Merge pull request #4 from azurenoops/Update_labs

Update labs
azurenoops · Feb 12, 2025 · 0092fad · 0092fad
2 parents ec8dd74 + 14325e5
commit 0092fad
Show file tree

Hide file tree

Showing 14 changed files with 785 additions and 183 deletions.
diff --git a/docs/Federal/Trainee/assets/lab2-controlplane/argocd-dashboard.png b/docs/Federal/Trainee/assets/lab2-controlplane/argocd-dashboard.png
diff --git a/docs/Federal/Trainee/assets/lab2-controlplane/argocd-login.png b/docs/Federal/Trainee/assets/lab2-controlplane/argocd-login.png
diff --git a/docs/Federal/Trainee/workshop.md b/docs/Federal/Trainee/workshop.md
diff --git a/terraform/aks/kubeconfig b/terraform/aks/kubeconfig
@@ -0,0 +1,20 @@
+apiVersion: v1
+clusters:
+- cluster:
+    certificate-authority-data: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUU2RENDQXRDZ0F3SUJBZ0lRTmQ2U1FtRzg0SkpSZU4xZFRndVFsREFOQmdrcWhraUc5dzBCQVFzRkFEQU4KTVFzd0NRWURWUVFERXdKallUQWdGdzB5TlRBeU1UQXhOVEEwTURsYUdBOHlNRFUxTURJeE1ERTFNVFF3T1ZvdwpEVEVMTUFrR0ExVUVBeE1DWTJFd2dnSWlNQTBHQ1NxR1NJYjNEUUVCQVFVQUE0SUNEd0F3Z2dJS0FvSUNBUURCCkRpakpWb21sZHB1Ti9NM2JXWXhDd3kxcWZkaWdpNXljOGxsWGZ2WVlEOXpBOWlIWjM4MXJMU1hsMmc4UWZ0L3cKMVNNd0tmZSt5S09RcWNyQ0RzTnIzRFVNcTBpVFN6V1JMZll2WlFoUFM2SGZacWdKbmRsaFk0c08wSjBONUt3SgpuV3JqU2g0UXgxVCtOdkdaa05FMWVyNlRXclVXR2FFZldOZkZMZVlnRUpKTlVvemlhZDdyMmJIQ1J0RHZGMVRrCmV6MlhtcTY5UXBOMDhFU3hzeE1aMmhiOWxxcU9VVUdjTDBrZXQzL3ZiOWlOWTk3M25Td2xOdDNrVm94ZlJVeDUKNzREL0pMdzdub0x2UTRQc1VMU3gvSFVFRmF2c3IvcFh2TzRHVHo5TEd1ektvTFJFK2twUys1U2g1SXFzUlR3KwpLVmNnOTB6eUFaTGo2bUZhYUZ0b3NXek9ZakhnUldjU3JXNzJSWEYxRFpuZG5vbjBiWUpFdzdMNlBMd1VvWVphCjBEK05XWlZ3eTVrdFZ3eFVFeU1CdFJMNldFTU1HdmhRelN6Uk9pQmY3MlVhOHprMjBRanUxVEhscnU5YmtKUkYKMlpLSEwvMnk5aDJYTEgrMDhHbkNiUVBGdXFML1Y5ZjBsTUdBQjhwL1lpd3diUTFHNjhEdHNLc1h6UzJ6NTlCdwoyVFU2eFR2U2lWcTdPM1VnTG12b0RkN1NLK0JBQnY1N1pDR1VxTFhWa2FhRlladURTQWdadmN3ZGVoNmJzR002CjdvdGVZWjRBdDhRZThJVzJCYVpYYmpLanl2aDIrb2dqTmdoQStTTHBQbEdZQ20wS1FIZnJDaURKUHBiNURZQkUKbm9sRUdVbWpuUXdONWcyRG9CRlA0M2I1MTNDUExzWHp5UTFaVGg3eUp3SURBUUFCbzBJd1FEQU9CZ05WSFE4QgpBZjhFQkFNQ0FxUXdEd1lEVlIwVEFRSC9CQVV3QXdFQi96QWRCZ05WSFE0RUZnUVVGUjlKVTBMemE5WjRCUzdlCmc0WWZJYk9DNHBBd0RRWUpLb1pJaHZjTkFRRUxCUUFEZ2dJQkFBMGlQeHl2bmhCdXpmemlxTEliUlBiaHJyNnIKRU1ZUTFNRGxxZEFMY0dhUkxqRVpib2RpNEN5Y3lHQUxsQnN5OGJvYkNUeUQ5NkZScW92S2dYcStHYms3MExRZQpXNTNKcWdKdmozWnIrUXUwTWM0cU1SYzJ6WjdDQnBjVFdZN09laWhrOWgxNTcxVU1MTVBTZUtvRUNpR0FhVEM2CjNkSHc4SmxpZnpMZmZLQmY4Zi81YWF1ZVZ6VWVWS09zY28vWmhoZnAwdGRHMkZGb1pYMFJxWGJNT1I5SzNJWUMKYUZsQmNJNTZrdFRCclkxcUg1MlVwcFBIaEVXRkxPbkY3NWU2M282cHBlOFl1Y216RHd3UUtSN3k5Y3V1ZEh6WgpnNms4K1lvS043dEtKRHZPc0FpMm00YktIaWpINjM3K0xqQzV3YlV5d2t2RWJaSGIybUEzRG13R2g0Znc2dktKClRBY0xDUjA5MHI5bi9RWHFpYldDQy80aGRvNHR2b3ByTzRLRVYxSEZFdDkzc09JSmFnMWhKZWh6MDhYb0U1eTIKcEZkMTZTOXRudXJZMmx6cCtPa2lvcGxaK3d1K0dkNDRxREx1NjJvRmNGSDd2UTBVWTh2R3o1b0N2TGF2eFc3agpMSFFSVTNvRTlLc3cyQitnVldvbGdlRkxXdXhlR01WWWc1dmNMTksvNHBZTzd3VTJDT2FSc2RrcTFFVDRRSnkwCkhEaGFRVjV6ZVFpaHZNTGdPR3lnbGZFNE5pYzg0WCs1ckNvL1UxcHR2aEs2RllqOXdJQytlQjRNNE16YTE0bkUKUEFNdjBVeVFCYXJpL3pJanA3WHVrcG1RcGU0VFFSRnRMVnlJdm91Q2N4Y2taTXQyVGdJZ1V1eVJTVHk5NVpsbwo0ZWpncWI1QURYRlVqTmpICi0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K
+    server: https://gitops-u2a8ovht.hcp.usgovvirginia.cx.aks.containerservice.azure.us:443
+  name: gitops-aks
+contexts:
+- context:
+    cluster: gitops-aks
+    user: clusterUser_aks-gitops_gitops-aks
+  name: gitops-aks
+current-context: gitops-aks
+kind: Config
+preferences: {}
+users:
+- name: clusterUser_aks-gitops_gitops-aks
+  user:
+    client-certificate-data: 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
+    client-key-data: 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
+    token: 6mke0mlp0gyam4s2m181t88wu3c9jf2e4ujhpfdfy6dupt801mg86j01cq7ktczgp2wkjlv8qx8dyemndhc447g0rffqn1yfgf3qlm8kbvgk1ipxyuj4je7kod5mqmm1
diff --git a/terraform/aks/main.tf b/terraform/aks/main.tf
@@ -34,37 +34,37 @@ module "network" {
 ################################################################################
 
