Devops Governance Versions Save

❗️Release is from 27 January 2022. See CHANGELOG.md for details.

What's Changed

• docs(backends): managing multiple terraform state files by @julie-ng in https://github.com/Azure/devops-governance/pull/25
• Update CI/CD pipelines to support multiple environments by @julie-ng in https://github.com/Azure/devops-governance/pull/27
• fix(pipelines): Drift Detection by @julie-ng in https://github.com/Azure/devops-governance/pull/28
• pipelines: refactor out more steps by @julie-ng in https://github.com/Azure/devops-governance/pull/29
• pipelines: try fix, move vars to stage, debug vars by @julie-ng in https://github.com/Azure/devops-governance/pull/30
• fix(pipeline): load kv based on branch in scheduled drift detection by @julie-ng in https://github.com/Azure/devops-governance/pull/31
• fix(pipeline-debug): backticks in bash is command substitution by @julie-ng in https://github.com/Azure/devops-governance/pull/32
• fix(pipelines): remove broken bash step, clean up vars by @julie-ng in https://github.com/Azure/devops-governance/pull/39
• fix(pipelines): var group conditional must use compile time syntax by @julie-ng in https://github.com/Azure/devops-governance/pull/40
• feat(pipelines): more debugging output, update docs by @julie-ng in https://github.com/Azure/devops-governance/pull/42
• fix(pipelines): readonly property does not exist for var groups by @julie-ng in https://github.com/Azure/devops-governance/pull/43
• docs(deployment): explain optional 'superadmins' aad group, closes #34 by @julie-ng in https://github.com/Azure/devops-governance/pull/41
• feat(terraform): enable local deployment by @julie-ng in https://github.com/Azure/devops-governance/pull/44
• Upgrade azuread provider by @julie-ng in https://github.com/Azure/devops-governance/pull/50
• docs(deploy): describe .env contention, closes #33 by @julie-ng in https://github.com/Azure/devops-governance/pull/48
• Add owners to AAD applications by @julie-ng in https://github.com/Azure/devops-governance/pull/51

Full Changelog: https://github.com/Azure/devops-governance/blob/main/CHANGELOG.md

Features

• concept: remove drafts, link to now published official AAC and CAF docs, closes #24 (d2f14b2)
• docs-terraform: update for clarity (16cd300)
• naming: clean up variable name and output schema, improve conventions (fcff295)
• terraform: default to local backend for lower barrier to entry (2a2ab95)
• terraform: simplify for single plan and deploy, use Key Vault RBAC instead of access policies #22 (c2d3d95)

Bug Fixes

• ado permissions errors by specifying dependency, closes #24 (f4c68eb)

Governance Model

• Azure AD (AAD)
  • create demo AAD groups used for RBAC across ARM and Azure DevOps
• Azure Resource Manager (ARM)
  • Deploys different deployment environments to different Resource Groups (for convenience. See README.md for details.)
• Azure DevOps (AzDO)
  • Bootstrap organization with projects
  • Setup Service Connections
  • Apply RBAC

Git Repo Features

• Includes Azure Pipelines
  • Terraform code quality checks
  • automated and scheduled configuration drift detection - results are posted to GitHub Pull Requests.
  • automated deployments
• Documentation with detailed explanations:
  • CONCEPT.md
  • TERRAFORM.md
  • azure-pipelines/README.md