-
Notifications
You must be signed in to change notification settings - Fork 1.3k
[azure] Single-cluster usage guide for AKS TF module #12697
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
687b0c0
to
0e5258e
Compare
0e5258e
to
538cdb9
Compare
538cdb9
to
e484bbe
Compare
|
e484bbe
to
c9c9e06
Compare
@@ -54,8 +54,7 @@ gcp-kubeconfig: | |||
azure-kubeconfig: | |||
az login --service-principal -u $$ARM_CLIENT_ID -p $$ARM_CLIENT_SECRET --tenant $$ARM_TENANT_ID | |||
export KUBECONFIG=${KUBECONFIG} && \ | |||
export resource=$$(echo "$$TF_VAR_TEST_ID" | sed "s/[\\W\\-]//g") && \ | |||
az aks get-credentials --name test-cluster-$$resource --resource-group sh-test-$$resource --file ${KUBECONFIG} || echo "No cluster present" | |||
az aks get-credentials --name p$$TF_VAR_TEST_ID-cluster --resource-group p$$TF_VAR_TEST_ID --file ${KUBECONFIG} || echo "No cluster present" |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
In a following PR these names get referred from terraform output
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Added small comments, picked one nit, otherwise LGTM; tomorrow I'll do some functional review on this.
- @adrienthebo to verify
Before starting the installation process, you need: | ||
* An Azure account | ||
- [Create one now by clicking here](https://azure.microsoft.com/en-gb/free/) | ||
- A user account with "Owner" IAM rights on the subscription |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Question: When I worked on the reference architecture guide I believe I used the Contributor
level, can we double check the permission level?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Good point! I have to be honest, I basically copied this bit from the gitpod-microsoft-aks-guide
. I will check this
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
So regarding this, I am not entirely sure if a fix is needed. Considering the client id and secret are relating to the tenant. Do you mind if we ship this as is for now? We will anyway have to iterate on this, when syncing with the reference architecture.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Yeah, let's ship it 😄
c9c9e06
to
d249e8c
Compare
d249e8c
to
8e1c991
Compare
Description
This PR adds the first iteration of single cluster terraform module for AKS. We add a new directory
install/infra/single-cluster/azure
that uses theaks
terraform module to create a single-cluster infrastructure for setting up Gitpod.Related Issue(s)
Fixes #12867
How to test
Please follow the README.md added as a part of this PR.
Release Notes
Documentation
Werft options: