Skip to content

Add Kafka configuration for Purview #311

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
marvinbuss wants to merge 12 commits into
base: main
Choose a base branch
from
Draft

Add Kafka configuration for Purview #311

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
12 commits
Select commit Hold shift + click to select a range
e6cf452
Add Kafka configuration for Purview
marvinbuss Jan 24, 2023
33967c4
Update container registry API version
marvinbuss Jan 24, 2023
2980824
Update Key Vault API version
marvinbuss Jan 24, 2023
843839a
Add missing private dns zone for Kusto
marvinbuss Jan 24, 2023
71f2583
Update Synapse PL Hub regions
marvinbuss Jan 24, 2023
b1779ae
Update API version for User Assigned Identity
marvinbuss Jan 24, 2023
72973ec
Merge branch 'main' into marvinbuss/latest_updates
marvinbuss Jan 24, 2023
32966cc
Add dependabot configuration
marvinbuss Jan 24, 2023
8908990
Update lint
marvinbuss Jan 24, 2023
f042280
Update bicep template
marvinbuss Jan 24, 2023
de4cc73
Add Kusto Azure Policy
marvinbuss Jan 27, 2023
c0182fb
Update api version
marvinbuss Feb 16, 2023
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 12 additions & 0 deletions .github/dependabot.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,12 @@
version: 2
enable-beta-ecosystems: true
updates:
# Maintain dependencies for GitHub Actions
- package-ecosystem: "github-actions"
directory: "/"
schedule:
interval: "weekly"
day: "sunday"
target-branch: "dependabot/github_actions"
labels:
- "github-actions"
3 changes: 2 additions & 1 deletion .github/workflows/lint.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -15,7 +15,7 @@ jobs:
# Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
- name: Check Out Repository
id: checkout_repository
uses: actions/checkout@v2
uses: actions/checkout@v3
with:
fetch-depth: 0

Expand All @@ -29,4 +29,5 @@ jobs:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
VALIDATE_JSCPD: false
VALIDATE_JSON: false
VALIDATE_GITLEAKS: false
FILTER_REGEX_EXCLUDE: (/.devcontainer/|/reference/)
197 changes: 197 additions & 0 deletions infra/Policies/PolicyDefinitions/PrivateDnsZoneGroups/params.synapseKusto.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,197 @@
{
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentParameters.json#",
"contentVersion": "1.0.0.0",
"parameters": {
"policyName": {
"value": "Deploy-DNSZoneGroup-SynapseKusto-PrivateEndpoint"
},
"policyDescription": {
"value": "Deploys the configurations of a Private DNS Zone Group by a parameter for Synapse Kusto Private Endpoint. Used to enforce the configuration to a single Private DNS Zone."
},
"policyMode": {
"value": "Indexed"
},
"policyParameters": {
"value": {
"privateDnsZoneIdSynapseKusto": {
"type": "String",
"metadata": {
"displayName": "Private DNS Zone ID (Synapse Kusto)",
"strongType": "Microsoft.Network/privateDnsZones"
}
},
"privateDnsZoneIdBlob": {
"type": "String",
"metadata": {
"displayName": "Private DNS Zone ID (Blob Storage)",
"strongType": "Microsoft.Network/privateDnsZones"
}
},
"privateDnsZoneIdQueue": {
"type": "String",
"metadata": {
"displayName": "Private DNS Zone ID (Queue Storage)",
"strongType": "Microsoft.Network/privateDnsZones"
}
},
"privateDnsZoneIdTable": {
"type": "String",
"metadata": {
"displayName": "Private DNS Zone ID (Table Storage)",
"strongType": "Microsoft.Network/privateDnsZones"
}
},
"effect": {
"type": "String",
"metadata": {
"displayName": "Effect",
"description": "Enable or disable the execution of the policy"
},
"allowedValues": [
"DeployIfNotExists",
"Disabled"
],
"defaultValue": "DeployIfNotExists"
}
}
},
"policyDefinition": {
"value": {
"if": {
"allOf": [
{
"field": "type",
"equals": "Microsoft.Network/privateEndpoints"
},
{
"field": "Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].privateLinkServiceId",
"contains": "Microsoft.Synapse/workspaces"
},
{
"count": {
"field": "Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]",
"where": {
"field": "Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]",
"in": [
"Kusto"
]
}
},
"greaterOrEquals": 1
}
]
},
"then": {
"effect": "[parameters('effect')]",
"details": {
"type": "Microsoft.Network/privateEndpoints/privateDnsZoneGroups",
"roleDefinitionIds": [
"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"
],
"existenceCondition": {
"anyOf": [
{
"field": "Microsoft.Network/privateEndpoints/privateDnsZoneGroups/privateDnsZoneConfigs[*].privateDnsZoneId",
"equals": "[parameters('privateDnsZoneIdSynapseKusto')]"
}
]
},
"deployment": {
"properties": {
"mode": "incremental",
"template": {
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
"contentVersion": "1.0.0.0",
"parameters": {
"privateDnsZoneIdSynapseKusto": {
"type": "string"
},
"privateDnsZoneIdBlob": {
"type": "string"
},
"privateDnsZoneIdQueue": {
"type": "string"
},
"privateDnsZoneIdTable": {
"type": "string"
},
"privateEndpointName": {
"type": "string"
},
"location": {
"type": "string"
}
},
"resources": [
{
"name": "[concat(parameters('privateEndpointName'), '/deployedByPolicy')]",
"type": "Microsoft.Network/privateEndpoints/privateDnsZoneGroups",
"apiVersion": "2020-03-01",
"location": "[parameters('location')]",
"properties": {
"privateDnsZoneConfigs": [
{
"name": "[concat(parameters('privateEndpointName'), '-synapseKusto-aRecord')]",
"properties": {
"privateDnsZoneId": "[parameters('privateDnsZoneIdSynapseKusto')]"
}
},
{
"name": "[concat(parameters('privateEndpointName'), '-blob-aRecord')]",
"properties": {
"privateDnsZoneId": "[parameters('privateDnsZoneIdBlob')]"
}
},
{
"name": "[concat(parameters('privateEndpointName'), '-queue-aRecord')]",
"properties": {
"privateDnsZoneId": "[parameters('privateDnsZoneIdQueue')]"
}
},
{
"name": "[concat(parameters('privateEndpointName'), '-table-aRecord')]",
"properties": {
"privateDnsZoneId": "[parameters('privateDnsZoneIdTable')]"
}
}
]
}
}
]
},
"parameters": {
"privateDnsZoneIdSynapseKusto": {
"value": "[parameters('privateDnsZoneIdSynapseKusto')]"
},
"privateDnsZoneIdBlob": {
"value": "[parameters('privateDnsZoneIdBlob')]"
},
"privateDnsZoneIdQueue": {
"value": "[parameters('privateDnsZoneIdQueue')]"
},
"privateDnsZoneIdTable": {
"value": "[parameters('privateDnsZoneIdTable')]"
},
"privateEndpointName": {
"value": "[field('name')]"
},
"location": {
"value": "[field('location')]"
}
}
}
}
}
}
}
},
"policyMetadata": {
"value": {
"version": "1.0.0",
"category": "Synapse",
"preview": false,
"deprecated": false
}
}
}
}
Loading