Skip to content

Commit e235366

Browse files
author
Kimmo Forss
committed
Add Firewall rules
1 parent 18e7ed3 commit e235366

File tree

1 file changed

+19
-18
lines changed

1 file changed

+19
-18
lines changed

‎articles/sap/automation/plan-deployment.md

Lines changed: 19 additions & 18 deletions
Original file line numberDiff line numberDiff line change
@@ -237,17 +237,17 @@ The following table shows the required permissions for the service principals.
237237
### Firewall configuration
238238
239239
> [!div class="mx-tdCol2BreakAll "]
240-
> | Component | Addresses | Duration | Notes |
241-
> | ----------------------------------- | --------------------------------------------------------------------------------------------------------- | ---------------------------------------- | -------------------------------------------------------------------------------------------------------- |
242-
> | SDAF | `github.com/Azure/sap-automation`, `github.com/Azure/sap-automation-samples`, `githubusercontent.com` | Setup of deployer | |
243-
> | Terraform | `releases.hashicorp.com`, `registry.terraform.io`, `checkpoint-api.hashicorp.com` | Setup of deployer | See [Installing Terraform](https://developer.hashicorp.com/terraform/downloads?product_intent=terraform). |
244-
> | Azure CLI | Installing [Azure CLI](/cli/azure/install-azure-cli-linux) | Setup of deployer and during deployments | The firewall requirements for the Azure CLI installation are defined in [Installing Azure CLI](/cli/azure/azure-cli-endpoints). |
245-
> | PIP | `bootstrap.pypa.io` | Setup of deployer | See [Installing Ansible](https://docs.ansible.com/ansible/latest/installation_guide/intro_installation.html). |
246-
> | Ansible | `pypi.org`, `pythonhosted.org`, `galaxy.ansible.com` | Setup of deployer | |
247-
> | PowerShell Gallery | `onegetcdn.azureedge.net`, `psg-prod-centralus.azureedge.net`, `psg-prod-eastus.azureedge.net` | Setup of Windows-based systems | See [PowerShell Gallery](/powershell/gallery/getting-started#network-access-to-the-powershell-gallery). |
240+
> | Component | Addresses | Duration | Notes |
241+
> | ----------------------------------- | --------------------------------------------------------------------------------------------------------- | ---------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------- |
242+
> | SDAF | `github.com/Azure/sap-automation`, `github.com/Azure/sap-automation-samples`, `githubusercontent.com` | Setup of deployer | |
243+
> | Terraform | `releases.hashicorp.com`, `registry.terraform.io`, `checkpoint-api.hashicorp.com` | Setup of deployer | See [Installing Terraform](https://developer.hashicorp.com/terraform/downloads?product_intent=terraform). |
244+
> | Azure CLI | Installing [Azure CLI](/cli/azure/install-azure-cli-linux) | Setup of deployer and during deployments | The firewall requirements for the Azure CLI installation are defined in [Installing Azure CLI](/cli/azure/azure-cli-endpoints). |
245+
> | PIP | `bootstrap.pypa.io` | Setup of deployer | See [Installing Ansible](https://docs.ansible.com/ansible/latest/installation_guide/intro_installation.html). |
246+
> | Ansible | `pypi.org`, `pythonhosted.org`, `files.pythonhosted.org`, `galaxy.ansible.com`, 'https://ansible-galaxy-ng.s3.dualstack.us-east-1.amazonaws.com' | Setup of deployer | |
247+
> | PowerShell Gallery | `onegetcdn.azureedge.net`, `psg-prod-centralus.azureedge.net`, `psg-prod-eastus.azureedge.net` | Setup of Windows-based systems | See [PowerShell Gallery](/powershell/gallery/getting-started#network-access-to-the-powershell-gallery). |
248248
> | Windows components | `download.visualstudio.microsoft.com`, `download.visualstudio.microsoft.com`, `download.visualstudio.com` | Setup of Windows-based systems | See [Visual Studio components](/visualstudio/install/install-and-use-visual-studio-behind-a-firewall-or-proxy-server#install-visual-studio). |
249-
> | SAP downloads | `softwaredownloads.sap.com`                                    | SAP software download | See [SAP downloads](https://launchpad.support.sap.com/#/softwarecenter). |
250-
> | Azure DevOps agent | `https://vstsagentpackage.azureedge.net`                                   | Setup of Azure DevOps | |
