Skip to content

Commit 898a4e6

Browse files
author
Kristopher Turner
committed
docs: add Variables from variables.yml tables to Part 2 Azure Foundation (26 files)
- Phase 01 Landing Zones: 6 files (3 simplified + 3 full deployment) - Phase 02 Resource Providers: 2 files - Phase 03 RBAC Permissions: 2 files - Phase 04 Manual Deployment: 11 files (VNet, VPN, Bastion, NSG, NAT, Arc GW, Log Analytics, Key Vault, VMs) - Phase 04 VM Configuration: 5 files (ADDS, Utility, NDM, Lighthouse, WAC) - Skipped 13 CI/CD pipeline files (Terraform-based) and 1 PIM file (Entra ID config) - All tables use Variable | Config Path | Example (IIC) format
1 parent 712b406 commit 898a4e6

28 files changed

Lines changed: 383 additions & 12 deletions

‎docs/implementation/02-azure-foundation/phase-01-landing-zones/full-deployment/task-01-configure-management-groups.mdx‎

Lines changed: 15 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -103,6 +103,21 @@ Tenant Root Group
103103
- **Authenticated Azure session** — see [Authentication](../../../05-authentication.mdx)
104104
- **`variables.yml`** — configured with the full management group hierarchy names and display names
105105

106+
## Variables from variables.yml
107+
108+
| Variable | Config Path | Example (IIC) |
109+
|----------|-------------|---------------|
110+
| Root MG ID | `azure.management_groups.tenant_root.name` | `cmp-iic-root` |
111+
| Platform MG ID | `azure.management_groups.platform.name` | `cmp-platform-iic` |
112+
| Platform Identity MG ID | `azure.management_groups.platform_identity.name` | `cmp-platform-identity-iic` |
113+
| Platform Management MG ID | `azure.management_groups.platform_management.name` | `cmp-platform-management-iic` |
114+
| Platform Connectivity MG ID | `azure.management_groups.platform_connectivity.name` | `cmp-platform-connectivity-iic` |
115+
| Landing Zones MG ID | `azure.management_groups.landing_zone.name` | `cmp-landing-zones-iic` |
116+
| Corp Landing Zone MG ID | `azure.management_groups.lz_corp.name` | `cmp-lz-corp-iic` |
117+
| Online Landing Zone MG ID | `azure.management_groups.lz_online.name` | `cmp-lz-online-iic` |
118+
| Sandbox MG ID | `azure.management_groups.sandbox.name` | `cmp-sandbox-iic` |
119+
| Decommissioned MG ID | `azure.management_groups.decommissioned.name` | `cmp-decommissioned-iic` |
120+
106121
---
107122

108123
## Execution Options

‎docs/implementation/02-azure-foundation/phase-01-landing-zones/full-deployment/task-02-create-subscriptions.mdx‎

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -107,6 +107,16 @@ cmp-iic-root ← organization root MG
107107
└── cmp-decommissioned-iic (no subscription yet)
108108
```
109109

110+
## Variables from variables.yml
111+
112+
| Variable | Config Path | Example (IIC) |
113+
|----------|-------------|---------------|
114+
| Platform Identity Sub | `azure.subscriptions.platform_identity.name` | `iic-platform-identity-001` |
115+
| Platform Management Sub | `azure.subscriptions.platform_management.name` | `iic-platform-management-001` |
116+
| Platform Connectivity Sub | `azure.subscriptions.platform_connectivity.name` | `iic-platform-connectivity-001` |
117+
| Corp Landing Zone Sub | `azure.subscriptions.lz_corp.name` | `iic-lz-azurelocal-corp-001` |
118+
| Online Landing Zone Sub | `azure.subscriptions.lz_online.name` | `iic-lz-azurelocal-online-001` |
119+
110120
---
111121

112122
## Execution Options

‎docs/implementation/02-azure-foundation/phase-01-landing-zones/full-deployment/task-03-create-resource-groups.mdx‎

Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -102,6 +102,20 @@ Each landing zone subscription (e.g., `iic-lz-azurelocal-corp-001`) gets a singl
102102
For multiple clusters in the same subscription, increment the cluster identifier: `rg-c01-azl-eus-01`, `rg-c02-azl-eus-01`, etc.
103103
:::
104104

105+
## Variables from variables.yml
106+
107+
| Variable | Config Path | Example (IIC) |
108+
|----------|-------------|---------------|
109+
| Identity — Entra Connect RG | `azure_resources.platform_identity.rg_entraconnect` | `rg-identity-entraconnect-eus-01` |
110+
| Identity — PIM RG | `azure_resources.platform_identity.rg_pim` | `rg-identity-pim-eus-01` |
111+
| Management — Monitoring RG | `azure_resources.platform_management.rg_monitoring` | `rg-mgmt-monitoring-eus-01` |
112+
| Management — Automation RG | `azure_resources.platform_management.rg_automation` | `rg-mgmt-automation-eus-01` |
113+
| Management — Backup RG | `azure_resources.platform_management.rg_backup` | `rg-mgmt-backup-eus-01` |
114+
| Connectivity — Hub RG | `azure_resources.platform_connectivity.rg_hub` | `rg-connectivity-hub-eus-01` |
115+
| Connectivity — DNS RG | `azure_resources.platform_connectivity.rg_dns` | `rg-connectivity-dns-eus-01` |
116+
| Connectivity — Bastion RG | `azure_resources.platform_connectivity.rg_bastion` | `rg-connectivity-bastion-eus-01` |
117+
| Cluster RG | `azure_resources.resource_group_name` | `rg-c01-azl-eus-01` |
118+
105119
---
106120

107121
## Execution Options

‎docs/implementation/02-azure-foundation/phase-01-landing-zones/simplified-deployment/task-01-configure-management-group.mdx‎

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -84,6 +84,14 @@ Tenant Root Group
8484
- **Authenticated Azure session** — see [Authentication](../../../05-authentication.mdx)
8585
- **`variables.yml`** configured with management group values
8686

87+
## Variables from variables.yml
88+
89+
| Variable | Config Path | Example (IIC) |
90+
|----------|-------------|---------------|
91+
| Parent MG ID | `azure.management_groups.tenant_root.name` | `cmp-iic-root` |
92+
| Landing Zone MG ID | `azure.management_groups.landing_zone.name` | `cmp-landing-zones-iic` |
93+
| Landing Zone Display Name | `azure.management_groups.landing_zone.display_name` | `IIC Landing Zone Management Group` |
94+
8795
---
8896

8997
## Execution Options

‎docs/implementation/02-azure-foundation/phase-01-landing-zones/simplified-deployment/task-02-create-subscription.mdx‎

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -108,6 +108,14 @@ iic-lz-azurelocal-001 ← subscription
108108
The single resource group is created in [Task 03: Create Resource Groups](./task-03-create-resource-groups). This task only covers the subscription itself.
109109
:::
110110

111+
## Variables from variables.yml
112+
113+
| Variable | Config Path | Example (IIC) |
114+
|----------|-------------|---------------|
115+
| Subscription Name | `azure.subscriptions.lab.name` | `iic-lz-azurelocal-001` |
116+
| Subscription ID | `azure.subscriptions.lab.id` | *(per environment)* |
117+
| Landing Zone MG | `azure.management_groups.landing_zone.name` | `cmp-landing-zones-iic` |
118+
111119
---
112120

113121
## Execution Options

‎docs/implementation/02-azure-foundation/phase-01-landing-zones/simplified-deployment/task-03-create-resource-groups.mdx‎

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -92,6 +92,14 @@ cmp-iic-root ← root MG (Task 01)
9292
└── Storage accounts
9393
```
9494

