Azure

[

Azure Resource Manager (ARM) templates for deploying Azure infrastructure.

Common

The common ARM template deploys:

• Azure Key Vault
• Azure Container Registry

Application

The application ARM template deploys:

• Azure Key Vault
• Azure Application Insights
• Azure Log Analytics
• Azure Kubernetes Service

Creating a new Deployment

When deploying to a new cluster, follow these steps:

1. Run the following command to create a service principal and make note of the client ID and client secret:

az ad sp create-for-rbac --name="ummati-<Environment>" --role="Contributor" --scopes="/subscriptions/<Subscription ID>/resourceGroups/<Resource Group Name>" --years=999

2. Comment out the following parameters in <Environment>.parameters.json:

kubernetes_servicePrincipalClientId
kubernetes_servicePrincipalClientSecret

3. Run the ARM template deployment with the client ID and client secret from above.

4. Run the following command to give Azure Kubernetes Service (AKS) access to Azure Container Registry (ACR):

az acr show --resource-group <Resource Group Name> --name <ACR Name> --query "id" --output tsv
az role assignment create --assignee <Client ID> --scope <ACR Resource ID> --role Reader

5. Uncomment the following parameters in <Environment>.parameters.json to use Azure Key Vault to retrieve them for future deployments of the same resource.

kubernetes_servicePrincipalClientId
kubernetes_servicePrincipalClientSecret

6. Deploy the Helm charts.

7. Connect to Azure Kubernetes Service.

az aks get-credentials --resource-group <Resource Group Name> --name <AKS Name>

8. Run this command to see what IP address the external services are running on.

kubectl get services --all-namespaces

9. Update Cloudflare DNS entries to point to the new IP addresses.

Deleting a Deployment

1. Delete the <Resource Group Name> resource group.
2. Delete the Kubernetes-<Resource Group Name> resource group.
3. Delete the Azure Active Directory application registration called ummati-<Environment>.

Upgrading Kubernetes

Get a list of the Kubernetes versions available:

az aks get-upgrades --resource-group <Resource Group Name> --name <Cluster Name> --output table