Created by Paul Kelleher, last modified on Jul 20, 2023

Platform

Item

Done

Detail

Verified

1

Preparation

2

Azure EA

Ensure deployment engineer has Global Admin on squad0 tenant

  •  

  •  
3

Create Squad0 local admin account

  •  

4

Grant Squad0 admin user EA Billing Admin role

5

Create a new Service Principal under squad0

6

Add required roles and API permissions

7

Assign Subscription Creator role to SP

8

Store Service Principal app registration detail

9

Create a new SP under Continohq tenant

10

Ensure Directory Read and Write roles

11

Store SP app registration details for continohq provider details

12

Create Terraform State backend in Squad0 management sub

13

Resource Group

14

Storage Account

15

Container for EA Vending state

16

Container for WWW

17

Obtain access key for storage account

18

Create GitHub user continowww

19

Create WWW_TOKEN PAT

20

Ensure permissions valid

21

Store Pat for later use

22

Create Github user continoea

23

Create ORG_GH_TOKEN

24

nsure permissions on PAT

25

26

27

  •  

  •  
28

Azure

  •  
29

30

31

32

33

34

35

36

37

38

  •  

  •  
39

GitHub

  •  

  •  
40

  •  

  •  
41

Deployment

42

Azure EA

  1. Create repository from template

Add secrets to repository actions
ARM_CLIENT_SECRET_SQUAD0
Arm_Client_Secret_Continohq
STORAGE _Access_key
ORG_GH_TOKEN

2. Clone repository to update essential configs
	Update provider.tf with squad0 and Contino details
	Update backend.tf with remote state details
3. Clone WWW repo and update configs
	Update URL for web forms to the new ea Vending repo
	Update backend.tf
	Update secrets 
		Continowww user PAT
	Commit and merge to main to deploy
		Note the web link to update DNS for azure-Contino
  •  

  •  
43

  •  

  •  
44

Azure

  •  

  •  
45

  •  

  •  
46

GitHub

  •  

  •  
47

  •  

  •  
48

Operation

49

Azure EA

  •  

  •  
50

  •  

  •  
51

Azure

  •  

  •  
52

  •  

  •  
53

GitHub

  •  

  •  
54

  •  

  •  

Platform

Item

Done

Detail

Verified

1

Preparation

2

Azure EA

assosciate tenant to EA

  •  

  •  
3

create enrollment account

  •  

4

create SP in squad0

5

assign SP billing role : create_subscription under enrolment account

6

7

8

9

10

  •  

  •  
11

Azure

generate SP credentials for provider.tf secrets

  •  
12

record details for use later

ARM_CLIENT_ID

ARM_CLIENT_SECRET

13

assign requierd AD roles to SP

14

assign required Azure roles tp SP

15

create backend

16

record details for use later

STORAGE_ACCOUNT_NAME

CONTAINER_NAME

KEY

ACCESS_KEY

17

18

19

20

21

  •  

  •  
22

GitHub

  •  

  •  
23

  •  

  •  
24

Deployment

25

Azure EA

  •  

  •  
26

  •  

  •  
27

Azure

  •  

  •  
28

  •  

  •  
29

GitHub

  •  

  •  
30

  •  

  •  
31

Operation

32

Azure EA

  •  

  •  
33

  •  

  •  
34

Azure

  •  

  •  
35

  •  

  •  
36

GitHub

  •  

  •  
37

  •  

  •  

Attachments:

ea2.mov (video/quicktime)
Invalid file id - c0cfa9c6-32dd-4c30-b171-8202b4c91b86 (image/png)
ea1080.mov (video/quicktime)
Invalid file id - 52e1802e-db22-4f72-9397-22cfbafccddb (image/png)
0_0?a=987&x=1236&y=139&w=176&h=204&store=1&accept=image%2F*&auth=LCA%209cf106ea4e6aaf5494424d4625197754c093d03f4da646f414682f421e0457fa-ts%3D1689803833 (image/png)
0_0?a=987&x=697&y=533&w=168&h=204&store=1&accept=image%2F*&auth=LCA%208dd4f9f6aac226dc3a397895697a38f840314a7c508611f9f0fec8ddb4c8b448-ts%3D1689803833 (image/png)
0_0?a=987&x=1030&y=419&w=125&h=204&store=1&accept=image%2F*&auth=LCA%209fb0f7e2c6ec7960a2f142ee49098ce8de540dd65b409a85cd248df1665dc227-ts%3D1689803833 (image/png)
image-20230719-215602.png (image/png)
image-20230719-215356.png (image/png)
Screenshot 2023-07-19 at 22.50.33.png (image/png)
Screenshot 2023-07-19 at 21.58.23.png (image/png)
annotated-cross-5mb.gif (image/gif)
help.png (image/png)
image-20230718-204153.png (image/png)
user-guide320.png (image/png)
maint..png (image/png)
msain.png (image/png)
workflow-cropped..png (image/png)
user-guide.png (image/png)
instalaltion-cropped.png (image/png)
Eo_circle_light-blue_checkmark.svg.png (image/png)
overview.png (image/png)
ea_header.png (image/png)
blog-banner-cloud-azure.png (image/png)
automation-blue.png (image/png)
ea_header.png (image/png)
EA Vending Setup Checklist.png (image/png)