249+
> | SAP downloads | `softwaredownloads.sap.com`                                    | SAP software download | See [SAP downloads](https://launchpad.support.sap.com/#/softwarecenter). |
250+
> | Azure DevOps agent | `https://vstsagentpackage.azureedge.net`                                   | Setup of Azure DevOps | |
251251
252252
## DevOps structure
253253
@@ -266,14 +266,15 @@ You can create this repository by cloning the [SAP Deployment Automation Framewo
266266
267267
The following sample folder hierarchy shows how to structure your configuration files along with the automation framework files.
268268
269-
| Folder name | Contents | Description |
270-
| ----------- | -------- | ----------- |
271-
| None (root level) | Configuration files, template files | The root folder for all systems that you're managing from this deployment environment. |
272-
| CONFIGURATION | Shared configuration files | A shared folder for referring to custom configuration files from multiple places. For example, custom disk sizing configuration files. |
273-
| DEPLOYER | Configuration files for the deployer | A folder with [deployer configuration files](configure-control-plane.md) for all deployments that the environment manages. Name each subfolder by the naming convention of **Environment - Region - Virtual Network**. For example, **PROD-WEEU-DEP00-INFRASTRUCTURE**. |
274-
| LIBRARY | Configuration files for SAP library | A folder with [SAP library configuration files](configure-control-plane.md) for all deployments that the environment manages. Name each subfolder by the naming convention of **Environment - Region - Virtual Network**. For example, **PROD-WEEU-SAP-LIBRARY**. |
275-
| LANDSCAPE | Configuration files for landscape deployments | A folder with [configuration files for all workload zones](deploy-workload-zone.md) that the environment manages. Name each subfolder by the naming convention **Environment - Region - Virtual Network**. For example, **PROD-WEEU-SAP00-INFRASTRUCTURE**. |
276-
| SYSTEM | Configuration files for the SAP systems | A folder with [configuration files for all SAP System Identification (SID) deployments](configure-system.md) that the environment manages. Name each subfolder by the naming convention **Environment - Region - Virtual Network - SID**. For example, **PROD-WEEU-SAPO00-ABC**. |
269+
270+
> [!div class="mx-tdCol2BreakAll "]
271+
> | Folder name | Contents | Description |
272+
> | ----------------- | --------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
273+
> | BOMS | BoM Files | Used for manual BoM download |
274+
> | DEPLOYER | Configuration files for the deployer | A folder with [deployer configuration files](configure-control-plane.md) for all deployments that the environment manages. Name each subfolder by the naming convention of **Environment - Region - Virtual Network**. For example, **PROD-WEEU-DEP00-INFRASTRUCTURE**. |
275+
> | LIBRARY | Configuration files for SAP library | A folder with [SAP library configuration files](configure-control-plane.md) for all deployments that the environment manages. Name each subfolder by the naming convention of **Environment - Region - Virtual Network**. For example, **PROD-WEEU-SAP-LIBRARY**. |
276+
> | LANDSCAPE | Configuration files for workload zone | A folder with [configuration files for all workload zones](deploy-workload-zone.md) that the environment manages. Name each subfolder by the naming convention **Environment - Region - Virtual Network**. For example, **PROD-WEEU-SAP00-INFRASTRUCTURE**. |
277+
> | SYSTEM | Configuration files for the SAP systems | A folder with [configuration files for all SAP System Identification (SID) deployments](configure-system.md) that the environment manages. Name each subfolder by the naming convention **Environment - Region - Virtual Network - SID**. For example, **PROD-WEEU-SAPO00-ABC**. |
277278
278279
:::image type="content" source="./media/plan-deployment/folder-structure.png" alt-text="Screenshot that shows example folder structure, with separate folders for SAP HANA and multiple workload environments.":::
279280

0 commit comments

Comments
 (0)