You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: learn-pr/azure-devops/create-a-build-pipeline/includes/5-set-up-environment.md
+10-13Lines changed: 10 additions & 13 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -12,27 +12,24 @@ For learning purposes, each module has an associated Azure DevOps project, so yo
12
12
13
13
### Run the template
14
14
15
-
To set up everything in your Azure DevOps organization, run a template.
15
+
Run a template that sets up your Azure DevOps organization.
16
16
17
-
> [!div class="nextstepaction"]
18
-
> [Run the template](https://azuredevopsdemogenerator.azurewebsites.net/?x-ms-routing-name=self&name=create-build-pipeline&azure-portal=true)
17
+
1.[Get and run the ADOGenerator project](https://github.com/microsoft/AzDevOpsDemoGenerator/blob/main/docs/RunApplication.md) in Visual Studio or the IDE of your choice.
19
18
20
-
On the Azure DevOps Demo Generator site, to run the template, do these steps:
19
+
1. When prompted to **Enter the template number from the list of templates**, enter **22** for **Create a build pipeline with Azure Pipelines**, then press **Enter**.
21
20
22
-
1. Select **Sign In** and accept the usage terms.
23
-
1. On the **Create New Project** page, enter a project name, like *Space Game - web - Pipeline*, select your Azure DevOps organization (in this example the organization name is `fabrikam`), and select **Create Project**.
21
+
1. Choose your authentication method. You can [set up and use a Personal Access Token (PAT)](/azure/devops/organizations/accounts/use-personal-access-tokens-to-authenticate#create-a-pat) or use device login.
24
22
25
-
::: zone pivot="github-codespaces-agent"
23
+
> [!NOTE]
24
+
> If you set up a PAT, If you set up a PAT, make sure to authorize the necessary [scopes](/azure/devops/integrate/get-started/authentication/oauth#scopes). For this module, you can use **Full access**, but in a real-world situation, you should ensure you grant only the necessary scopes.
26
25
27
-
> [!IMPORTANT]
28
-
> You must specify the same Azure DevOps organization name here that you specified as your GitHub Codespaces secret for `ADO_ORG` in the [Set up secrets for self-hosted agent](../3-build-locally.yml#set-up-secrets-for-self-hosted-agent) procedure.
26
+
1. Enter your Azure DevOps organization name, then press **Enter**.
29
27
30
-
::: zone-end
28
+
1. If prompted, enter your Azure DevOps PAT, then press **Enter**.
31
29
32
-
:::image type="content" source="../media/5-create-new-project.png" alt-text="Screenshot of creating a project through the Azure DevOps Demo Generator.":::
30
+
1. Enter a project name such as *Space Game - web - Pipeline*, then press **Enter**.
33
31
34
-
It takes a moment for the template to run.
35
-
1. To go to your project in Azure DevOps, select **Navigate to project**.
32
+
1. Once your project is created, go to your Azure DevOps organization in your browser (at `https://dev.azure.com/<your-organization-name>/`) and select the project.
36
33
37
34
> [!IMPORTANT]
38
35
> The [Clean up your Azure DevOps environment](/training/modules/create-a-build-pipeline/9-clean-up-environment?azure-portal=true) unit at the end of this module provides important cleanup steps. Cleaning up helps ensure that you don't run out of free build minutes for Microst-hosted agents ([check your usage](/azure/devops/pipelines/licensing/concurrent-jobs#check-the-parallel-jobs-setting-directly)), or GitHub Codespaces [included usage hours and storage](https://docs.github.com/billing/managing-billing-for-github-codespaces/about-billing-for-github-codespaces#monthly-included-storage-and-core-hours-for-personal-accounts) ([charges might apply if you exceed the free tier, so check your usage](https://docs.github.com/billing/managing-billing-for-github-codespaces/viewing-your-github-codespaces-usage)). Be sure to do the cleanup steps even if you don't complete this module.
- content: 'You need to connect Azure resources like Azure virtual machines across geographical regions. Which Azure networking option should you use?'
16
-
choices:
17
-
- content: "Azure ExpressRoute"
18
-
isCorrect: false
19
-
explanation: "ExpressRoute allows you to extend your on-premises networks into the Microsoft Cloud over a private connection implemented by a connectivity provider."
20
-
- content: "VPN Gateway"
21
-
isCorrect: false
22
-
explanation: "An Azure virtual network gateway provides an endpoint for incoming connections from on-premises locations to Azure over the Internet."
23
-
- content: "Virtual network peering"
24
-
isCorrect: true
25
-
explanation: "Use virtual network peering to connect virtual networks to each other so resources in either virtual network can communicate with each other. The virtual networks you connect can be in different Azure regions."
26
-
- content: 'For a point-to-site Azure VPN gateway, what are the key parameters that you must specify when you create it?'
27
-
choices:
28
-
- content: "Gateway type is **Vpn** and vpn type is **RouteBased**."
29
-
isCorrect: false
30
-
explanation: "Those are key parameters but you also need to specify a gateway sku. The default is VpnGw1. If that SKU doesn't meet your organization's needs, you'd have to recreate the VPN gateway with the SKU that meets your organization's network requirements."
31
-
- content: "Gateway type is **Vpn**, vpn type is **RouteBased**, and you need to specify a gateway sku."
32
-
isCorrect: true
33
-
explanation: "Use the PowerShell cmdlet 'New-AzVirtualNetworkGateway' where you use parameters '-GatewayType Vpn' and '-VpnType RouteBased'. Also set the '-GatewaySku' to the SKU that meets your organization's network requirements."
34
-
- content: "Subnet is **GatewaySubnet** and gateway type is **Vpn**"
35
-
isCorrect: false
36
-
explanation: "You must create a gateway subnet with the name **GatewaySubnet** in order for the VPN gateway to function properly. But when you create the VPN gateway with the cmdlet 'New-AzVirtualNetworkGateway', you specify the '-IpConfigurations' for that subnet."
37
-
- content: 'Which peering configuration would you use for your ExpressRoute circuit where you need to allow direct connections to Azure compute resources?'
38
-
choices:
39
-
- content: "Azure Virtual Network peering"
40
-
isCorrect: false
41
-
explanation: "Virtual network peering allows you to connect networks in Azure Virtual Network."
42
-
- content: "Azure private peering"
43
-
isCorrect: true
44
-
explanation: "Azure private peering lets you directly connect to virtual machines and cloud services on their private IP addresses."
45
-
- content: "Microsoft peering"
46
-
isCorrect: false
47
-
explanation: "Microsoft peering supports connections to cloud-based SaaS offerings, such as Microsoft 365 and Dynamics 365."
48
-
- content: 'Which protocol provides dynamic routing for Azure ExpressRoute?'
49
-
choices:
50
-
- content: "IPVPN"
51
-
isCorrect: false
52
-
explanation: "An Any-to-any (IPVPN) network is a connectivity model that ExpressRoute supports."
53
-
- content: "Border Gateway Protocol (BGP)"
54
-
isCorrect: true
55
-
explanation: "Border Gateway Protocol is an industry-standard dynamic routing protocol that can exchange routes between your on-premises network, your instances in Azure, and Microsoft public addresses."
56
-
- content: "S-key"
57
-
isCorrect: false
58
-
explanation: "An s-key is a GUID that defines an ExpressRoute circuit and provides the connectivity link between Microsoft, your connectivity provider, and your organization."
- content: 'You need to connect Azure resources like Azure virtual machines across geographical regions. Which Azure networking option should you use?'
16
+
choices:
17
+
- content: "Azure ExpressRoute"
18
+
isCorrect: false
19
+
explanation: "ExpressRoute allows you to extend your on-premises networks into the Microsoft Cloud over a private connection implemented by a connectivity provider."
20
+
- content: "VPN Gateway"
21
+
isCorrect: false
22
+
explanation: "An Azure virtual network gateway provides an endpoint for incoming connections from on-premises locations to Azure over the Internet."
23
+
- content: "Virtual network peering"
24
+
isCorrect: true
25
+
explanation: "Use virtual network peering to connect virtual networks to each other so resources in either virtual network can communicate with each other. The virtual networks you connect can be in different Azure regions."
26
+
- content: 'For a point-to-site Azure VPN gateway, what are the key parameters that you must specify when you create it?'
27
+
choices:
28
+
- content: "Gateway type is **Vpn** and vpn type is **RouteBased**."
29
+
isCorrect: false
30
+
explanation: "Those are key parameters but you also need to specify a gateway sku. The default is VpnGw1. If that SKU doesn't meet your organization's needs, you'd have to recreate the VPN gateway with the SKU that meets your organization's network requirements."
31
+
- content: "Gateway type is **Vpn**, vpn type is **RouteBased**, and you need to specify a gateway sku."
32
+
isCorrect: true
33
+
explanation: "Use the PowerShell cmdlet 'New-AzVirtualNetworkGateway' where you use parameters '-GatewayType Vpn' and '-VpnType RouteBased'. Also set the '-GatewaySku' to the SKU that meets your organization's network requirements."
34
+
- content: "Subnet is **GatewaySubnet** and gateway type is **Vpn**"
35
+
isCorrect: false
36
+
explanation: "You must create a gateway subnet with the name **GatewaySubnet** in order for the VPN gateway to function properly. But when you create the VPN gateway with the cmdlet 'New-AzVirtualNetworkGateway', you specify the '-IpConfigurations' for that subnet."
37
+
- content: 'Which peering configuration would you use for your ExpressRoute circuit where you need to allow direct connections to Azure compute resources?'
38
+
choices:
39
+
- content: "Azure Virtual Network peering"
40
+
isCorrect: false
41
+
explanation: "Virtual network peering allows you to connect networks in Azure Virtual Network."
42
+
- content: "Azure private peering"
43
+
isCorrect: true
44
+
explanation: "Azure private peering lets you directly connect to virtual machines and cloud services on their private IP addresses."
45
+
- content: "Microsoft peering"
46
+
isCorrect: false
47
+
explanation: "Microsoft peering supports connections to cloud-based SaaS offerings, such as Microsoft 365 and Dynamics 365."
48
+
- content: 'Which protocol provides dynamic routing for Azure ExpressRoute?'
49
+
choices:
50
+
- content: "IPVPN"
51
+
isCorrect: false
52
+
explanation: "An Any-to-any (IPVPN) network is a connectivity model that ExpressRoute supports."
53
+
- content: "Border Gateway Protocol (BGP)"
54
+
isCorrect: true
55
+
explanation: "Border Gateway Protocol is an industry-standard dynamic routing protocol that can exchange routes between your on-premises network, your instances in Azure, and Microsoft public addresses."
56
+
- content: "S-key"
57
+
isCorrect: false
58
+
explanation: "An s-key is a GUID that defines an ExpressRoute circuit and provides the connectivity link between Microsoft, your connectivity provider, and your organization."
Suppose you work as a network architect at a global pharmaceutical company that sequences genes to create formulas for proprietary and commercially confidential medicines. These formulas are used by your manufacturing plants around the world. The company wants to implement Microsoft Azure and transfer part of its genesequencing functions into cloud-based virtual machines. The genesequencing results need to be available to several regions around the world. Data processing is currently carried out in on-premises datacenters, with virtual private networking (VPN) used to connect the datacenters in each region.
1
+
Suppose you work as a network architect at a global pharmaceutical company that sequences genes to create formulas for proprietary and commercially confidential medicines. Your manufacturing plants around the world use these formulas. The company wants to implement Microsoft Azure and transfer part of its gene-sequencing functions into cloud-based virtual machines. The gene-sequencing results need to be available to several regions around the world. Data processing is currently carried out in on-premises datacenters, with virtual private networking (VPN) used to connect the datacenters in each region.
2
2
3
3
You've been tasked to assess how Microsoft Azure implements networking, and to identify whether it will provide suitable security for the transfer of data. Secure data transfer is required between your on-premises datacenter and Microsoft Azure, and between Microsoft Azure regions. You'll use Azure Virtual Network, Azure VPN Gateway, and Azure ExpressRoute technologies.
4
4
5
5
## Learning objectives
6
6
7
7
By the end of this module, you'll be able to:
8
8
9
-
- Create an Azure Virtual Network
10
-
- Create an Azure VPN Gateway
11
-
- Identify the features and benefits of Azure ExpressRoute
9
+
- Create an Azure Virtual Network.
10
+
- Create an Azure VPN Gateway.
11
+
- Identify the features and benefits of Azure ExpressRoute.
12
12
13
13
## Prerequisites
14
14
15
15
[!include[](prerequisites.md)]
16
16
17
17
> [!IMPORTANT]
18
-
> The exercises in this module require a full Azure subscription. The exercises are optional and are not required to complete this module. Participating in the interactive exercises in this module will result in charges billed to the Azure subscription you use to complete them. Incurred charges can be minimized by cleaning up the resources you create as soon as possible. Cleanup directions are included in the final unit.
18
+
> The exercises in this module require a full Azure subscription. The exercises are optional and aren't required to complete this module. Participating in the interactive exercises in this module will result in charges billed to the Azure subscription you use to complete them. You can minimize incurred charge by cleaning up the resources you create as soon as possible. We've included cleanup directions in the final unit.
0 commit comments