-
Notifications
You must be signed in to change notification settings - Fork 3
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
feature: Latest changes from likvid-cloudfoundation prod branch
- Loading branch information
1 parent
54a01b2
commit a40e846
Showing
83 changed files
with
1,207 additions
and
403 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,43 +1,37 @@ | ||
| output "documentation_md" { | ||
| value = <<EOF | ||
| # 🌐 Cloud Foundation Deployment | ||
| # Cloud Foundation Deployment | ||
| %{if var.terraform_state_storage != null} | ||
| ## 🔒 Terraform State Management | ||
| ## Terraform State Management | ||
| Terraform state for the cloud foundation repository is stored in an Azure Blob Storage Container. 🗄️ | ||
| This container is located in the subscription `${data.azurerm_subscription.current.display_name}`. 🎫 | ||
| Resource Group: `${module.terraform_state.resource_group_name}` 📁 | ||
| Access to terraform state is restricted to members of the `${azuread_group.platform_engineers.display_name}` group. 👥 | ||
| Terraform state for the cloud foundation repository is stored in an Azure Blob Storage Container. | ||
| This container is located in the subscription `${data.azurerm_subscription.current.display_name}`. | ||
| Access to terraform state is restricted to members of the `${azuread_group.platform_engineers.display_name}` group. | ||
| %{endif} | ||
| %{if var.documentation_uami != null || var.validation_uami != null} | ||
| ## 🤖 Automation | ||
| ## Automation | ||
| %{if var.documentation_uami != null} | ||
| The UAMI `${azurerm_user_assigned_identity.docs[0].name}` has been set up for the automated creation of | ||
| landing zone documentation via a GitHub actions pipeline. This UAMI has read-only access to terraform state. 📚 | ||
| landing zone documentation via a GitHub actions pipeline. This UAMI has read-only access to terraform state. | ||
| %{endif} | ||
| %{if var.validation_uami != null} | ||
| The UAMI `${azurerm_user_assigned_identity.validation[0].name}` has been set up for the automated validation a GitHub actions pipeline. | ||
| This UAMI has read-only access to terraform state and read only access to the entire landing zone architecture. 🏗️ | ||
| This UAMI has read-only access to terraform state and read only access to the entire landing zone architecture. | ||
| %{endif} | ||
| %{endif} | ||
| ## 👨💻 Platform Engineer Access Management | ||
| ## Platform Engineer Access Management | ||
| The `${azuread_group.platform_engineers.display_name}` group is used to grant privileged access to members of the | ||
| cloud foundation team. The group has the following members: | ||
| ${join("\n", formatlist("- %s", var.platform_engineers_members[*].email))} | ||
| |permissions| | ||
| |-| | ||
| ${join("\n", formatlist("| %s |", azurerm_role_definition.cloudfoundation_deploy.permissions[0].actions))} | ||
| EOF | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -36,27 +36,25 @@ provider "azuread" { | |
| EOF | ||
| } | ||
|
|
||
| locals { | ||
| location = "germanywestcentral" #TODO change, the azure location of the resource group and storage account | ||
| } | ||
|
|
||
| inputs = { | ||
| parent_management_group_name = "cloudfoundation-management-group" #TODO the cloudfoundation is created in a separate management group so as not to jeopardize the existing infrastructure | ||
| aad_tenant_id = include.platform.locals.platform.azure.aadTenantId | ||
|
|
||
| terraform_state_storage = { | ||
| name = "${include.platform.locals.cloudfoundation.name}" | ||
| location = local.location | ||
| location = "germanywestcentral" #TODO change, the azure location of the resource group and storage account | ||
| config_file_path = include.platform.locals.terraform_state_config_file_path # platform.hcl expects state configuration output in this location, do not change | ||
| } | ||
| platform_engineers_group = "cloudfoundation-platform-engineers" | ||
|
|
||
| platform_engineers_members = [ | ||
| { | ||
| email = "[email protected]" #TODO change, enter PLATFORM ENGINEERS MAIL here | ||
| upn = "[email protected]" #TODO change, enter PLATFORM ENGINEERS UPN here | ||
| } | ||
| ] | ||
| key_vault = { | ||
| name = "cloudfoundation-kv" | ||
| resource_group_name = "cloudfoundation-keyvault" | ||
| name = "likvid-cloudfoundation-kv" | ||
| resource_group_name = "likvid-cloudfoundation-keyvault" | ||
| } | ||
|
|
||
|
|
||
| } | ||
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.