Jagdeep1

trigger:
  branches:
    include:
      - development  

pool:
  name: AWS_AGENT_POOL # Name of the agent pool that has AWS agent created in step 1

resources:
  containers:

Jagdeep1

terraform {
  backend "s3" {
    bucket = "tfrb"
    key = "tfrb.state"
    region = "eu-west-1"
  }
  required_providers {
    aws = {
      source  = "hashicorp/aws"
      version = "~> 3.0"

Jagdeep1

trigger:
- development

variables:
  - group: tf-aws-agent

pool:
  vmImage: ubuntu-latest

steps:

Jagdeep1

AWSTemplateFormatVersion: "2010-09-09"

Description: |

  VM for Azure DevOps build agent to execute terraform code

Resources:
    AzTFVpc:
      Type: AWS::EC2::VPC
      Properties:

Jagdeep1

apiVersion: install.istio.io/v1alpha1
kind: IstioOperator
metadata:
  namespace: istio-system
  name: multiple-ingress-istiocontrolplane
spec:
  profile: default
  values:
    security:
      selfSigned: false

Jagdeep1

apiVersion: install.istio.io/v1alpha1
kind: IstioOperator
metadata:
  namespace: istio-system
  name: multiple-ingress-istiocontrolplane
spec:
  profile: default
  values:
    security:
      selfSigned: false

Jagdeep1

apiVersion: install.istio.io/v1alpha1
kind: IstioOperator
metadata:
  namespace: istio-system
  name: multiple-ingress-istiocontrolplane
spec:
  profile: default
  values:
    security:
      selfSigned: false

Jagdeep1

kind: Pod
apiVersion: v1
metadata:
  name: nginx-secrets-store
spec:
  containers:
  - image: nginx
    name: nginx
    volumeMounts:
    - name: secrets-store-inline

Jagdeep1

apiVersion: secrets-store.csi.x-k8s.io/v1alpha1
kind: SecretProviderClass
metadata:
  name: azure-kv-provider
spec:
  provider: azure
  parameters:
    usePodIdentity: "false"   # We will not use pod identity for this example. We will use SP
    keyvaultName: "db-keys"   # This is the name of KeyVault resource that we created in previous step
    cloudName: "AzurePublicCloud"   

Jagdeep1

apiVersion: networking.istio.io/v1alpha3
kind: Gateway
metadata:
  name: cluster-aware-gateway
  namespace: istio-system
spec:
  selector:
    istio: ingressgateway
  servers:
  - port: