8 Commits

Author SHA1 Message Date
dandds
9f2bdd4a9f Updated dev environment for JEDI.
- Updated environment name.
- Updated variables.
- AKS service principal creds moved to the operator Key Vault.
2020-01-21 10:08:27 -05:00
Rob Gil
deead852b5 169163334 - Initial secrets-tool commit
Adds admin_users map and keyvault policy

This adds an admin_users map as well as a new policy in the keyvault
module. When run, this will apply an administrator policy for users in
the admin_users map. With these permissions, the admin users will be
able to manage secrets and keys in keyvault.

169163334 - Initial secrets-tool commit

Adds admin_users map and keyvault policy

This adds an admin_users map as well as a new policy in the keyvault
module. When run, this will apply an administrator policy for users in
the admin_users map. With these permissions, the admin users will be
able to manage secrets and keys in keyvault.

170237669 - Makes the read only policy for keyvault optional and only create the policy if a principal_id is passed

170237669 - Adds new operator keyvault for secrets

This is a new keyvault specifically for storing operator secrets and
things that would not be accessible to applications. The primary use
case for this is for launching things like postgres (root postgres
creds) and other services which would require secrets to be added to the
terraform configuration. This approach avoids adding secrets to
terraform.

An accompanying script will be added to populate the new keyvault.
2020-01-16 17:27:49 -05:00
Rob Gil
b98bc5953f 169163334 - Adds public ips to k8s nodes for internet access
Temporary fix. This should be replaced with a NAT GW (which I need MSFT
to enable or fix the registry registration)
2019-12-23 18:39:55 -05:00
dandds
7dbdeb3ae7
Merge pull request #1270 from robgil-dds/169163334-ssl-vpn
169163334 - Adds Virtual Network Gateway for VPN
2019-12-20 10:22:27 -05:00
Rob Gil
866b789b6c 169163334 - Adds Virtual Network Gateway for VPN
The Virtual Network Gateway is required for OpenVPN connectivity. The
change to the VPC module also adds a subnet which is exclusively used
for the Gateway.
2019-12-19 22:33:27 -05:00
Rob Gil
74b2510730 169163334 - Adds Azure Container Registry
Adds the ACR. Georeplication disabled for the moment until we add the DR
site.
2019-12-19 20:12:20 -05:00
Rob Gil
fd6bf723db 169163334 - Enables KeyVault server in dev TF env
This keyvault server will be used for db, redis, ad, k8s, and app
secrets for this environment.
2019-12-16 09:20:40 -05:00
Rob Gil
955a1c483b 169163334 - Initial VPC TF and structure
169163334 - Make supernet configurable

169163334 - Makes DNS servers configurable

169163334 - Adds bucket for state storage

169163334 - Adds k8s, keyvault, azuread provider

169163334 - Adds route tables

169163334 - Adds route table associations

169163334 - Adds default routes to route tables and fixes route table association flapping
2019-12-16 09:12:24 -05:00