search

azurenoops / ref-scca-enclave-landing-zone-starter

A reference implementation of an SCCA-compliant Mission Enclave landing zone that supports running Azure PaaS services using Azure NoOps.
5 stars 8 forks source link

Initial Azure Gov backport. Tested in Azure Commercial. #83

Closed sstjean closed 3 months ago

sstjean commented 4 months ago

Description

  1. Updated GitHub Actions to support full range of Subscription IDs
  2. Updated az_regions version and disabled get_valid_skus_for_deployment_region because it was returning Null when the region had capacity issues and the internal Microsoft subscriptions had their VM quota removed.
  3. Update Service Endpoints list to support Commercial and Gov clouds.
  4. Expanded Management Groups hierarchy to match documentation
  5. Expanded Spoke Storage Account variables to support overrides for Azure Gov.
  6. Removed data call references to lower the risk that the terraform plan could not figure out a piece of information (like resource name or location) at plan time so it decides to destroy and rebuild resources that shouldn't be touched.
  7. Added keyvault permissions for a user-specified admin group.

Type of Change

- [ ] Bugfix (non-breaking change which fixes an issue)
- [x] New feature (non-breaking change which adds functionality)
- [ ] Breaking change (fix or feature that would cause existing functionality to not work as expected)
- [ ] Update to documentation

Checklist

Please make sure you've completed the relevant tasks for this PR out of the following list:

- [ ] The documentation is updated to cover any new or changed features
- [x] Manual tests have passed