to RSV param
- Fixed ApplicationGateway pipeline deployment by updating the keyvault reference
All merged PRs
- [CI Environment] Change Task Type for ADO in the publishing to bicep registry by @SeSeicht in #1340
- [Fixes] Fixed broken SQL-MI link by @fblix in #1350
- [Modules] Switched from resource name to resource ID in RBAC deployment by @MrMCake in #1352
- [Modules] Merged resource references with types table + renewed readmes by @MrMCake in #1354
- [Modules] Added configuration options to Microsoft.Batch/batchAccounts by @fblix in #1348
- [Modules] Add RBAC to Private DNS records by @simonbMS in #1344
- [Modules] Added Application Gateway Ingress Controler (AGIC) addon to AKS by @JPEasier in #1345
- [CI Environment] Added role assignment removal to removal logic by @MrMCake in #1343
- [Modules] Downgrade RBAC API version by @eriqua in #1358
- [Modules] Update ML Workspace to latest API by @MrMCake in #1359
- [Modules] Allowed User assigned identity deployments by @ahmadabdalla in #1361
- [Fixes] Set-ModuleReadMe when called w/ relative path by @MrRoundRobin in #1366
- [Modules] Update parent-child resource conditional description & updated format by @MrMCake in #1355
- [Modules] Update Conditional descriptions by @eriqua in #1376
- [Modules] Added multiple vm deployment example by @MrMCake in #1369
- [Modules] Fixing typos across Rbac descriptions by @eriqua in #1377
- [Modules] Added SQL Server Vulnerability Assessments by @MrRoundRobin in #1374
- [Fixes] Fixed some missing parts to pipelines and a mistake in wiki by @MariusStorhaug in #1381
- [Modules] VirtualMachine: Configure boot diagnostics with managed storage account by @lsnoddy in #1365
- [Modules] Added location output to templates by @MrMCake in #1371
- [Static Validation] Pester structural tests by @MrMCake in #1373
- [Modules] EventGrid: Set default values to a secure value by @lsnoddy in #1384
- [Modules] SQL-Server: Added private endpoint by @MrMCake in #1367
- [Wiki] picture fix: changing to by @segraef in #1391
- [CI Environment] Fixed location output test for global resources by @MrRoundRobin in #1390
- [Modules] allow 0 as min capacity by @rahalan in #1398
- [CI Environment] Set Az Context in Removal Stage in ADO by @SeSeicht in #1389
- [Modules] Update Eventhub Network Rules + latest APIs by @ahmadabdalla in #1387
- [Fixes] Update casing for IPsec connections by @luisarnauth in #1407
- [Static Validation] Ending parameter description with a dot by @eriqua in #1394
- [Fixes] Added missing output to tags module by @MrMCake in #1408
- [Modules] Fixed Inconsistent naming of NSGs IDs #1323 by @prasanjeets in #1406
- [Modules] Added telemetry to AAD module & description to docs by @MrMCake in #1393
- [Modules] VMSS add Condition to EncryptionAtHost by @SeSeicht in #1414
- [Modules] Update Recovery Services Vault API to latest by @SeSeicht in #1411
- [Modules] New App Configuration Stores module by @ArielRam99 in #1404
- [Modules] Added NetworkInterface module by @MrMCake in #1400
- [Fixes] Fixing ending dots for parameter descriptions by @eriqua in #1419
- [Modules] update parameter paths of Deployment Scripts by @SeSeicht in #1412
- [Fixes] Fixing ending dots for parameter descriptions continued by @eriqua in #1420
- [Modules] OperationalInsights add etag parameter to SavedSearches by @SeSeicht in #1413
- [Modules] Added private endpoint to application config by @MrMCake in #1418
- [Utilities]: Enabled generation script to add Bicep + JSON deployment examples to readme V2 by @MrMCake in #1362
- [Fixes] Fixing ending dots for parameter descriptions continued by @eriqua in #1424
- [Modules] Renamed parameter to more meaningful name by @MrMCake in #1423
- [CI Environment] Implemented purge for AppConfiguration by @MrMCake in #1426
- [CI Environment] Updated conditions for ADO dependency pipeline by @MrMCake in #1422
- [Static Validation] Add Pester test for conditional parameters description by @eriqua in #1427
- [Modules] Changed telemetry implementation to only deploy a single PID by @MrMCake in #1437
- [Modules] 1154 Add Public IP to Azure Firewall by @jontreynes in #1392
- [Fixes] Event Hub missing description dot by @eriqua in #1438
- [Modules] VM automanage update by @eriqua in #1444
- [Fixes] Fixed KeyVault reference for Bicep example in ReadMes by @MrMCake in #1439
- [Modules] Cleared out a mountain of compiler warnings by @MrMCake in #1447
- [Modules] Cross-Module references by @MrMCake in #1401
- [Wiki] Updated solution examples in Wiki by @MrMCake in #1375
- [CI Environment] Updated removal script to restore tokens by @MrMCake in #1449
- [CI Environment] Created Issue-Assignment pipeline by @MrMCake in #1456
- [Fixes] Updated references to the moved global variables file by @akata72 in #1467
- [Fixes] Fix typo in global test by @MariusStorhaug in #1464
- [Fixes] Swapped the values for tenantId and deploymentSpId by @akata72 in #1469
- [Fixes] Updated parameters description to fix failed Pester tests by @akata72 in #1480
- [CI Environment] Workaround for Az CLI bug + regenerated docs with fix #1471 by @MrMCake in #1476
- [Modules] Fix pipeline errors by @MrMCake in #1448
- [Modules] webhooks for ACR by @tjav in #1397
