Terraform Module for Deploying Maester on Azure DevOps

This Terraform Module will help you through setting up Maester in Azure DevOps and automate the running of tests using Azure DevOps Pipelines. 🔥

Permissions

Ensure you have Global Administrator and permissions within Azure DevOps.

• You can temporary use a PAT to deploy the resources.

Requirements

Name	Version
azuredevops	1.6.0
azurerm	~>4.0

Providers

Name	Version
azuread	3.1.0
azuredevops	1.6.0
azurerm	4.18.0

Modules

No modules.

Resources

The following resources are created by this configuration:

Name	Type
azuread_app_role_assignment.app_role_assignments	resource
azuread_service_principal.ado_service_connection_principal	resource
azuread_service_principal.ms_graph	resource
azuredevops_build_definition.maester_build	resource
azuredevops_git_repository.maester_repository	resource
azuredevops_git_repository_file.maester_pipeline	resource
azuredevops_project.maester_project	resource
azuredevops_serviceendpoint_azurerm.maester_service_connection	resource
azurerm_resource_group.maester_resourcegroup	resource
azuread_application_published_app_ids.well_known	data source

Inputs

Name	Description	Type	Default	Required
azure_devops_org_name	The Azure DevOps Organization Name	string	n/a	yes
azure_devops_project_name	The Azure DevOps Project Name	string	"Maester"	no
azure_devops_service_connection_name	The Azure DevOps Service Connection Name	string	"sc-maester-wif"	no
azure_resourcegroup_location	The Azure Resource Group Location	string	"West Europe"	no
azure_resourcegroup_name	The Azure Resource Group Name	string	"rg-maester-prod"	no
azure_subscription_id	The Azure Subscription ID	string	n/a	yes
azure_subscription_name	The Azure Subscription Name	string	n/a	yes
azure_tenant_id	The Azure Tenant ID	string	n/a	yes
graph_app_roles	The list of Graph API app roles to assign to the Azure DevOps Service Connection Principal	list(string)	[ "Directory.Read.All", "DirectoryRecommendations.Read.All", "IdentityRiskEvent.Read.All", "Policy.Read.All", "Policy.Read.ConditionalAccess", "PrivilegedAccess.Read.AzureAD", "Reports.Read.All", "RoleEligibilitySchedule.Read.Directory", "RoleManagement.Read.All", "SharePointTenantSettings.Read.All", "UserAuthenticationMethod.Read.All" ]	no

Outputs

No outputs.

Contributors

• Original author: Merill Fernando | Microsoft Product Manager
• Co-author: Brian Veldman | Technology Enthusiast