Skip to content

Commit cf4825c

Browse files
author
Kristopher Turner
committed
docs: add Variables from variables.yml tables to Part 5 Operational Foundations (18 files)
- Phase 01 SDN: 1 file (task-03 NSG) - Phase 02 Monitoring: 6 files (Log Analytics, AMA, HCI Insights, Alerting, OMIMSWAC, Datadog) - Phase 03 Backup/DR: 3 files (Azure Backup, Site Recovery, DR Testing) - Phase 04 Security: 5 files (Defender, Policy, Baselines, Security Logging, Update Manager) - Phase 05 Licensing: 3 files (Hybrid Benefit, WS Subscription, Telemetry) - Skipped 3 files: SDN validate/enable (no vars), network device logging (device-side config)
1 parent 898a4e6 commit cf4825c

19 files changed

Lines changed: 190 additions & 0 deletions

‎docs/implementation/05-operational-foundations/phase-01-sdn-deployment/task-03-configure-network-security-groups.mdx‎

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -61,6 +61,14 @@ NSGs include implicit default rules:
6161
- **AllowInternetOutBound** (Priority 65001) - Allow outbound to Internet
6262
- **DenyAllOutBound** (Priority 65500) - Deny all other outbound
6363

64+
## Variables from variables.yml
65+
66+
| Variable | Config Path | Example |
67+
|----------|-------------|---------|
68+
| `AZURE_SUBSCRIPTION_ID` | `azure.subscription.id` | `00000000-0000-0000-0000-000000000000` |
69+
| `AZURE_RESOURCE_GROUP` | `azure.resource_group.name` | `rg-azurelocal-prod-eus2` |
70+
| `AZURE_REGION` | `azure.resource_group.location` | `eastus2` |
71+
6472
---
6573

6674
## Execution Options

‎docs/implementation/05-operational-foundations/phase-02-monitoring-observability/task-01-configure-log-analytics-workspace.mdx‎

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -33,6 +33,17 @@ The Log Analytics workspace is the **foundation** for all Azure Local monitoring
3333
| RBAC Permissions | Contributor or Owner on resource group | Role assignment verified |
3434
| Region Selection | Same region as Azure Local cluster | Latency considerations |
3535

36+
## Variables from variables.yml
37+
38+
| Variable | Config Path | Example |
39+
|----------|-------------|---------|
40+
| `AZURE_SUBSCRIPTION_ID` | `azure.subscription.id` | `00000000-0000-0000-0000-000000000000` |
41+
| `AZURE_SUBSCRIPTION_NAME` | `azure.subscription.name` | `Azure Local Production` |
42+
| `AZURE_RESOURCE_GROUP` | `azure.resource_group.name` | `rg-azurelocal-prod-eus2` |
43+
| `AZURE_REGION` | `azure.resource_group.location` | `eastus2` |
44+
| `LOG_ANALYTICS_WORKSPACE_NAME` | `monitoring.log_analytics.workspace_name` | `law-azl-DAL-prod-01` |
45+
| `SITE_CODE` | `site.code` | `DAL` |
46+
3647
## Overview
3748

3849
```mermaid

‎docs/implementation/05-operational-foundations/phase-02-monitoring-observability/task-02-configure-azure-monitor-agent.mdx‎

Lines changed: 15 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -34,6 +34,21 @@ The Azure Monitor Agent (AMA) is the modern, unified agent for collecting monito
3434
| RBAC Permissions | Monitoring Contributor on resource group | Role assignment verified |
3535
| Network Connectivity | Outbound 443 to Azure Monitor endpoints | Firewall rules verified |
3636

37+
## Variables from variables.yml
38+
39+
| Variable | Config Path | Example |
40+
|----------|-------------|---------|
41+
| `AZURE_SUBSCRIPTION_ID` | `azure.subscription.id` | `00000000-0000-0000-0000-000000000000` |
42+
| `AZURE_SUBSCRIPTION_NAME` | `azure.subscription.name` | `Azure Local Production` |
43+
| `AZURE_RESOURCE_GROUP` | `azure.resource_group.name` | `rg-azurelocal-prod-eus2` |
44+
| `AZURE_REGION` | `azure.resource_group.location` | `eastus2` |
45+
| `LOG_ANALYTICS_WORKSPACE_NAME` | `monitoring.log_analytics.workspace_name` | `law-azl-DAL-prod-01` |
46+
| `SITE_CODE` | `site.code` | `DAL` |
47+
| `CLUSTER_NODE_01_NAME` | `nodes[0].name` | `azl-dal-node-01` |
48+
| `CLUSTER_NODE_02_NAME` | `nodes[1].name` | `azl-dal-node-02` |
49+
| `CLUSTER_NODE_03_NAME` | `nodes[2].name` | `azl-dal-node-03` |
50+
| `CLUSTER_NODE_04_NAME` | `nodes[3].name` | `azl-dal-node-04` |
51+
3752
## Overview
3853

3954
```mermaid

‎docs/implementation/05-operational-foundations/phase-02-monitoring-observability/task-03-enable-hci-insights.mdx‎

