Terraform Tutorial Azure

Author: naeemaa00

Terraform Tutorial Azure/.github/workflows/terraform-apply.yml

@@ -0,0 +1,28 @@
+name: Terraform Apply
+
+on: 
+  push:
+   branches:
+     - main
+
+jobs:
+  terraform:
+    runs-on: ubuntu-latest
+
+    env:
+      ARM_CLIENT_ID: ${{secrets.ARM_CLIENT_ID}}
+      ARM_CLIENT_SECRET: ${{secrets.MYSUPERSECRETE}}
+      ARM_SUBSCRIPTION_ID: ${{secrets.MYSBSCRIPTIONID}}
+      ARM_TENANT_ID: ${{secrets.ARM_TENANT_ID}}
+
+    steps:
+      - uses: actions/checkout@v2
+
+      - name: Setup Terraform
+        uses: hashicorp/setup-terraform@v1
+
+      - name: Terraform Init
+        run: terraform init
+
+      - name: Terraform Apply
+        run: terraform apply -auto-approve

Terraform Tutorial Azure/.github/workflows/terraform-plan.yml

@@ -0,0 +1,28 @@
+name: Terraform Plan
+
+on: 
+  push:
+   branches:
+     - FeatureBranch1
+
+jobs:
+  terraform:
+    runs-on: ubuntu-latest
+
+    env:
+      ARM_CLIENT_ID: ${{secrets.ARM_CLIENT_ID}}
+      ARM_CLIENT_SECRET: ${{secrets.MYSUPERSECRETE}}
+      ARM_SUBSCRIPTION_ID: ${{secrets.MYSBSCRIPTIONID}}
+      ARM_TENANT_ID: ${{secrets.ARM_TENANT_ID}}
+
+    steps:
+      - uses: actions/checkout@v2
+
+      - name: Setup Terraform
+        uses: hashicorp/setup-terraform@v1
+
+      - name: Terraform Init
+        run: terraform init
+
+      - name: Terraform Plan
+        run: terraform plan

Terraform Tutorial Azure/AzureAPIM.tf

@@ -0,0 +1,33 @@
+## RG creation
+resource "azurerm_resource_group" "CloudQuickPOCAPIMRG" {
+  name     = "CloudQuickPOCAPIMRG"
+  location = "West Europe"
+}
+
+## API Management creation
+resource "azurerm_api_management" "CloudQuickPOCAPIM" {
+  name                = "CloudQuickPOCsPIM"
+  location            = azurerm_resource_group.CloudQuickPOCAPIMRG.location
+  resource_group_name = azurerm_resource_group.CloudQuickPOCAPIMRG.name
+  publisher_name      = "CloudQucikPOCs"
+  publisher_email     = "[email protected]"
+
+  sku_name = "Developer_1"
+}
+
+## An API within APIM
+resource "azurerm_api_management_api" "CloudQuickPOCAPIMAPI" {
+  name                = "cloudquickpocsapim-api"
+  resource_group_name = azurerm_resource_group.CloudQuickPOCAPIMRG.name
+  api_management_name = azurerm_api_management.CloudQuickPOCAPIM.name
+  revision            = "1"
+  display_name        = "CloudQuickPOCsFirstAPI"
+  path                = ""
+  protocols           = ["https", "http"]
+  service_url         = "http://conferenceapi.azurewebsites.net"
+
+  import {
+    content_format = "swagger-link-json"
+    content_value  = "http://conferenceapi.azurewebsites.net/?format=json"
+  }
+}

Terraform Tutorial Azure/AzureBastion.tf

@@ -0,0 +1,43 @@
+# Create Azure RG
+resource "azurerm_resource_group" "ABS" {
+  name     = "cloudquickpocs-Bastion-resources"
+  location = "West Europe"
+}
+
+# Create Azure Vnet
+resource "azurerm_virtual_network" "ABS" {
+  name                = "bastiondemovnet"
+  address_space       = ["192.168.1.0/24"]
+  location            = azurerm_resource_group.ABS.location
+  resource_group_name = azurerm_resource_group.ABS.name
+}
+
+# Create Azure subnet
+resource "azurerm_subnet" "ABS" {
+  name                 = "AzureBastionSubnet"
+  resource_group_name  = azurerm_resource_group.ABS.name
+  virtual_network_name = azurerm_virtual_network.ABS.name
+  address_prefixes     = ["192.168.1.224/27"]
+}
+
+# Create Azure public IP
+resource "azurerm_public_ip" "ABS" {
+  name                = "bastiondemovnetpip"
+  location            = azurerm_resource_group.ABS.location
+  resource_group_name = azurerm_resource_group.ABS.name
+  allocation_method   = "Static"
+  sku                 = "Standard"
+}
+
+# Create Azure bastion
+resource "azurerm_bastion_host" "ABS" {
+  name                = "cqpocsbastionfordemo"
+  location            = azurerm_resource_group.ABS.location
+  resource_group_name = azurerm_resource_group.ABS.name
+
+  ip_configuration {
+    name                 = "configuration"
+    subnet_id            = azurerm_subnet.ABS.id
+    public_ip_address_id = azurerm_public_ip.ABS.id
+  }
+}

