continous deployment example (Azure#665)

mnns · Nov 16, 2019 · 17c9514 · 17c9514
1 parent 4b18ce4
commit 17c9514
Show file tree

Hide file tree

Showing 12 changed files with 452 additions and 0 deletions.
diff --git a/README.md b/README.md
@@ -41,6 +41,8 @@ blank-slate infrastructure.
 * [Expose a WebSocket server](docs/how-tos/websockets.md)
 * [Automate DNS updates](docs/how-tos/dns.md)
 * [Upgrade AGIC via Helm](docs/how-tos/helm-upgrade.md)
+* [Scale your Applications using Application Gateway Metrics (Beta)](docs/how-tos/scale-applications-using-appgw-metrics.md)
+* [Continuous Deployment with AKS and AGIC using Azure Pipelines](docs/how-tos/continuous-deployment.md)
 
 ## Troubleshooting
 

diff --git a/docs/how-tos/continuous-deployment-pipeline.json b/docs/how-tos/continuous-deployment-pipeline.json
diff --git a/docs/how-tos/continuous-deployment.md b/docs/how-tos/continuous-deployment.md
@@ -0,0 +1,56 @@
+# Continuous Deployment with AKS and AGIC using Azure Pipelines
+
+To achieve an efficiently deployed and managed global infrastucture, it is important to setup workflows for continuous integration and deployment. `Azure Devops` is one of the options to achieve this goal.
+
+In following example, we setup a Azure Devops release pipeline to deploy an AKS cluster along with AGIC as ingress. This example is merely a scaffolding. You need to separately setup a build pipeline to install your application and ingress on the AKS cluster deployed as part of the release.
+
+## Setup up new service connection with service pricipal
+
+> **Note**: Skip if already have service connection with owner access for role assigment
+
+1. Create a service principal to use with Azure Pipelines. This service principal will have owner access to current subscription. Access will be used to perform role assigement for AGIC identity in the pipeline.
+
+    ```bash
+    az ad sp create-for-rbac -n azure-pipeline-cd --role owner
+    # Copy the AppId and Password. We will use these in the next step.
+    ```
+
+1. Now, create a [new service connection](https://docs.microsoft.com/en-us/azure/devops/pipelines/library/service-endpoints?view=azure-devops&tabs=yaml#create-a-service-connection) in Azure Devops. Select "*use the full version of the service connection dialog*" option so that you can provide the newly created service principal.
+![Add Service Connection page](../images/pipeline-service-connection.png)
+
+## Create a new Azure release pipeline
+
+We have prepared an [example release pipeline](./continuous-deployment-pipeline.json). This pipeline has following tasks:
+1. Deploy AKS Cluster
+1. Create a user assigned identity used by AGIC Pod
+1. Install Helm
+1. Install AAD Pod identity
+1. Install AGIC
+1. Install a [sample application (with ingress)](https://raw.githubusercontent.com/Azure/application-gateway-kubernetes-ingress/aksgupta/cd/docs/examples/aspnetapp.yaml)  
+![workflows](../images/pipeline-task.png)
+
+To use the example release pipeline,
+1. Download the [template](./continuous-deployment-pipeline.json) and import it to your project's release pipeline.
+![import pipeline](../images/pipeline-import.png)
+1. Now provide the required settings for all tasks:
+    1. Select the correct `Agent Pool`
+    ![import pipeline](../images/pipeline-settings.png)
+    1. Select the newly created service conenction for the `Create Kubernetes Cluster` and `Create AGIC Identity` tasks.
+    ![import pipeline](../images/pipeline-set-connection.png)
+    1. Provide the values for `clientId` and `clientSecret` that will be configured as cluster credentials for the AKS cluster. You should create a separate service principal for the AKS cluster for security reasons.
+        ```bash
+        # create a new one and copy the appId and password to the variable section in the pipeline
+        az ad sp create-for-rbac -n aks-cluster
+        ```
+        ![import pipeline](../images/pipeline-variable.png)
+
+1. Click `Save`. Now your pipeline is all set up.
+
+Hit `Create release` and provide a location(Azure region) where you want the cluster to be deployed.  
+![import pipeline](../images/pipeline-success.png)
+
+Snapshot of how the AKS node resource group will look:  
+![import pipeline](../images/pipeline-resource.png)
+
+If this is your first deployment, AGIC will create a new application gateway. You should be able to visit the Application Gateway's ip address to visit the sample application.  
+![import pipeline](../images/pipeline-app.png)
diff --git a/docs/images/pipeline-app.png b/docs/images/pipeline-app.png
diff --git a/docs/images/pipeline-import.png b/docs/images/pipeline-import.png
diff --git a/docs/images/pipeline-resource.png b/docs/images/pipeline-resource.png
diff --git a/docs/images/pipeline-service-connection.png b/docs/images/pipeline-service-connection.png
diff --git a/docs/images/pipeline-set-connection.png b/docs/images/pipeline-set-connection.png
diff --git a/docs/images/pipeline-settings.png b/docs/images/pipeline-settings.png
diff --git a/docs/images/pipeline-success.png b/docs/images/pipeline-success.png
diff --git a/docs/images/pipeline-task.png b/docs/images/pipeline-task.png
diff --git a/docs/images/pipeline-variable.png b/docs/images/pipeline-variable.png