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -33,6 +33,18 @@ Azure Local Insights provides a rich, pre-built Azure Monitor Workbook that visu
3333
| Arc-Enabled Cluster | Azure Local cluster registered | Portal shows cluster resource |
3434
| RBAC Permissions | Monitoring Contributor | Role assignment verified |
3535

36+
## Variables from variables.yml
37+
38+
| Variable | Config Path | Example |
39+
|----------|-------------|---------|
40+
| `AZURE_SUBSCRIPTION_ID` | `azure.subscription.id` | `00000000-0000-0000-0000-000000000000` |
41+
| `AZURE_SUBSCRIPTION_NAME` | `azure.subscription.name` | `Azure Local Production` |
42+
| `AZURE_RESOURCE_GROUP` | `azure.resource_group.name` | `rg-azurelocal-prod-eus2` |
43+
| `CLUSTER_NAME` | `cluster.name` | `azl-dal-cl01` |
44+
| `LOG_ANALYTICS_WORKSPACE_NAME` | `monitoring.log_analytics.workspace_name` | `law-azl-DAL-prod-01` |
45+
| `SITE_CODE` | `site.code` | `DAL` |
46+
| `CLUSTER_NODE_01_NAME` | `nodes[0].name` | `azl-dal-node-01` |
47+
3648
## Overview
3749

3850
HCI Insights collects data from specific Windows Event Log channels and performance counters:

‎docs/implementation/05-operational-foundations/phase-02-monitoring-observability/task-04-setup-alerting.mdx‎

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -37,6 +37,18 @@ Azure Monitor alerts provide proactive notification when cluster health degrades
3737
| Notification Targets | Email addresses, Teams webhooks, etc. | Contact list prepared |
3838
| RBAC Permissions | Monitoring Contributor | Role assignment verified |
3939

40+
## Variables from variables.yml
41+
42+
| Variable | Config Path | Example |
43+
|----------|-------------|---------|
44+
| `AZURE_SUBSCRIPTION_ID` | `azure.subscription.id` | `00000000-0000-0000-0000-000000000000` |
45+
| `AZURE_SUBSCRIPTION_NAME` | `azure.subscription.name` | `Azure Local Production` |
46+
| `AZURE_RESOURCE_GROUP` | `azure.resource_group.name` | `rg-azurelocal-prod-eus2` |
47+
| `SITE_CODE` | `site.code` | `DAL` |
48+
| `NOC_EMAIL` | `alerting.noc_email` | `noc@contoso.com` |
49+
| `CUSTOMER_EMAIL` | `alerting.customer_email` | `ops@customer.com` |
50+
| `TEAMS_WEBHOOK_URL` | `alerting.teams_webhook_url` | `https://outlook.office.com/webhook/...` |
51+
4052
## Action Groups
4153

4254
Action groups define **who** and **how** to notify when alerts fire. Create these before creating alert rules.

‎docs/implementation/05-operational-foundations/phase-02-monitoring-observability/task-05-deploy-omimswac-monitoring.mdx‎

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -47,6 +47,16 @@ Dell OpenManage Integration for Windows Admin Center (OMIMSWAC) provides hardwar
4747
| **TPM/BIOS** | TPM 2.0 (fw ≥ 7.2.2.0), BIOS meets Secured-core minimum | For Secured-core enablement |
4848
| **Azure** | Subscription, Resource Group, Log Analytics, Arc rights | Role includes Microsoft.Authorization/* |
4949

50+
## Variables from variables.yml
51+
52+
| Variable | Config Path | Example |
53+
|----------|-------------|---------|
54+
| `AZURE_SUBSCRIPTION_NAME` | `azure.subscription.name` | `Azure Local Production` |
55+
| `AZURE_RESOURCE_GROUP` | `azure.resource_group.name` | `rg-azurelocal-prod-eus2` |
56+
| `LOG_ANALYTICS_WORKSPACE_NAME` | `monitoring.log_analytics.workspace_name` | `law-azl-DAL-prod-01` |
57+
| `CLUSTER_NODE_01_NAME` | `nodes[0].name` | `azl-dal-node-01` |
58+
| `CLUSTER_NODE_02_NAME` | `nodes[1].name` | `azl-dal-node-02` |
59+
5060
## Configuration Steps
5161

5262
### Step 5.1: Connect Cluster in Windows Admin Center

‎docs/implementation/05-operational-foundations/phase-02-monitoring-observability/task-07-configure-datadog-integration.mdx‎

