cymadigan / devops-iac

Infrastructure as Code Repo for Azure DevOps Pipeline

DevOps-IaC

Infrastructure as Code Repo for Azure DevOps Pipeline

Watch The Presentation on YouTube

What it does

The codes in this repo are purely PowerShell script, except for the azure-pipeline ymal file which obviously is the pipeline yaml file for Azure Devops pipeline. The scripts will create:

• Azure Virtual Network
• Site-to-Site VPN Connection
• Storage Account
• Virtual Machine

Folder Structure

PScode This folder contains all the PowerShell scripts that create the required component in Azure IaaS platform. The subfolder 'Modules' includes all the scripts composed of functions which are then called and used by the main scripts. Pester scripts to test each functions are also included in this subfolder.

Config This folder contains all configuration data in psd1 file format for the required azure components. These are consumed by the main scripts in PScode folder.

DSC This folder contains the PowerShell DSC script for the VM(s). More work is required for SqlServerDsc...

Tests This folder contains infrastructure test scripts written in Pester. These scripts validate what has been built by the main sripts.

Teardown This folder cotains the script to teardown the whole infrastructure built by the main scripts.

What you need

1. an Azure account. Create one if you don't have one already. https://portal.azure.com/
2. an Azure DevOps account. It is free to use, limited to five collaborators. https://dev.azure.com/

How to set this up

1. Create a project in Azure DevOps then create a new Azure Pipeline within that project.
2. Where is your code? Choose Github Yaml.
3. Sign in to your GitHub when prompted.
4. Grab the right repo and click on Approve and install
5. You may also need to authorize to be able to make changes in your GitHub repo
6. Once it's all set up, you can run your pipeline by pressing the Queue button.

Script explanation

CreateAzVnet.ps1 - creates an Azure Virtual Network with LAN-Subnet and Gateway subnet. A network Security Group is also created and attached to the LAN-Subnet as part of the process.
DeployAzVpn.ps1 - sets up the site-to-site VPN connection to your On-Premises environment. This script can take up to 25 minutes or more.
CreateAzStor.ps1 - creates a storage account and provisions a blob container, an SMB file share and a table.
DeployAzVM.ps1 - deploys virtual machine(s) on the Azure IaaS platform within the Virtual Network created by the Vnet creation script.
ApplyDSC.ps1 - publishes the DSC script to a blob container and applies the DSC on the virtual machine.
Teardown.ps1 - destroys the whole environment built by this process.
FileValidation.Tests.ps1 - validates the script files and folders structure after git checkout.
Infrastructure.Tests.ps1 - runs an infrastructure test against the Azure environment after the build.
azure-pipelines.yml - this is the pipeline file for Azure DevOps pipeline. The whole pipeline task is written in yaml.