Infrasnap for Azure MAX

Components
Azure Container Registry
Azure Kubernetes Cluster
Azure Virtual Network
Kubernetes ESO for Azure KV
DNS Management	Azure DNS Cloudflare Azure DNS
Infrastructure CI/CD pipeline	GitHub Actions Drone CI Bitbucket Pipelines GitHub Actions GitLab CI
Ingress Controller	Nginx Nginx Traefik
Autoscaling
CI/CD Runner	GitHub Actions Runner GitHub Actions Runner Bitbucket Runner GitLab Runner
Caching	Cache
Monitoring	Monitoring Stack
Object Storage	B2 Buckets B2 Buckets Blob Storage
Queue Manager	Kafka in Azure Event Hub Kafka in Azure Event Hub Azure Event Hubs
SQL Database	MySQL/PostgreSQL
Helm Chart
Setup by Corewide team
Post-implementation training
2-week warranty support
Documentation

Once you have a Corewide Solutions Portal account, this one-time action will use your browser session to retrieve credentials:

 shellterraform login solutions.corewide.com

Provision instructions

Download Infrasnap archive from My Library page, unpack it to a new directory and initialize a new project there:

 shellcd infrasnap/
git init
git add .

Follow the instructions in README.md:

Pass cloud provider API credentials as Terraform variables (as terraform.tfvars, or using environment variables)
Edit infrasnap.yml parameters based on the reference below
Prepare Terraform backend configuration in backend.tf

Initialize the setup, create the environment you configured in infrasnap.yml and provision the infrastructure:

 shellterraform init
terraform workspace new <environment_name>
terraform workspace select <environment_name>
terraform apply

$16,000

BUY

License

Variable	Description	Type	Default	Required	Sensitive
`project_name`	Project name to use for resource naming	`string`		yes	no
`arm_client_id`	Azure RM Client ID. This can also be sourced from the `ARM_CLIENT_ID` Environment Variable	`string`		no	no
`arm_client_secret`	Azure RM Client Secret. This can also be sourced from the `ARM_CLIENT_SECRET` Environment Variable	`string`		no	yes
`arm_subscription_id`	Azure RM Subscription ID. This can also be sourced from the `ARM_SUBSCRIPTION_ID` Environment Variable	`string`		no	no
`arm_tenant_id`	Azure RM Tenant ID. This can also be sourced from the `ARM_TENANT_ID` Environment Variable	`string`		no	no
`config`	Infrasnap configuration data	`any`	`{}`	no	no
`config_file`	Path to a YAML file with Infrasnap configuration data	`string`	`./infrasnap.yml`	no	no
`github_runner_token`	GitHub private access token (PAT classic) suitable for personal API. PAT should be granted full access to `repo` and `admin` scopes	`string`		yes	yes

