[DISCUSSION]: Choice of languages and technologies to use for further automation

alan-turing-institute / data-safe-haven

https://data-safe-haven.readthedocs.io

BSD 3-Clause "New" or "Revised" License

60 stars 15 forks source link

[DISCUSSION]: Choice of languages and technologies to use for further automation #28

Closed jamespjh closed 3 years ago

jamespjh commented 6 years ago

Current environment uses PowerShell scripts running with the Azure Commandline Interface.

We should review the tooling options. e.g.

Ansible
Azure ARM templates
Puppet
Chef
Terraform
Fabric
Azure Powershell CLI
Azure Python CLI
https://www.packer.io/

jamespjh commented 6 years ago

@martintoreilly to follow up on list of possible CLI tools.

@getcarter21 to socialise these with Rob

@KirstieJane to introduce us to her potential contractor.

jamespjh commented 6 years ago

@martintoreilly - poke on this.

KirstieJane commented 6 years ago

Just noting here that I've introduced @jamespjh to Tim Head (https://www.wildtreetech.com) via email.

jamespjh commented 6 years ago

@martintoreilly to resolve. Needs a decision as part of recruiting Tim and Rob to the project team.

martintoreilly commented 6 years ago

We will standardise on Azure Resource Management (ARM) templates for orchestration (deployment) of all new DSG elements.

For VM aim to standardise configuration on Docker (new commit / release to Github triggers new Docker image build, triggers update to deployed resources)

jamespjh commented 5 years ago

Current situation

Partly powershell (Sometimes with ARM templates)
Partly azure cli

Things to consider

Python SDK with ARM Templates
Terraform.

jamespjh commented 5 years ago

Future principles:

We will not use azure cli
We will rewrite this to use either Python SDK or Powershell (@jemrobinson @martintoreilly and @RobC-CTL and @tomdoel and @james-c to debate.)

jemrobinson commented 4 years ago

Current status/plans

standardise on Powershell wherever possible (still a few pieces of Azure CLI to remove)
consider an initial setup using Terraform followed by configuration with Powershell

tomdoel commented 4 years ago

Further automation:

Re-write the classification webapp deployment in powershell
Creation of DNS Zones and DNS Record Sets (in SHM and SRE deployments) can be automated in Powershell Core
Adding a custom domain to the AD - can be done in Powershell Windows so could be run as a remote script on the DC once it is deployed
Add global admin user - can be done in Powershell Windows so could be run as a remote script on the DC once it is deployed
NPS configuration can deployed via a template #535 though logging may still need to be manually configured

JimMadge commented 3 years ago

Closing as part of a stale issue cleanup.

Superseded by #835 #836