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -49,6 +49,13 @@ Datadog Account Checklist:
4949
└── Application Key: ________________________________ (store in Key Vault)
5050
```
5151

52+
## Variables from variables.yml
53+
54+
| Variable | Config Path | Example |
55+
|----------|-------------|---------|
56+
| `NODE_IP` | `nodes[0].ipv4_address` | `10.0.0.11` |
57+
| `AZURE_KEYVAULT_NAME` | `azure.keyvault.name` | `kv-azl-dal-prod-01` |
58+
5259
---
5360

5461
## 7.1 Create Datadog WDAC Supplemental Policy

‎docs/implementation/05-operational-foundations/phase-03-backup-dr/task-01-configure-azure-backup.mdx‎

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -36,6 +36,16 @@ Azure Backup provides enterprise backup capabilities for Azure Local VMs with bo
3636
| Cluster Access | Domain account with local admin on all nodes | CredSSP or Kerberos delegation |
3737
| Integration Components | Same version on guest VMs and hosts | Required for backup consistency |
3838

39+
## Variables from variables.yml
40+
41+
| Variable | Config Path | Example |
42+
|----------|-------------|---------|
43+
| `AZURE_RESOURCE_GROUP` | `azure.resource_group.name` | `rg-azurelocal-prod-eus2` |
44+
| `RECOVERY_VAULT_NAME` | `backup.recovery_vault_name` | `rsv-azl-dal-prod-01` |
45+
| `BACKUP_SERVER_NAME` | `backup.server_name` | `azl-dal-mabs-01` |
46+
| `CLUSTER_STORAGE_PATH` | `storage.cluster_storage_path` | `C:\ClusterStorage\Volume01` |
47+
| `MANAGEMENT_VIRTUAL_SWITCH` | `networking.management.virtual_switch` | `ConvergedSwitch(mgmt_compute)` |
48+
3949
## Architecture Overview
4050

4151
Azure Backup supports two backup approaches:

‎docs/implementation/05-operational-foundations/phase-03-backup-dr/task-02-configure-site-recovery.mdx‎

Lines changed: 20 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -35,6 +35,26 @@ Azure Site Recovery (ASR) provides disaster recovery capabilities by replicating
3535
| Hyper-V Integration | Integration components on all VMs | Current version |
3636
| Cluster Nodes | Windows Server 2019 or later | Domain-joined |
3737

38+
## Variables from variables.yml
39+
40+
| Variable | Config Path | Example |
41+
|----------|-------------|---------|
42+
| `AZURE_SUBSCRIPTION_NAME` | `azure.subscription.name` | `Azure Local Production` |
43+
| `AZURE_RESOURCE_GROUP` | `azure.resource_group.name` | `rg-azurelocal-prod-eus2` |
44+
| `AZURE_REGION` | `azure.resource_group.location` | `eastus2` |
45+
| `RECOVERY_VAULT_NAME` | `dr.recovery_vault_name` | `rsv-azl-dal-dr-01` |
46+
| `DR_STORAGE_ACCOUNT` | `dr.storage_account` | `stazldaldr01` |
47+
| `DR_VNET_NAME` | `dr.vnet_name` | `vnet-dr-dal-prod` |
48+
| `DR_VNET_CIDR` | `dr.vnet_cidr` | `10.100.0.0/16` |
49+
| `DR_SUBNET_NAME` | `dr.subnet_name` | `snet-dr-workloads` |
50+
| `DR_SUBNET_CIDR` | `dr.subnet_cidr` | `10.100.1.0/24` |
51+
| `HYPERV_SITE_NAME` | `dr.hyperv_site_name` | `AzureLocal-DAL-Site` |
52+
| `REPLICATION_POLICY_NAME` | `dr.replication_policy_name` | `rep-policy-dal-24hr` |
53+
| `DR_RESOURCE_GROUP` | `dr.resource_group` | `rg-dr-dal-prod-eus2` |
54+
| `MANAGEMENT_NETWORK_NAME` | `networking.management.network_name` | `mgmt-vlan100` |
55+
| `RECOVERY_PLAN_NAME` | `dr.recovery_plan_name` | `RP-CriticalApps-DAL` |
56+
| `DR_NOTIFICATION_EMAIL` | `dr.notification_email` | `dr-team@contoso.com` |
57+
3858
## Architecture Overview
3959

4060
Site Recovery uses two main components on Azure Local:

‎docs/implementation/05-operational-foundations/phase-03-backup-dr/task-03-test-dr-procedures.mdx‎

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -34,6 +34,18 @@ Regular disaster recovery testing validates that replication is working correctl
3434
| Recovery plan | Multi-VM orchestration plan | Created in Site Recovery |
3535
| Change window | Approved maintenance window | For production failover tests |
3636

37+
## Variables from variables.yml
38+
39+
| Variable | Config Path | Example |
40+
|----------|-------------|---------|
41+
| `AZURE_RESOURCE_GROUP` | `azure.resource_group.name` | `rg-azurelocal-prod-eus2` |
42+
| `AZURE_REGION` | `azure.resource_group.location` | `eastus2` |
43+
| `RECOVERY_VAULT_NAME` | `dr.recovery_vault_name` | `rsv-azl-dal-dr-01` |
44+
| `DR_TEST_VNET_NAME` | `dr.test_vnet_name` | `vnet-dr-test-isolated` |
45+
| `RECOVERY_PLAN_NAME` | `dr.recovery_plan_name` | `RP-CriticalApps-DAL` |
46+
| `TARGET_RTO` | `dr.target_rto_minutes` | `240` |
47+
| `TARGET_RPO` | `dr.target_rpo_minutes` | `15` |
48+
3749
## Test Failover Overview
3850

3951
Test failover creates VMs in Azure from the latest recovery point **without affecting production**:

0 commit comments

Comments
 (0)