BitLockerKeyMonitor/azure.yaml at master · robgrame/BitLockerKeyMonitor · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
# yaml-language-server: $schema=https://raw.githubusercontent.com/Azure/azure-dev/main/schemas/v1.0/azure.yaml.json

name: bitlocker-key-monitor-azure
metadata:
  template: [email protected]

# Hybrid Agent (src/BitLockerKeyMonitor.HybridAgent) is intentionally NOT listed:
# it's deployed on-prem as a Windows Service, not into Azure.
# Likewise, the on-prem BitLockerKeyMonitor.Worker and BitLockerKeyMonitor.Web
# projects belong to BitLockerKeyMonitor.slnx and are not part of this deployment.

services:
  web:
    project: ./src/BitLockerKeyMonitor.Web.Azure
    language: dotnet
    host: appservice
  func:
    project: ./src/BitLockerKeyMonitor.Functions
    language: dotnet
    host: function

infra:
  provider: bicep
  path: infra
  module: main

hooks:
  postprovision:
    windows:
      shell: pwsh
      run: |
        Write-Host "Post-provision hook: SQL connection string secret must be populated in Key Vault."
        Write-Host "Run the following manually until automated:"
        Write-Host "  az keyvault secret set --vault-name $env:AZURE_KEY_VAULT_NAME --name sql-connection-string --value '<connection-string-with-Active Directory Managed Identity auth>'"
    posix:
      shell: sh
      run: |
        echo "Post-provision hook: SQL connection string secret must be populated in Key Vault."
        echo "Run the following manually until automated:"
        echo "  az keyvault secret set --vault-name $AZURE_KEY_VAULT_NAME --name sql-connection-string --value '<connection-string-with-Active Directory Managed Identity auth>'"