This is a Powershell Infrastruture as Code (iac) automation solution for a Secure Service Fabric Architecture.

Application Quickstart

Application SimpleApp

Infrastucture as Code

Requirements:

1. Windows Powershell

  $PSVersionTable.PSVersion

  # Result
  Major  Minor  Build  Revision
  -----  -----  -----  --------
  5      1      17134  407

2. Azure PowerShell Modules

  Get-Module Azure -list | Select-Object Name,Version

  # Result
  Name  Version
  ----  -------
  Azure 5.1.2

3. AzureRM Powershell Modules

  Get-Module AzureRM.* -list | Select-Object Name,Version

  # Result
  Name                                  Version
  ----                                  -------
  AzureRM.Compute                       5.5.0
  AzureRM.KeyVault                      5.1.1
  AzureRM.Network                       6.5.0
  AzureRM.Profile                       5.4.0
  AzureRM.Resources                     6.4.0
  AzureRM.Storage                       5.0.2

4. Open SSL

Installation:

Install Required PowerShell Modules if needed

Install-Module AzureRM
Import-Module AzureRM

The Network scheme is an ARM Network scheme with multiple subnets.

Network Resource Requirements:

• A Unique /24 Address Space ie: 10.0.0.0/24
• Azure Region Location (EastUS)
• Subnet 1 DefaultSubnet 10.0.0.0/26
• Subnet 2 GatewaySubnet 10.0.0.224/28

The architecture depends upon the following items:

1. KeyVault - Fabric Configuration Information, Service Fabric Certificates
2. Azure Storage Account - Diagnostic & Logging Storage
3. Azure Network - 2 Subnets (Small)
4. Azure Load Balancer - Public Facing Load Balancer with NAT
5. Azure VM Scale Set with Azure Service Fabric Cluster

NOTE: ALWAYS USE A NEW POWERSHELL SESSION!!!

Environment files are used as project environments ie: dev, test, production and provide a convenient place to place override parameter settings. The majority of these settings are loaded into a Key Vault to be used for the CI/CD Pipelines.

Create an environment setting file in the root directory ie: .env_dev.ps1

Default Environment Settings

Resources are broken up into sections only for the purpose of not having an excessively long running task.

Login-AzureRmAccount
Set-AzureRmContext -Subscription "<subscription_name>"

This will create the resource group and the keyvault, then load all the configurations needed into the Key Vault. Environments align themselves in the naming conventions used.

dev --> .env_dev.ps1 test --> .env_test.ps1 prd --> .env_prd.ps1

# Prepare the Base Resources
./install.ps1 -Prepare $true -Environment 'dev'

RBAC is an optional security feature that will allow a user to login via Azure AD credentials. To perform this the user running the script "must" have administration rights within Azure AD, as this will execute the aadtool scripts.

This only needs to be performed 1 time to enable the AD Integration Applications that can be used.

# Install the Cluster Resources
./install.ps1 -RBAC $true -Environment 'dev'

# Add the Application Information into the .env file.
$Env:CLUSTER_APP = "<your_web_application>"
$Env:CLIENT_APP = "<your_native_client_app>"

Note: After creation you have to add the user to the Users & Groups fpr the Enterprise Cluster Application and give them the authorized role.

This will setup the storage, network and load balancer resources.

# Install the Routing Resources
./install.ps1 -Infrastructure $true -Cluster $true  -Environment 'dev'

# Deploy the Ingress Controller  (UI on Port 8080)
./deploy.ps1 -Environment 'dev' -Name Traefik

# Deploy the Desired Application Package  (UI on Port 80)
./deploy.ps1 -Environment dev -Name SimpleApp.SfProd
./deploy.ps1 -Environment dev -Name Voting