Skip to content

Commit b3fdf79

Browse files
author
Kristopher Turner
committed
docs: update appendix-d-script-index with implemented PowerShell scripts
- Update all phase tables to reflect ✅ PS Implemented status - Fix repository URL and script directory paths - Expand Phase 02 table with all 19 management infrastructure tasks - Expand Phase 03 table with all 13 on-prem readiness tasks - Expand Phase 04 table with all post-deployment tasks - Expand Phase 05 table with all 21 operational foundation tasks - Add Phase 06 tasks 05-06 (security compliance, backup DR) - Update status from 'Coming Soon' to reflect current state
1 parent 29ec2e6 commit b3fdf79

1 file changed

Lines changed: 87 additions & 46 deletions

File tree

‎docs/implementation/appendices/appendix-d-script-index.mdx‎

Lines changed: 87 additions & 46 deletions
Original file line numberDiff line numberDiff line change
@@ -13,9 +13,9 @@ description: "Alternative script implementations (Azure CLI, Bash, PowerShell) f
1313
> **DOCUMENT CATEGORY**: Reference
1414
> **SCOPE**: Alternative script implementations per phase
1515
> **PURPOSE**: Provide equivalent Azure CLI, Bash, and PowerShell scripts for tasks documented in the main runbook
16-
> **MASTER REFERENCE**: [Azure Local Toolkit](https://github.com/AzureLocal/docs/azurelocal-toolkit)
16+
> **MASTER REFERENCE**: [Azure Local Toolkit](https://github.com/AzureLocal/azurelocal-toolkit)
1717
18-
**Status**: Coming Soon
18+
**Status**: PowerShell scripts implemented for all phases. Azure CLI and Bash variants planned.
1919

2020
---
2121

@@ -32,11 +32,11 @@ The main implementation guide documents the **recommended method** for each task
3232
| **Azure CLI in Bash** | Bash | Linux/macOS/WSL environments |
3333
| **Terraform** | Any | Infrastructure-as-code, repeatable deployments |
3434

35-
**Script Repository:** All scripts are stored in the [Azure Local Toolkit](https://github.com/AzureLocal/docs/azurelocal-toolkit):
35+
**Script Repository:** All scripts are stored in the [Azure Local Toolkit](https://github.com/AzureLocal/azurelocal-toolkit):
3636

37-
- `src/scripts/deployment/PowerShell/` — Azure PowerShell scripts
38-
- `src/scripts/deployment/azure-cli/` — Azure CLI scripts (PowerShell and Bash variants)
39-
- `src/terraform/` — Terraform configurations
37+
- `scripts/deploy/<stage>/<phase>/<task>/powershell/` — Azure PowerShell scripts
38+
- `scripts/deploy/<stage>/<phase>/<task>/azurecli/` — Azure CLI scripts (scaffolded)
39+
- `scripts/deploy/<stage>/<phase>/<task>/bash/` — Bash scripts (scaffolded)
4040

4141
:::tip How to Use
4242
Each section below maps to an implementation phase. Find the phase you're working on, then pick your preferred toolchain. The main runbook shows the recommended path; scripts here are functionally equivalent alternatives.
@@ -57,66 +57,107 @@ Each section below maps to an implementation phase. Find the phase you're workin
5757

5858
| Sub-Phase | Task | Az PS | Az CLI PS | Az CLI Bash | Terraform | Status |
5959
|-----------|------|:-----:|:---------:|:-----------:|:---------:|--------|
60-
| 01 - Landing Zones | Management group hierarchy | 📋 | — | 📋 | 📋 | Planned |
61-
| 01 - Landing Zones | Subscription provisioning | 📋 | — | 📋 | 📋 | Planned |
62-
| 01 - Landing Zones | Resource group creation | 📋 | — | 📋 | 📋 | Planned |
63-
| 02 - Resource Providers | Register required resource providers | 📋 | — | 📋 | — | Planned |
64-
| 03 - RBAC Permissions | User account role assignments | 📋 | — | 📋 | — | Planned |
65-
| 03 - RBAC Permissions | Service principal role assignments | 📋 | — | 📋 | — | Planned |
66-
| 04 - Management Infra | Key Vault deployment | 📋 | — | 📋 | 📋 | Planned |
67-
| 04 - Management Infra | Log Analytics workspace | 📋 | — | 📋 | 📋 | Planned |
68-
| 04 - Management Infra | Storage account (witness, diagnostics) | 📋 | — | 📋 | 📋 | Planned |
69-
| 05 - Identity & Security | Service principal creation | 📋 | — | 📋 | — | Planned |
70-
| 05 - Identity & Security | Managed identity configuration | 📋 | — | 📋 | — | Planned |
71-
| 05 - Identity & Security | Azure Policy assignments | 📋 | — | 📋 | 📋 | Planned |
60+
| 01 - Landing Zones | Resource group creation | ✅ | — | 📋 | 📋 | PS Implemented |
61+
| 02 - Resource Providers | Register required resource providers | ✅ | — | 📋 | — | PS Implemented |
62+
| 02 - Resource Providers | Verify provider registration | ✅ | — | 📋 | — | PS Implemented |
63+
| 03 - RBAC Permissions | Create deployment service principal | ✅ | — | 📋 | — | PS Implemented |
64+
| 03 - RBAC Permissions | Assign RBAC roles | ✅ | — | 📋 | — | PS Implemented |
65+
| 04 - Management Infra | Virtual network | ✅ | — | 📋 | 📋 | PS Implemented |
66+
| 04 - Management Infra | VPN gateway | ✅ | — | 📋 | 📋 | PS Implemented |
67+
| 04 - Management Infra | S2S VPN connection | ✅ | — | 📋 | 📋 | PS Implemented |
68+
| 04 - Management Infra | Azure Bastion | ✅ | — | 📋 | 📋 | PS Implemented |
69+
| 04 - Management Infra | Network security groups | ✅ | — | 📋 | 📋 | PS Implemented |
70+
| 04 - Management Infra | NAT gateway | ✅ | — | 📋 | 📋 | PS Implemented |
71+
| 04 - Management Infra | Arc gateway | ✅ | — | 📋 | — | PS Implemented |
72+
| 04 - Management Infra | Log Analytics workspace | ✅ | — | 📋 | 📋 | PS Implemented |
73+
| 04 - Management Infra | Key Vault | ✅ | — | 📋 | 📋 | PS Implemented |
74+
| 04 - Management Infra | Domain controller | ✅ | — | — | — | PS Implemented |
75+
| 04 - Management Infra | Utility server | ✅ | — | — | — | PS Implemented |
76+
| 04 - Management Infra | NDM server | ✅ | — | — | — | PS Implemented |
77+
| 04 - Management Infra | Lighthouse | ✅ | — | 📋 | 📋 | PS Implemented |
78+
| 05 - Identity & Security | PIM / Conditional Access | ✅ | — | 📋 | — | PS Implemented |
7279

7380
### Phase 03 — On-Premises Readiness
7481

7582
| Sub-Phase | Task | Az PS | Az CLI PS | Az CLI Bash | Terraform | Status |
7683
|-----------|------|:-----:|:---------:|:-----------:|:---------:|--------|
77-
| 01 - Active Directory | OU hierarchy creation | 📋 | — | — | — | Planned |
78-
| 01 - Active Directory | Security group creation | 📋 | — | — | — | Planned |
79-
| 01 - Active Directory | Service account provisioning | 📋 | — | — | — | Planned |
80-
| 02 - Enterprise Readiness | DNS configuration | 📋 | — | — | — | Planned |
81-
| 02 - Enterprise Readiness | DHCP reservations | 📋 | — | 📋 | — | Planned |
82-
| 03 - Network Infrastructure | Switch configuration validation | — | — | 📋 | — | Planned |
83-
| 03 - Network Infrastructure | Firewall rule deployment | — | — | 📋 | — | Planned |
84+
| 01 - Active Directory | OU creation & pre-creation artifacts | ✅ | — | — | — | PS Implemented |
85+
| 01 - Active Directory | Security group creation | ✅ | — | — | — | PS Implemented |
86+
| 01 - Active Directory | DNS forwarding configuration | ✅ | — | — | — | PS Implemented |
87+
| 01 - Active Directory | AD account creation | ✅ | — | — | — | PS Implemented |
88+
| 01 - Active Directory | Security group memberships | ✅ | — | — | — | PS Implemented |
89+
| 02 - Enterprise Readiness | Hardware inspection | ✅ | — | — | — | PS Implemented |
90+
| 02 - Enterprise Readiness | Network service verification | ✅ | — | — | — | PS Implemented |
91+
| 02 - Enterprise Readiness | Opengear verification | ✅ | — | — | — | PS Implemented |
92+
| 02 - Enterprise Readiness | Validation signoff | ✅ | — | — | — | PS Implemented |
93+
| 03 - Network Infrastructure | Opengear console server | ✅ | — | — | — | PS Implemented |
94+
| 03 - Network Infrastructure | Dell PowerSwitch configuration | ✅ | — | — | — | PS Implemented |
95+
| 03 - Network Infrastructure | Firewall endpoint verification | ✅ | — | — | — | PS Implemented |
96+
| 03 - Network Infrastructure | Network validation | ✅ | — | — | — | PS Implemented |
8497

8598
### Phase 04 — Cluster Deployment
8699

87100
| Sub-Phase | Task | Az PS | Az CLI PS | Az CLI Bash | Terraform | Status |
88101
|-----------|------|:-----:|:---------:|:-----------:|:---------:|--------|
89-
| 01 - Hardware Provisioning | iDRAC inventory collection (Redfish) | 📋 | — | 📋 | — | Planned |
90-
| 01 - Hardware Provisioning | BIOS compliance validation | 📋 | — | — | — | Planned |
91-
| 02 - OS Installation | OS deployment automation | 📋 | — | — | — | Planned |
92-
| 03 - OS Configuration | Node configuration (hostname, NTP, NIC) | 📋 | — | — | — | Planned |
93-
| 04 - Arc Registration | Interactive (device code) registration | 📋 | 📋 | 📋 | — | Planned |
94-
| 04 - Arc Registration | Service principal (automated) registration | 📋 | 📋 | 📋 | — | Planned |
95-
| 04 - Arc Registration | Registration verification | 📋 | 📋 | 📋 | — | Planned |
96-
| 05 - Cluster Deployment | Cluster creation via ARM/Bicep | — | — | — | 📋 | Planned |
97-
| 06 - Post-Deployment | Storage path creation | 📋 | — | 📋 | — | Planned |
98-
| 06 - Post-Deployment | Logical network creation | 📋 | — | 📋 | — | Planned |
102+
| 01 - Hardware Provisioning | DHCP reservations (iDRAC) | ✅ | — | 📋 | — | PS Implemented |
103+
| 01 - Hardware Provisioning | Hardware discovery (Redfish) | ✅ | — | 📋 | — | PS Implemented |
104+
| 01 - Hardware Provisioning | DHCP reservations (management) | ✅ | — | 📋 | — | PS Implemented |
105+
| 01 - Hardware Provisioning | BIOS/iDRAC validation | ✅ | — | — | — | PS Implemented |
106+
| 01 - Hardware Provisioning | BIOS/iDRAC remediation | ✅ | — | — | — | PS Implemented |
107+
| 02 - OS Installation | Verify OS deployment | ✅ | — | — | — | PS Implemented |
108+
| 03 - OS Configuration | WinRM, RDP, IP, DNS, NTP, hostname, etc. | ✅ | — | — | — | PS Implemented |
109+
| 04 - Arc Registration | Pre-registration validation | ✅ | 📋 | 📋 | — | PS Implemented |
110+
| 04 - Arc Registration | Register nodes with Azure Arc | ✅ | 📋 | 📋 | — | PS Implemented |
111+
| 04 - Arc Registration | Monitor bootstrap process | ✅ | 📋 | 📋 | — | PS Implemented |
112+
| 04 - Arc Registration | Verify Arc registration | ✅ | 📋 | 📋 | — | PS Implemented |
113+
| 05 - Cluster Deployment | Initiate deployment via ARM | ✅ | — | — | 📋 | PS Implemented |
114+
| 05 - Cluster Deployment | Verify deployment completion | ✅ | — | — | — | PS Implemented |
115+
| 06 - Post-Deployment | Windows Admin Center | ✅ | — | — | — | PS Implemented |
116+
| 06 - Post-Deployment | SDN deployment | ✅ | — | — | — | PS Implemented |
117+
| 06 - Post-Deployment | Cluster quorum configuration | ✅ | — | — | — | PS Implemented |
118+
| 06 - Post-Deployment | Security groups on nodes | ✅ | — | — | — | PS Implemented |
119+
| 06 - Post-Deployment | SSH connectivity | ✅ | — | — | — | PS Implemented |
120+
| 06 - Post-Deployment | Storage configuration | ✅ | — | 📋 | — | PS Implemented |
121+
| 06 - Post-Deployment | Image downloads | ✅ | — | 📋 | — | PS Implemented |
122+
| 06 - Post-Deployment | Logical network creation | ✅ | — | 📋 | — | PS Implemented |
123+
| 06 - Post-Deployment | Post-deployment verification | ✅ | — | — | — | PS Implemented |
99124