Terraform Tutorial Azure/AzureCosmosDB.tf

@@ -0,0 +1,43 @@
+# Create Azure RG
+resource "azurerm_resource_group" "rg" {
+  name = "cloudquickpocscosmosdbrg"
+  location = "East US"
+}
+
+# Create Azure Cosmos DB Account
+resource "azurerm_cosmosdb_account" "acc" {
+  name = "cloudquickpocscosmosdbaccount"
+  location = "${azurerm_resource_group.rg.location}"
+  resource_group_name = "${azurerm_resource_group.rg.name}"
+  offer_type = "Standard"
+  kind = "GlobalDocumentDB"
+  enable_automatic_failover = true
+  consistency_policy {
+    consistency_level = "Session"
+  }
+
+  geo_location {
+    location = "West US"
+    failover_priority = 1
+  }
+  geo_location {
+    location = "${azurerm_resource_group.rg.location}"
+    failover_priority = 0
+  }
+}
+
+# Azure Cosmos DB database
+resource "azurerm_cosmosdb_sql_database" "db" {
+  name = "products"
+  resource_group_name = "${azurerm_cosmosdb_account.acc.resource_group_name}"
+  account_name = "${azurerm_cosmosdb_account.acc.name}"
+}
+
+#Azure Cosmos DB database container
+resource "azurerm_cosmosdb_sql_container" "coll" {
+  name = "Devices"
+  resource_group_name = "${azurerm_cosmosdb_account.acc.resource_group_name}"
+  account_name = "${azurerm_cosmosdb_account.acc.name}"
+  database_name = "${azurerm_cosmosdb_sql_database.db.name}"
+  partition_key_path = "/Devices"
+}

Terraform Tutorial Azure/AzureCustomRBAC/Creds.tf

@@ -0,0 +1,10 @@
+provider "azurerm" {
+ # The "feature" block is required for AzureRM provider 2.x. 
+ # If you're using version 1.x, the "features" block is not allowed.
+ version = "~>2.0"
+ features {}
+ subscription_id = "YOUR_SUBSCRIPTION_ID"
+ client_id  = "YOUR_SPN_CLIENT_ID"
+ client_secret  = "YOUR_SPN_CLIENT_SECRETE"
+ tenant_id       =  "YOUR_TENANT_ID"
+}

Terraform Tutorial Azure/AzureCustomRBAC/CustomRBAC.tf

@@ -0,0 +1,28 @@
+
+#Create Custom RBAC using Terrafrom - CloudQuickPOCS
+resource "azurerm_role_definition" "CloudQuickPOCCustomRBAC" {
+  name        = "POC-Custom-RBAC"
+  scope       = "/subscriptions/49d3ec60-54b5-41c0-b240-c0cc7980a4f4"
+  description = "Created for demo at CLoudQuickPOCs"
+
+  permissions {
+    actions = [
+		"Microsoft.Support/*"
+    ]
+    not_actions = [
+
+		]
+  }
+
+  assignable_scopes = [
+	"/subscriptions/49d3ec60-54b5-41c0-b240-c0cc7980a4f4"
+  ]
+}
+
+
+#Assign Custom RBAC using Terrafrom - CloudQuickPOCS
+resource "azurerm_role_assignment" "CloudQuickPOCCustomRBACAssignment" {
+  scope              = "/subscriptions/49d3ec60-54b5-41c0-b240-c0cc7980a4f4"
+  role_definition_id = azurerm_role_definition.CloudQuickPOCCustomRBAC.role_definition_resource_id
+  principal_id       = "ce85eae4-0769-4f77-b1b8-a253f34a6160"
+}

Terraform Tutorial Azure/AzureCustomRBAC/Helpfile.ps1

@@ -0,0 +1,3 @@
+
+#Create Custom RBAC using Terrafrom - CloudQuickPOCS
+Get-AzProviderOperation "Microsoft.Storage/*" | Select-Object OperationName, Operation, Description

Terraform Tutorial Azure/AzureCustomRBAC/azurerm_dummy_creds.txt

@@ -0,0 +1,11 @@
+#Terraform Provider Block - CloudQuickPOCS
+provider "azurerm" {
+ # The "feature" block is required for AzureRM provider 2.x. 
+ # If you're using version 1.x, the "features" block is not allowed.
+ version = "~>2.0"
+ features {}
+ subscription_id = "your subscription_id"
+ client_id  = "your spn client id"
+ client_secret  = "your spn secrete"
+ tenant_id       =  "your tenant id"
+}