Variable	Description	Type	Default
`arm_subscription_id`	Azure RM subscription to place resources into. Leave it blank to use the common one from the `arm_subscription_id` variable	`string`
`region`	Azure region to place the resources into	`string`	`eastus`
`vnet_cidr`	CIDR block for VNet of this environment	`string`	`172.18.0.0/16`
`container_registry_workspace`	Environment where container registry must be created. Leave blank to not create at all if a third-party registry is used instead	`string`	`default`
`container_registry_kubernetes_access`	Container registry access permissions. Must be either `ro` (read-only) or `rw` (read-write)	`string`	`ro`
`k8s_version`	Kubernetes engine version to deploy the cluster with	`string`	`1.34`
`k8s_default_node_pool_node_size`	Machine type to use for all nodes in the default node pool	`string`	`Standard_D2_v2`
`k8s_default_node_pool_max_size`	Maximum number of nodes in the default node pool (for autoscaling)	`number`	`2`
`k8s_node_pools`	List of Kubernetes node pool definitions	`list`
`k8s_node_pools[*].name`	Name of the node pool to create	`string`	`app`
`k8s_node_pools[*].node_size`	Machine type to use for all nodes in this node pool	`string`	`Standard_D2_v2`
`k8s_node_pools[*].max_size`	Maximum number of nodes in the node pool (for autoscaling)	`number`	`3`
`dns_zone_create`	Whether to create DNS zone or use the existing one	`bool`	`false`
`dns_zone`	DNS zone in which to create records, disable to reuse the same zone from another workspace	`string`	`example.com`
`dns_records_k8s`	A list of subdomains that must point at Ingress LoadBalancer	`list`
`dns_records`	List of extra records that do not point at Ingress LoadBalancer. See module_docs for complete reference. Note: when adding CNAME record in the same `dns_zone`, supply full dns record value e.g. `value.dns_zone`.	`map`
`dns_records.test`	Name of the DNS record	`map`
`dns_records.test.type`	Record type (`A`, `AAAA`, `CNAME`, `MX`, `NS`, or `TXT`)	`string`	`CNAME`
`dns_records.test.value`	List of values for the record	`list`	`['test.example.com']`
`dns_records.test.ttl`	Time to Live (TTL) of the record in seconds	`number`	`31`
`dns_records.test.priority`	The priority of the record (only for `MX` type)	`number`	`3600`
`cert_manager_email`	E-mail that Let's Encrypt cluster issuer will use to request certificates	`string`	`[email protected]`
`cicd`		`map`
`cicd.controller_node_pool_name`	Name of the node pool to place ARC resources in	`string`	`maintenance`
`cicd.controller_service_account_name`	Service Account name to create for runners and controller	`string`	`github-controller`
`cicd.controller_replicas`	Number of ARC replicas	`number`	`1`
`cicd.gha_runner_node_pool_name`	Name of the node pool to place GHA runner resources in	`string`	`maintenance`
`cicd.gha_listener_node_pool_name`	Name of the node pool to place GHA listener resources in	`string`	`maintenance`
`cicd.github_runners`	GitHub runners configuration, multiple runners are allowed	`map`
`cicd.github_runners.runner-name`	Name of the runner. Common length of runner name and `var.name_prefix` with dash must have up to 45 characters. Can contain only "a-z", "0-9" and "-" characters.	`map`
`cache_redis_machine_size`	The size of the Redis cache to deploy - SKU name	`string`	`Balanced_B0`
`cache_redis_ha_enabled`	Whether to enable high availability for the managed Redis instance	`bool`	`false`
`cache_redis_auth_enabled`	Whether access key authentication is enabled for the Redis database	`bool`	`false`
`grafana_enabled`	Toggle Grafana installation (must be active only in one workspace)	`bool`	`true`
`grafana_subdomain`	Definition of Grafana subdomain (`mon` by default)	`string`	`mon`
`loki_enabled`	Toggle Loki installation	`bool`	`true`
`prometheus_enabled`	Toggle Prometheus installation	`bool`	`true`
`monitoring_stack_node_pool_name`	Name of node pool to place Grafana, Loki and Prometheus pods in	`string`	`maintenance`
`buckets`	Buckets definitions to create	`map`
`buckets.my-bucket`	Bucket name	`map`
`buckets.my-bucket.access_mode`	B2 bucket access mode. Allowed values: `private`, `public-read`	`string`	`private`
`buckets.my-bucket.enable_default_encryption`	Enable default bucket server-side encryption (SSE-B2/AES256)	`bool`	`true`
`kafka_tier`	The SKU tier of the Event Hub namespace	`string`	`Standard`
`kafka_capacity`	The number of throughput units	`number`	`1`
`kafka_topics`	List of Kafka topics (Event Hubs) to create inside the Event Hub namespace - name: queue# Name of Kafka topic (Event Hub) partition_count: 3 # The number of partitions (shards) for the topic message_retention: 1 # The number of days to retain the events	`list`
`sql_database_engine`	Database engine. Supported values are: `MySQL` and `PostgreSQL`	`string`	`PostgreSQL`
`sql_database_engine_version`	Flexible server instance engine version	`number`	`16`
`sql_database_machine_size`	Node size for the flexible server	`string`	`GP_Standard_D2ds_v4`
`sql_database_disk_size`	Size of flexible server instance disk	`number`	`32`
`sql_databases_list`	List of databases to create	`list`

Output	Description	Type	Sensitive
`app_namespace`	Kubernetes namespace to deploy the application to	`attribute`	no
`cluster_connection_cli`	CLI command to connect to the cluster	`computed`	no
`container_registry`	Container registry to push container images to	`computed`	yes
`eso_cluster_secret_store_name`	Name of Kubernetes `ClusterSecretStore` resource to be used in creation of ExternalSecret resources	`attribute`	no
`registry_connection_cli`	CLI command to authenticate to the container registry	`computed`	no
`name_servers`	Name servers of DNS zone managed in this workspace	`attribute`	no
`redis_cache_connection_parameters`	Name of Key Vault secret with Redis cache connection parameters	`attribute`	no
`grafana_admin_credentials`	Contains admin user credentials for Grafana web UI	`attribute`	yes
`monitoring_basic_auth_credentials`	Basic auth credentials for Prometheus and Loki endpoints	`attribute`	yes
`monitoring_endpoints`	Endpoints of monitoring components	`attribute`	no
`bucket_names`	List of bucket names	`list(attribute)`	no
`eventhub_connection_secret_name`	Name of Key Vault secret with Event Hub namespace connection parameters	`attribute`	no
`flexible_server_connection_secret_name`	Name of Key Vault secret with flexible server connection parameters	`attribute`	no

Infrasnap for Azure MAX

Not sure where to start?Let's find your perfect match.

Not sure where to start?
Let's find your perfect match.