Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Table of Contents
minLevel1
maxLevel6
outlinefalse
stylenone
typelist
printabletrue

Overview

This playbook provides step-by-step instructions for setting up an Azure deployment for the PO Box. It includes creating an App Registration, setting up a storage account and file share, and deploying an Azure Container Instance (ACI) with necessary configurations.

...

Above created app registration should be authenticated as per step 4 https://zilla.atlassian.net/wiki/spaces/ZILLA/pages/3225681948/PoBox+ZINC+support+in+Azure+-+Azure+Container+Registry+ACR+Setup+Guide#Step-4%3A-Obtain-Access-Token Step 4 and given AcrPull access to repository by Customer Success team

...

registry user name : Application Id noted in step Step 1 https://zilla.atlassian.net/wiki/spaces/ZILLA/pages/edit-v2/3225354263#Step-1%3A-Create-App-Registration.1 registry password : Secret noted in step 2 https://zilla.atlassian.net/wiki/spaces/ZILLA/pages/edit-v2/3225354263#Step-2%3A-Add-Client-Secret.1

registry password : Secret noted in Step 2

Azure storage account name : Secret noted in step 3 https://zilla.atlassian.net/wiki/spaces/ZILLASUP/pages/edit-v2/3274178561#Step-3%3A-Create-Storage-Account Step 3

Azure storage account access key : Can be obtained from Storage Account | Security + Networking | Access Keys

...

Create a file share within the storage account to store the Zilla token.

Code Block
— Create fileShare 
az storage share create \
    --name zilla-pobox-volume \
    --account-name zillapoboxstorage

...

Step 6: Create Azure Container Instance

Above created app registration should be authenticated as per step 4 https://zilla.atlassian.net/wiki/spaces/ZILLA/pages/3225681948/PoBox+ZINC+support+in+Azure+-+Azure+Container+Registry+ACR+Setup+Guide#Step-4%3A-Obtain-Access-Token created app registration should be authenticated as per Step 4 and given AcrPull access to repository by CS team

Deploy an Azure Container Instance and mount the file share created earlier.

Code Block
az container create \  
  --resource-group <resource test_resource_group name> \
  --name zillapobox \
  --image <Image name provided by zilla> \ 
  --restart-policy OnFailure \
  --environment-variables ZILLA_URL='https://app.zillasecurity.com' \
                        TENANT_DOMAIN='<tenant domain name>' \ #tenant domain
                        POLLING_INTERVAL='30' \
                        SEND_LOGS_TO_BACKEND='true' \
                        USE_FILE_SYSTEM='true' \
                        SECRETS_DIRECTORY_PATH='/mnt/Zilla/pobox-config' \
                        STORAGE_DIRECTORY_PATH='/mnt/Zilla/pobox-output' \
  --registry-login-server <registry name provided by zilla> \ 
  --registry-username <App registration Id> \ 
  --registry-password <App registration password> \ 
  --azure-file-volume-share-name zilla-pobox-volume \
  --azure-file-volume-account-name zillapoboxstorage \
  --azure-file-volume-account-key <Access key for storage account >
  --azure-file-volume-mount-path /mnt/Zilla

...

Step 7: Create Logic app to restart container

This step needs to be done manually. Refer https://zilla.atlassian.net/wiki/spaces/ZILLA/pages/edit-v2/3225354263#Step-6%3A-Create-Logic-app-to-restart-container to be done manually. Refer to Step 6: Create Logic app to restart container.

Option 3: Execute Power-shell script

...

This step needs to be done manually. Refer https://zilla.atlassian.net/wiki/spaces/ZILLA/pages/edit-v2/3225354263#Step-6%3A-Create-Logic-app-to-restart-container to Step 6: Create Logic app to restart container.

Attachments

View file
namereadme.txt
View file
namecreateAppRegistration.ps1
View file
namecreateACI.ps1
View file
nameconfig_createAppRegistration.json
View file
nameconfig_createACI.json

...