bcgov / Cloud-Pathfinder-Azure

Apache License 2.0
0 stars 0 forks source link

Public Cloud TechDocs Updates #101

Open ThibaultBC opened 3 months ago

ThibaultBC commented 3 months ago

As part of making Azure available for public cloud Ministry users, we need to make the following updates to TechDocs:

Once the technical documentation has been drafted, it can be reviewed by members of the DevOps team, in addition to involving Pilar in the review, before it is officially published.

Acceptance Criteria

Generated by Zenhub AI

AErmie commented 2 months ago

In the Tech Docs, we need to include a section of "be ware" for issues/challenges that could be experienced.

VNet Integration

One example is the issue with VNet Integration (with an App Service or Web App), and the AppServiceLink / serviceAssociationLinks remaining (after deleting the App Service), and therefore not being able to delete the associated Subnet.

AzAPI Terraform Provider (using azapi_update_resource)

Another example is if the end-users are using Terraform and in particular the AzAPI provider. The issue with this, per the note on the azapi_update_resource page, states:

This resource is used to add or modify properties on an existing resource. When delete azapi_update_resource, no operation will be performed, and these properties will stay unchanged. If you want to restore the modified properties to some values, you must apply the restored properties before deleting.

This means, changes to the azapi_update_resource resource may appear to apply changes (ie. remove properties/configurations previous added), but this doesn't actually apply those changes in Azure.

Private Endpoint DNS

We need to let the end-users know that when they create a Private Endpoint, a DNS A-record will be automatically created in ~10 minutes.

Access to Private Endpoint Resources

Some resources have been configured to restrict/deny public access (ie. Azure Cache for Redis, Azure SQL Database, CosmosDB, MariaDB servers, MySQL Flexible Servers, PostgreSQL Flexible Servers, Key Vault). To access and work with these specific resources, you need to use either Azure Bastion or Azure Virtual Desktop (AVD) from within the VNet.

AErmie commented 4 weeks ago

TechDocs file/folder hierarchy has been re-structured, along with initial Azure documentation written.

Ready for peer review and publishing.