Create SSL certificate and bind domain for Azure web application:

1. Create web SSL certificate for certificate taken from key vault SSL certificate ( kv-id, kv-secret-name )

2. Create domain (domain) for app service (app-service-name) and certificate ( thumbprint ). Thumbprint should be the thumbprint of the certificate created by first step.

• Az cli

$ nano config.pl6

{
    domain => "app.domain.foo",
    thumbprint => "ABC010101H0A....",
    az-res-group => "my-az-grp",
    kv-id => "my-kv-storage",
    kv-secret-name => "production-cert",
    app-service => "app"
}

$ sparrowdo --git=https://github.com/melezhik/azure-web-cert.git --local_mode

Azure resource group

SSL certificate thumbprint

Domain name

Key vault identification

Key vault secret name

Azure application service name

This mode is applied by default. ARM templates are generated, validated and executed.

You can choose options, read next two sections.

In this mode ARM templates are generated, but not executed.

Set config to dry-run:

$ cat config.pl6  

{

  mode => 'dry-run',
  # Other params
}

In this mode ARM templates are generated, validated but not executed.

Set config to validate:

$ cat config.pl6  

{

  mode => 'validate',
  # Other params
}

$ cat config.pl  

{

  skip-cert-crt => True
  # Other params
}

$ cat config.pl  

{

  check-ssl => True
  # Other params
}

Alexey Melezhik