100125
### Phase 05 — Operational Foundations
101126

102127
| Sub-Phase | Task | Az PS | Az CLI PS | Az CLI Bash | Terraform | Status |
103128
|-----------|------|:-----:|:---------:|:-----------:|:---------:|--------|
104-
| 01 - SDN Deployment | Network Controller deployment | 📋 | — | — | — | Planned |
105-
| 02 - Monitoring | Azure Monitor agent deployment | 📋 | — | 📋 | 📋 | Planned |
106-
| 02 - Monitoring | Data Collection Rules | 📋 | — | 📋 | 📋 | Planned |
107-
| 02 - Monitoring | Alert rule creation | 📋 | — | 📋 | 📋 | Planned |
108-
| 03 - Backup & DR | Azure Backup / Azure Backup configuration | 📋 | — | 📋 | — | Planned |
109-
| 04 - Security & Governance | Defender for Cloud enablement | 📋 | — | 📋 | 📋 | Planned |
110-
| 04 - Security & Governance | Update Manager configuration | 📋 | — | 📋 | — | Planned |
129+
| 01 - SDN Deployment | Validate SDN prerequisites | ✅ | — | — | — | PS Implemented |
130+
| 01 - SDN Deployment | Enable SDN integration | ✅ | — | — | — | PS Implemented |
131+
| 01 - SDN Deployment | Configure network security groups | ✅ | — | — | — | PS Implemented |
132+
| 02 - Monitoring | Configure Log Analytics workspace | ✅ | — | 📋 | 📋 | PS Implemented |
133+
| 02 - Monitoring | Configure Azure Monitor Agent | ✅ | — | 📋 | 📋 | PS Implemented |
134+
| 02 - Monitoring | Enable HCI Insights | ✅ | — | 📋 | — | PS Implemented |
135+
| 02 - Monitoring | Setup alerting | ✅ | — | 📋 | 📋 | PS Implemented |
136+
| 02 - Monitoring | Deploy OMIMSWAC monitoring | ✅ | — | — | — | PS Implemented |
137+
| 02 - Monitoring | Configure network device logging | ✅ | — | — | — | PS Implemented |
138+
| 02 - Monitoring | Configure Datadog integration | ✅ | — | 📋 | — | PS Implemented |
139+
| 03 - Backup & DR | Configure Azure Backup | ✅ | — | 📋 | — | PS Implemented |
140+
| 03 - Backup & DR | Configure Site Recovery | ✅ | — | 📋 | — | PS Implemented |
141+
| 03 - Backup & DR | Test DR procedures | ✅ | — | — | — | PS Implemented |
142+
| 04 - Security & Governance | Enable Defender for Cloud | ✅ | — | 📋 | 📋 | PS Implemented |
143+
| 04 - Security & Governance | Apply Azure Policy initiatives | ✅ | — | 📋 | 📋 | PS Implemented |
144+
| 04 - Security & Governance | Configure security baselines | ✅ | — | — | — | PS Implemented |
145+
| 04 - Security & Governance | Enable security logging | ✅ | — | — | — | PS Implemented |
146+
| 04 - Security & Governance | Configure Azure Update Manager | ✅ | — | 📋 | — | PS Implemented |
147+
| 05 - Licensing & Telemetry | Enable Azure Hybrid Benefit | ✅ | — | 📋 | — | PS Implemented |
148+
| 05 - Licensing & Telemetry | Activate Windows Server subscription | ✅ | — | — | — | PS Implemented |
149+
| 05 - Licensing & Telemetry | Configure enhanced telemetry | ✅ | — | — | — | PS Implemented |
111150

112151
### Phase 06 — Cluster Testing & Validation
113152

114153
| Sub-Phase | Task | Az PS | Az CLI PS | Az CLI Bash | Terraform | Status |
115154
|-----------|------|:-----:|:---------:|:-----------:|:---------:|--------|
116-
| Testing | Infrastructure health validation | 📋 | — | — | — | Planned |
117-
| Testing | VMFleet storage testing | 📋 | — | — | — | Planned |
118-
| Testing | Network/RDMA validation | 📋 | — | — | — | Planned |
119-
| Testing | HA failover testing | 📋 | — | — | — | Planned |
155+
| Testing | Infrastructure health validation | ✅ | — | — | — | PS Implemented |
156+
| Testing | VMFleet storage testing | ✅ | — | — | — | PS Implemented |
157+
| Testing | Network/RDMA validation | ✅ | — | — | — | PS Implemented |
158+
| Testing | HA failover testing | ✅ | — | — | — | PS Implemented |
159+
| Testing | Security compliance validation | ✅ | — | — | — | PS Implemented |
160+
| Testing | Backup & DR validation | ✅ | — | — | — | PS Implemented |
120161

121162
### Phase 07 — Validation & Handover
122163

0 commit comments

Comments
 (0)