takekazuomi

Container Apps のシークレット管理

いま結構中途半端って話

コンテナにsecretsがあって、それを別の場所から参照(ref)できる。 これはこれで良いんだけど、シークレットをKVに置くというAzureの基本ができない。 Issue見てると、案がいくつか出てる

1. App Service のKV Refみたいのを書けるようにする
2. Dapr のsecure storageを使えるようにする

takekazuomi

title
Container AppsのAPI

bicepのtypelibに入ってない件、alex に、「api specのPRがマージされたれたら、行けるようになる。ETA は12/1」と返事をもらった。

Azure/bicep#784 (comment)

PR

takekazuomi

// For format details, see https://aka.ms/devcontainer.json. For config options, see the README at:
// https://github.com/microsoft/vscode-dev-containers/tree/v0.205.0/containers/dapr-dotnet
{
	"name": "container-app-demo",
	"dockerFile": "Dockerfile",
	"build": {
		"args": {
			"VARIANT":"5.0",
			"INSTALL_AZURE_CLI": "true"
		}

takekazuomi

{
  "name": "azuremonitor/containerinsights/ciprod",
  "tags": [
    "20190419-014130z-cfg",
    "20190424-001611z-cfk",
    "20190424-005611z-cfn",
    "20190425-231018z-cfp",
    "20190426-224542z-cfs",
    "20190427-094716z-cfv",
    "20190427-123144z-cfy",

takekazuomi

vnet にagwをdeployすると、what-ifに引っかかる

az deployment group what-if -g kinmugi-bicep01 -n deploy-18084242 \
        -f vnet.test.json  2>&1
Note: The result may contain false positive predictions (noise).
You can help us improve the accuracy of the result by opening an issue here: https://aka.ms/WhatIfIssues.

Resource and property changes are indicated with these symbols:
 - Delete

takekazuomi

param vmPrefix string
param location string
param vmCount int

module vm 'vm.bicep' = [for i in range(0, vmCount): {
  name: 'vm-${i}'
  params:{
    name: '${vmPrefix}-${substring(uniqueString(resourceGroup().id), 0, 5)}-${i}'
    location: location
    vnetName:vnet.name

takekazuomi

#!/bin/bash

SUBSCRIPTION_ID=xxxxxxx
RESOURCE_GROUP_NAME=xxxxxxx
STATIC_SITE_NAME=xxxxxxx
DOMAIN=xxxxxxx.azurestaticapps.net
USER_DETAILS=xxxxxxx

cat << EOJ > properties.json
{

takekazuomi

param vnet object
param vmName string = 'linux-vm'
param vmSize string = 'Standard_B1s'
param adminUsername string = 'takekazu.omi'
param adminPassword string {
  secure: true
}
param subnetName string = 'subnet1'
param customData string = ''
param location string = resourceGroup().location

takekazuomi

#!/usr/bin/env bash

###
# Add User with SSH KeyAuth
#

# set -x
set -ue -o pipefail
export LC_ALL=C

takekazuomi

for c in wslfetch wslpath wslsys wslupath wslusc wslvar wslview
do
        alias $c="PATH=$PATH:/mnt/c/windows/system32 $c"
done

alias open=wslview