 module "aks" {
-  source                            = "Azure/aks/azurerm"
-  version                           = "9.1.0"
-  resource_group_name               = azurerm_resource_group.this.name
-  location                          = var.location
-  kubernetes_version                = var.kubernetes_version
-  orchestrator_version              = var.kubernetes_version
-  role_based_access_control_enabled = var.role_based_access_control_enabled
-  rbac_aad                          = var.rbac_aad
-  prefix                            = var.prefix
-  network_plugin                    = var.network_plugin
-  vnet_subnet_id                    = lookup(module.network.vnet_subnets_name_id, "aks")
-  os_disk_size_gb                   = var.os_disk_size_gb
-  os_sku                            = var.os_sku
-  sku_tier                          = var.sku_tier
-  private_cluster_enabled           = var.private_cluster_enabled
-  enable_auto_scaling               = var.enable_auto_scaling
-  enable_host_encryption            = var.enable_host_encryption
-  log_analytics_workspace_enabled   = var.log_analytics_workspace_enabled
-  agents_min_count                  = var.agents_min_count
-  agents_max_count                  = var.agents_max_count
-  agents_count                      = null # Please set `agents_count` `null` while `enable_auto_scaling` is `true` to avoid possible `agents_count` changes.
-  agents_max_pods                   = var.agents_max_pods
-  agents_pool_name                  = "system"
-  agents_availability_zones         = ["1", "2", "3"]
-  agents_type                       = "VirtualMachineScaleSets"
-  agents_size                       = var.agents_size
-  monitor_metrics                   = {}
-  azure_policy_enabled              = var.azure_policy_enabled
-  microsoft_defender_enabled        = var.microsoft_defender_enabled
-  tags                              = var.tags
-  green_field_application_gateway_for_ingress = var.green_field_application_gateway_for_ingress
+  source                                          = "Azure/aks/azurerm"
+  version                                         = "9.1.0"
+  resource_group_name                             = azurerm_resource_group.this.name
+  location                                        = var.location
+  kubernetes_version                              = var.kubernetes_version
+  orchestrator_version                            = var.kubernetes_version
+  role_based_access_control_enabled               = var.role_based_access_control_enabled
+  rbac_aad                                        = var.rbac_aad
+  prefix                                          = var.prefix
+  network_plugin                                  = var.network_plugin
+  vnet_subnet_id                                  = lookup(module.network.vnet_subnets_name_id, "aks")
+  os_disk_size_gb                                 = var.os_disk_size_gb
+  os_sku                                          = var.os_sku
+  sku_tier                                        = var.sku_tier
+  private_cluster_enabled                         = var.private_cluster_enabled
+  enable_auto_scaling                             = var.enable_auto_scaling
+  enable_host_encryption                          = var.enable_host_encryption
+  log_analytics_workspace_enabled                 = var.log_analytics_workspace_enabled
+  agents_min_count                                = var.agents_min_count
+  agents_max_count                                = var.agents_max_count
+  agents_count                                    = null # Please set `agents_count` `null` while `enable_auto_scaling` is `true` to avoid possible `agents_count` changes.
+  agents_max_pods                                 = var.agents_max_pods
+  agents_pool_name                                = "system"
+  agents_availability_zones                       = ["1", "2", "3"]
+  agents_type                                     = "VirtualMachineScaleSets"
+  agents_size                                     = var.agents_size
+  monitor_metrics                                 = {}
+  azure_policy_enabled                            = var.azure_policy_enabled
+  microsoft_defender_enabled                      = var.microsoft_defender_enabled
+  tags                                            = var.tags
+  green_field_application_gateway_for_ingress     = var.green_field_application_gateway_for_ingress
   create_role_assignments_for_application_gateway = var.create_role_assignments_for_application_gateway
 
   workload_identity_enabled = true
@@ -150,8 +150,8 @@ resource "kubernetes_secret" "git_secrets" {
   depends_on = [kubernetes_namespace.argocd_namespace]
   for_each = {
     git-addons = {
-      type          = "git"
-      url           = var.gitops_addons_org
+      type = "git"
+      url  = var.gitops_addons_org
       # sshPrivateKey = file(pathexpand(var.git_private_ssh_key))
     }
   }
@@ -177,7 +177,7 @@ module "gitops_bridge_bootstrap" {
     cluster_name = module.aks.aks_name
     environment  = local.environment
     metadata = merge(local.cluster_metadata,
-    {
+      {
         kubelet_identity_client_id = module.aks.kubelet_identity[0].client_id
         subscription_id            = data.azurerm_subscription.current.subscription_id
         tenant_id                  = data.azurerm_subscription.current.tenant_id
@@ -189,4 +189,4 @@ module "gitops_bridge_bootstrap" {
     namespace     = local.argocd_namespace
     chart_version = var.addons_versions[0].argocd_chart_version
   }
-}
+}
diff --git a/terraform/backstage/locals.tf b/terraform/backstage/locals.tf
@@ -2,4 +2,11 @@ locals {
   name        = local.environment
   environment = "backstage"
   location    = var.location
+
+  gitops_addons_url      = "${var.gitops_addons_org}/${var.gitops_addons_repo}"
+  gitops_addons_basepath = var.gitops_addons_basepath
+  gitops_addons_path     = var.gitops_addons_path
+  gitops_addons_revision = var.gitops_addons_revision
+
+  github_token = var.github_token
 }