Skip to content
This repository has been archived by the owner on Jul 26, 2024. It is now read-only.

blinQ: Template updates, support for Enterprise Scale module v3.0.0 #439

Closed
wants to merge 150 commits into from

Conversation

heintonny
Copy link

Issue-id

PR Checklist


  • I have updated the documentation accordingly.
  • I have added tests to cover my changes.
  • All new and existing tests passed.
  • [X ] My code follows the code style of this project.
  • [X ] I ran lint checks locally prior to submission.
  • [] Have you checked to ensure there aren't other open Pull Requests for the same update/change?

Description

This pull request might overlap with some of the commits in PR 436. We probably need to discuss this PR in our next meeting.
Main topic for this PR is:

  • Fix some bugs in Ansible template for multi subscription deployment
  • Add support for enterprise scale module v3.0.0 to deploy core landing zones and policy
  • Template workaround for: Validation for Group ownership is broken microsoftgraph/msgraph-metadata#92
  • Add support for sub_sandbox in template
  • Add Ansible logic to create private endpoints and user defined routes. This is required so that lz resources don't brake policy requirements and downgrade the security score. Target should be 100% score for lz resources, this needs some more work and discussions about the bootstrap process and when and how public endpoints should be closed by Ansible configuration updates
  • +++

MS might not want to include all these commits based on target architecture decisions, but we belive most of the contribution will benefit the community.

Does this introduce a breaking change

  • YES
  • NO

Testing

We have tested the template version locally

heintonny added 30 commits September 18, 2022 11:08
…storage account and keyvault firewall to Allow all: for some reason bootstrap from Github Codespace don't work with storage account and keyvault firewall rules
Added private_endpoints and private_dns to launchpad
public_network_access_enabled,
subnet_ids +++
Github pipelines and fix minor issues.
keyvaults and storage accounts
and set env.var. for GITHUB org and repo.
normal user and serviceprincipal login
Hein Tonny Køien added 22 commits December 19, 2022 23:05
launchpad.yaml - remove "if rout_table is defined"
azurerm_routes and route_table
missing information about the new route_table_key.
…er to caf_environment for role prefix, should be alz_mg_prefix.
…o level.archtype_resources, should be level.archtype_config according to yaml file.
…refix>-caf-identity, should be <prefix>-identity accourding to the other Azure AD groups.
…ption. Created custom policy set definition and assignment for MDFC config.
…t for MDFC config. Add walkthrough variable for minimalSeverity and update archtype_config_overrides.
@heintonny heintonny changed the base branch from main to int-5.6.0 December 29, 2022 23:33
@heintonny
Copy link
Author

Changed base to int-5.6.0 branch that we used as a starting point.

@@ -16,7 +16,7 @@
- name: customer_name
prompt: Set the short version of your customer name with no spaces
private: no
default: contoso
Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No point to change the default, let's keep the contoso

@@ -26,7 +26,7 @@
- name: prefix
prompt: Set the prefix to add to all resource.
private: no
default: caf
Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No point to change the default, let's keep caf

@heintonny heintonny changed the title Blinq 5.8.0 blinQ: Template updates, support for Enterprise Scale module v3.0.0 Dec 30, 2022
@arnaudlh arnaudlh changed the base branch from int-5.6.0 to fix.bootstrap_order March 22, 2023 06:59
@LaurentLesle
Copy link
Contributor

Will not merge it as 5.6.9 will include it

@heintonny heintonny deleted the blinq-5.8.0 branch July 28, 2023 07:01
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants