-
Notifications
You must be signed in to change notification settings - Fork 3
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
feature: Latest changes from likvid-cloudfoundation prod branch
- Loading branch information
1 parent
54a01b2
commit 2a342e9
Showing
105 changed files
with
1,489 additions
and
433 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,7 +1,7 @@ | ||
| output "billing_admins_azuread_group_id" { | ||
| value = azuread_group.billing_admins.id | ||
| value = azuread_group.billing_admins.object_id | ||
| } | ||
|
|
||
| output "billing_readers_azuread_group_id" { | ||
| value = azuread_group.billing_readers.id | ||
| value = azuread_group.billing_readers.object_id | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,43 +1,37 @@ | ||
| output "documentation_md" { | ||
| value = <<EOF | ||
| # 🌐 Cloud Foundation Deployment | ||
| # Cloud Foundation Deployment | ||
| %{if var.terraform_state_storage != null} | ||
| ## 🔒 Terraform State Management | ||
| ## Terraform State Management | ||
| Terraform state for the cloud foundation repository is stored in an Azure Blob Storage Container. 🗄️ | ||
| This container is located in the subscription `${data.azurerm_subscription.current.display_name}`. 🎫 | ||
| Resource Group: `${module.terraform_state.resource_group_name}` 📁 | ||
| Access to terraform state is restricted to members of the `${azuread_group.platform_engineers.display_name}` group. 👥 | ||
| Terraform state for the cloud foundation repository is stored in an Azure Blob Storage Container. | ||
| This container is located in the subscription `${data.azurerm_subscription.current.display_name}`. | ||
| Access to terraform state is restricted to members of the `${azuread_group.platform_engineers.display_name}` group. | ||
| %{endif} | ||
| %{if var.documentation_uami != null || var.validation_uami != null} | ||
| ## 🤖 Automation | ||
| ## Automation | ||
| %{if var.documentation_uami != null} | ||
| The UAMI `${azurerm_user_assigned_identity.docs[0].name}` has been set up for the automated creation of | ||
| landing zone documentation via a GitHub actions pipeline. This UAMI has read-only access to terraform state. 📚 | ||
| landing zone documentation via a GitHub actions pipeline. This UAMI has read-only access to terraform state. | ||
| %{endif} | ||
| %{if var.validation_uami != null} | ||
| The UAMI `${azurerm_user_assigned_identity.validation[0].name}` has been set up for the automated validation a GitHub actions pipeline. | ||
| This UAMI has read-only access to terraform state and read only access to the entire landing zone architecture. 🏗️ | ||
| This UAMI has read-only access to terraform state and read only access to the entire landing zone architecture. | ||
| %{endif} | ||
| %{endif} | ||
| ## 👨💻 Platform Engineer Access Management | ||
| ## Platform Engineer Access Management | ||
| The `${azuread_group.platform_engineers.display_name}` group is used to grant privileged access to members of the | ||
| cloud foundation team. The group has the following members: | ||
| ${join("\n", formatlist("- %s", var.platform_engineers_members[*].email))} | ||
| |permissions| | ||
| |-| | ||
| ${join("\n", formatlist("| %s |", azurerm_role_definition.cloudfoundation_deploy.permissions[0].actions))} | ||
| EOF | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.