Philipp Bauknecht GrillPhil
GrillPhil
/ azurecli.ps1
Created
August 2, 2023 15:31
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| $customRoleDefinitionJson = $($customRoleDefinition | ConvertTo-Json -Depth 100 -Compress).Replace('"', '\"') |
GrillPhil
/ azurecli.ps1
Created
August 2, 2023 15:28
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| az role definition create --role-definition $customRoleDefinitionJson |
GrillPhil
/ request-body.json
Last active
August 2, 2023 15:33
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| { | |
| "IsCustom": true, | |
| "Name": "test-dev-custom-role", | |
| "Actions": [ | |
| "Microsoft.Resources/deployments/*", | |
| "Microsoft.Authorization/*/read" | |
| ], | |
| "AssignableScopes": [ | |
| "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-myapp-dev" | |
| ] |
GrillPhil
/ create-custom-role.ps1
Last active
August 2, 2023 15:24
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| $subscriptionId = "00000000-0000-0000-0000-000000000000" | |
| $resourceGroupName = "rg-myapp-dev" | |
| $project = "myapp" | |
| $env = "dev" | |
| $customRoleDefinitionName = "$($projectName)-$($env)-custom-role" | |
| $customRoleDefinition = @{ | |
| Name = $customRoleDefinitionName | |
| IsCustom = $true | |
| AssignableScopes = @( | |
| "/subscriptions/$($subscriptionId)/resourceGroups/$($resourceGroupName)" |
GrillPhil
/ azure-pipelines.yml
Created
July 24, 2023 12:27
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: secure-ng-demo | |
| trigger: | |
| branches: | |
| include: | |
| - main | |
| paths: | |
| exclude: | |
| - docs/**/* | |
| - /**/readme.md |
GrillPhil
/ staticwebapp.config.json
Created
July 24, 2023 12:18
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| { | |
| "routes": [ | |
| { | |
| "route": "/*", | |
| "allowedRoles": [ | |
| "authenticated" | |
| ] | |
| } | |
| ], | |
| "navigationFallback": { |
GrillPhil
/ run-bicep.ps1
Last active
July 24, 2023 12:24
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| $deploymentResult = az deployment group create ` | |
| --resource-group $($ENV:AZ_PLATFORM_RESOURCE_GROUP_NAME) ` | |
| --name $($ENV:DEPLOYMENT_NAME) ` | |
| --template-file "$($ENV:STAGE_BICEP_PATH)/main.bicep" ` | |
| --parameters ` | |
| productPrefix="$($ENV:AZ_DEPLOYMENT_NAME)" ` | |
| envName="$($ENV:ENV_NAME)" ` | |
| appClientId="$($ENV:APP_CLIENT_ID)" ` | |
| appClientSecret="$($ENV:APP_CLIENT_SECRET)" ` | |
| | ConvertFrom-Json |
GrillPhil
/ main.bicep
Created
July 24, 2023 12:10
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| param productPrefix string | |
| @allowed([ | |
| 'dev' | |
| 'test' | |
| 'prod' | |
| ]) | |
| param envName string | |
| param location string = resourceGroup().location | |
| param appClientId string | |
| @secure() |
GrillPhil
/ rbac-keyvault.bicep
Created
July 24, 2023 12:09
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| param keyVaultName string | |
| param principalId string | |
| param roleId string = '4633458b-17de-408a-b874-0445c86b69e6' // Key Vault Secrets User | |
| resource keyVault 'Microsoft.KeyVault/vaults@2022-07-01' existing = { | |
| name: keyVaultName | |
| } | |
| resource keyVaultAssignment 'Microsoft.Authorization/roleAssignments@2022-04-01' = { | |
| name: guid(subscription().subscriptionId, keyVaultName, roleId, principalId) |
GrillPhil
/ keyvault-secret.bicep
Created
July 24, 2023 12:08
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| param keyVaultName string | |
| param name string | |
| @secure() | |
| param value string | |
| resource keyVault 'Microsoft.KeyVault/vaults@2022-07-01' existing = { | |
| name: keyVaultName | |
| resource storageSecret 'secrets' = { | |
| name: name | |
| properties: { |
NewerOlder