- [Modules] Implemented CMK for Storage Account by @MrMCake in #1431
- [CI Environment] Cleanup outdated custom removal logic for VWan by @eriqua in #1491
- [Modules] Formatted Automation Account parameter files by @MrMCake in #1485
- [Utilities] Replace space with %20 in the ADO projectname. by @akata72 in #1478
- [CI Environment] Update GitHub Workflows to use Azure/PowerShell action by @MariusStorhaug in #1451
- [CI Environment] Added removal for registrationDefinitions by @MrMCake in #1479
- [Modules] Cross referencing linkedServices module in automationAccount by @eriqua in #1494
- [Static Validation] Reworked tests to not use HTML & shared functions by @MrMCake in #1462
- [Modules] Adjusted locks, added tests & enabled removal by @MrMCake in #1446
- [Modules] Update PolicySet Definition Name limit to 64 by @SeSeicht in #1470
- [Fixes] Corrected AVD Host pool parameter for dependency pipeline by @MariusStorhaug in #1500
- [Static Validation] Updated tests to better handle resources that don't have standard outputs + updated 'skip' behavior + fixed Pester test result reference + fixed readme param name by @MrMCake in #1482
- [Fixes] Added principalType to RSV param by @MariusStorhaug in #1507
- [Modules] Added Public IP to Bastion Hosts module by @jontreynes in #1506
- [Fixes] Fixed ApplicationGateway pipeline deployment by updating the keyvault reference. by @akata72 in #1497
- [CI Environment] Improve runtime of
Set-EnvironmentOnAgent
script by @MrMCake in #1481 - [CI Environment] Switching Pester task back to AzPowerShell + Simplifying pipeline by @MrMCake in #1505
- [Static Validation] Fixed incorrect API test reference & env-value propagation by @MrMCake in #1508
- [Modules] Disable telemetry on cross referenced resources by @eriqua in #1510
- [Fixes] Fixed pipeline name parsing in Register-AzureDevOpsPipeline.ps1 by @julioas09 in #1509
- [Static Validation] Expanded Pester test output by @MrMCake in #1486
- [Fixes] removed comma by @chwunder in #1517
- [Modules] DataProtection Backupvaults added by @akata72 in #1496
- [CI Environment] Extend agent setup to be more robust by @MrMCake in #1522
- [CI Environment] Fixed lock removal + added error handling in case no deployment resource if found by @MrMCake in #1515
- [CI Environment] Updated the triggerpath from ..pipelineTemplates/module.* to pipelineTemplates/jobs.* by @akata72 in #1502
- [Modules] Renamed nested_rbac.bicep to nested_roleAssignments.bicep by @elbatane in #1501
- [Modules] Create solutions module and cross reference in workspace and automation account by @eriqua in #1511
- [Wiki] Update wiki with required GH settings for CI environment run by @chwunder in #1528
- [Modules] Fix Data Protection Backup Vault module by @eriqua in #1534
- [Modules] Fix Automation Account and Log Analytics Workspace by @eriqua in #1530
- [Modules] Compute Galleries API version update by @eriqua in #1529
- [Modules] Remove RBAC capabilities from ManagementGroup module by @MrMCake in #1542
- [Wiki] Management Group module known issues by @eriqua in #1544
- [Modules] Storage Account minor update to param example in networkAcls. by @akata72 in #1540
- [Modules] Azure Firewall cross referencing PIP by @eriqua in #1549
- [Modules] Disk Encryption Sets cross referencing KV access policies by @eriqua in #1548
- [Modules] Container registry updated default value by @prasanjeets in #1537
- [Modules] Key Values child resource for App configuration store by @ArielRam99 in #1536
- [Modules] Revert encryption default value and update container registry readme by @eriqua in #1552
- [Modules] Lock module and cross reference from RG by @eriqua in #1547
- [Modules] Fix locks output scope by @eriqua in #1559
- [Wiki] Overarching review and lingo update by @matebarabas in #1463
- [Fixes] Added missing closing bracket to Bicep deployment example, removed unsued VM module parameter & regenerated documentation by @MrMCake in #1556
- [CI Environment] Simplified env-setup script by @MrMCake in #1525
- [Modules] Updated ACR CMK implementation & adjusted deployment tests by @MrMCake in #1558
- [Wiki] Update wiki dependencies with latest added resources by @eriqua in #1561
- [Modules] Fix VM pipeline and align module symbolic links by @eriqua in #1562
- [Modules] AppConfiguration: Excluded not available features from free tier by @itpropro in #1567
- [Wiki] CARML personas by @matebarabas in #1560
- [Modules] Congnitive Services: Set secure defaults by @MrMCake in #1483
- [Utilities] Added Format-Release function by @MrMCake in #1569
- [Wiki] Sidebar and contribution flow update by @eriqua in #1573
- [Wiki] Contribution flow remove duplicate by @eriqua in #1574
New Contributors
- @JPEasier made their first contribution in #1345
- @MrRoundRobin made their first contribution in #1366
- @luisarnauth made their first contribution in #1407
- @prasanjeets made their first contribution in #1406
- @ArielRam99 made their first contribution in #1404
- @tjav made their first contribution in #1397
- @julioas09 made their first contribution in #1509
- @chwunder made their first contribution in #1517
- @matebarabas made their first contribution in #1463
- @itpropro made their first contribution in #1567
Full Changelog: v0.5.0...v0.6.0