95+
## Variables from variables.yml
96+
97+
| Variable | Config Path | Example (IIC) |
98+
|----------|-------------|---------------|
99+
| Subscription ID | `azure.subscriptions.lab.id` | *(per environment)* |
100+
| Resource Group Name | `azure_resources.resource_group_name` | `rg-c01-azl-eus-01` |
101+
| Region | `cluster.location` | `eastus` |
102+
95103
---
96104

97105
## Execution Options

‎docs/implementation/02-azure-foundation/phase-02-resource-providers/task-01-register-resource-providers.mdx‎

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -56,6 +56,12 @@ Resource provider registration typically takes 1–3 minutes per provider. Some
5656
| **Authenticated Azure session** | See [Authentication](../../05-authentication.mdx) |
5757
| **`variables.yml`** | Configured with target subscription ID |
5858

59+
## Variables from variables.yml
60+
61+
| Variable | Config Path | Example (IIC) |
62+
|----------|-------------|---------------|
63+
| Subscription ID | `azure.subscriptions.lab.id` | *(per environment)* |
64+
5965
---
6066

6167
## Required Providers

‎docs/implementation/02-azure-foundation/phase-02-resource-providers/task-02-verify-provider-registration.mdx‎

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -56,6 +56,12 @@ Some providers may still be in "Registering" state after Task 01. Wait 2–5 min
5656
| **Authenticated Azure session** | See [Authentication](../../05-authentication.mdx) |
5757
| **`variables.yml`** | Configured with target subscription ID |
5858

59+
## Variables from variables.yml
60+
61+
| Variable | Config Path | Example (IIC) |
62+
|----------|-------------|---------------|
63+
| Subscription ID | `azure.subscriptions.lab.id` | *(per environment)* |
64+
5965
---
6066

6167
## Execution Options

‎docs/implementation/02-azure-foundation/phase-03-rbac-permissions/task-01-create-azure-local-deployment-spn.mdx‎

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -70,6 +70,13 @@ This task requires **Owner** or **User Access Administrator** permissions at the
7070
If the deployment SPN already exists in the target environment, the script detects existing SPNs and prompts before creating a new secret. Enter **n** if the existing secret in the platform Key Vault is still valid.
7171
:::
7272

73+
## Variables from variables.yml
74+
75+
| Variable | Config Path | Example (IIC) |
76+
|----------|-------------|---------------|
77+
| Subscription ID | `azure.subscriptions.lab.id` | *(per environment)* |
78+
| Key Vault Name | `azure_infrastructure.key_vaults.management.name` | `kv-iic-platform` |
79+
7380
---
7481

7582
## Create Deployment Service Principal

‎docs/implementation/02-azure-foundation/phase-03-rbac-permissions/task-02-assign-rbac-roles.mdx‎

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -60,6 +60,13 @@ After assigning these roles, the deployment SPN will have sufficient permissions
6060
- [ ] Subscription ID confirmed in `variables.yml` → `azure.subscriptions.lab.id`
6161
- [ ] Cluster resource group confirmed in `variables.yml` → `azure_resources.resource_group_name`
6262

63+
## Variables from variables.yml
64+
65+
| Variable | Config Path | Example (IIC) |
66+
|----------|-------------|---------------|
67+
| Subscription ID | `azure.subscriptions.lab.id` | *(per environment)* |
68+
| Cluster Resource Group | `azure_resources.resource_group_name` | `rg-c01-azl-eus-01` |
69+
6370
---
6471

6572
## Section 1: Assign RBAC Roles to Service Principal

0 commit comments

Comments
 (0)