cdennig

# Service Principal for AKS

resource "azuread_application" "aks_sp" {
  name                       = "${var.clustername}"
  homepage                   = "https://${var.clustername}"
  identifier_uris            = ["https://${var.clustername}"]
  reply_urls                 = ["https://${var.clustername}"]
  available_to_other_tenants = false
  oauth2_allow_implicit_flow = false
}

cdennig

# AAD K8s cluster admin group / AAD

resource "azuread_group" "aks-aad-clusteradmins" {
  name = "${var.clustername}clusteradmin"
}

cdennig

# AAD K8s Backend App

resource "azuread_application" "aks-aad-srv" {
  name                       = "${var.clustername}srv"
  homepage                   = "https://${var.clustername}srv"
  identifier_uris            = ["https://${var.clustername}srv"]
  reply_urls                 = ["https://${var.clustername}srv"]
  type                       = "webapp/api"
  group_membership_claims    = "All"
  available_to_other_tenants = false

cdennig

provider "azurerm" {
  # whilst the `version` attribute is optional, we recommend pinning to a given version of the Provider
  version = "=1.38.0"
}

provider "azuread" {
  version = "~> 0.3"
}

terraform {

cdennig

apiVersion: servicecatalog.k8s.io/v1beta1
kind: ServiceBinding
metadata:
  name: demosql-binding
  namespace: default
spec:
  instanceRef:
    name: demosqlinstance
  secretName: demo-osba-sql-secret

cdennig

apiVersion: servicecatalog.k8s.io/v1beta1
kind: ServiceInstance
metadata:
  name: demosqlinstance
  namespace: default
spec:
  clusterServiceClassExternalName: azure-sql-12-0
  clusterServicePlanExternalName: standard
  parameters:
    location: westeurope

cdennig

apiVersion: extensions/v1beta1
kind: Deployment
metadata:
  name: webdeployment
spec:
  replicas: 3
  strategy:
    type: RollingUpdate
    rollingUpdate:
      maxSurge: 1

cdennig

{
    "apiVersion": "vlabs",
    "properties": {
      "orchestratorProfile": {
        "orchestratorType": "Kubernetes",
        "orchestratorRelease": "1.8"
      },
      "masterProfile": {
        "count": 1,
        "dnsPrefix": "[CLUSTERNAME]",

cdennig

activate() {
  return this
    .httpClient
    .fetch(settings.service + 'people')
    .then((response) => {
      return response
        .json()
        .then((data) => {
          this.people = data;
          this.decodedToken = this

cdennig

aurelia
  .start()
  .then((a) => {

    // get auth object from Aurelia container
    let auth : Auth = a
      .container
      .get(Auth);

    setTimeout(() => {