nnoaman / sdaf-actions Goto Github PK

Before you start creating a deployer, you need to set-up credentials. Let's start with creating a GitHub app, so you can get and set variables and credentials, create and update issues, and register a GitHub runner to deploy the SAP environment.

This app needs the following repository permissions only for this repository:

• Administration: Read & Write (Setting up the GitHub Runner on the deployer VM)
• contents: Read & Write (Creating configuration files, and update workflow with deployer and library)
• Environments: Read & Write (Creating environments)
• Secrets: Read & Write (Used to store secrets in the first step, as there's no App configuration yet)
• Variables: Read & Write (Used to store variables in the first step, as there's no App configuration yet)
• Workflows: Read & Write (Creating configuration files, and update workflow with deployer and library)

1. You can use the following link to create the app requirements automagically: https://github.com/settings/apps/new?name=nnoaman-sap-on-azure&description=Used%20to%20create%20environments,%20update%20and%20create%20secrets%20and%20variables%20for%20your%20SAP%20on%20Azure%20Setup.&callback=false&request_oauth_on_install=false&public=true&actions=read&administration=write&contents=write&environments=write&issues=write&secrets=write&actions_variables=write&workflows=write&webhook_active=false&url=https://github.com/nnoaman/sdaf-actions

2. Generate a private key

• Click on Generate a private key
• Save the private key in the repository secrets as APPLICATION_PRIVATE_KEY
• Save the App ID in the repository secrets as APPLICATION_ID

3. Install the app on the organization

• Click on Install App and select the organization where you want to deploy the SAP deployment.
• Select this (https://github.com/nnoaman/sdaf-actions) repository to grant privileges to the app.

Note: If you don't have permissions in your organization, your organization administrator will receive a request to install the app.

When this is done, you can close this issue and create a new environment.

The next thing we need to do do be able to setup our deployer on Azure, is to connect GitHub and Azure together using OpenID connect. Please follow this link, and create the following secrets:

• Application (client) ID: as AZURE_CLIENT_ID in environment secrets
• Client secret: as AZURE_CLIENT_SECRET in environment secrets
• Directory (tenant) ID: as AZURE_TENANT_ID in environment secrets
• Subscription ID: as AZURE_SUBSCRIPTION_ID in environment secrets

If you need to deploy the Control Plane Web Application credentials create an app registration as described here.

• App registration ID: as APP_REGISTRATION_APP_ID in environment secrets
• App registration password: as WEB_APP_CLIENT_SECRET in environment secrets

When you saved these secrets, please close this issue.

​Environment​

Prod

​Region​

westeurope

​Deployer Vnet​

DEP01