You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
| <aname="input_cluster_name"></a> [cluster\_name](#input\_cluster\_name)| The EKS cluster name |`string`|`"wrongsecrets-exercise-cluster"`| no |
208
-
| <aname="input_cluster_version"></a> [cluster\_version](#input\_cluster\_version)| The EKS cluster version to use |`string`|`"1.28"`| no |
208
+
| <aname="input_cluster_version"></a> [cluster\_version](#input\_cluster\_version)| The EKS cluster version to use |`string`|`"1.30"`| no |
209
209
| <aname="input_extra_allowed_ip_ranges"></a> [extra\_allowed\_ip\_ranges](#input\_extra\_allowed\_ip\_ranges)| Allowed IP ranges in addition to creator IP |`list(string)`|`[]`| no |
210
210
| <aname="input_region"></a> [region](#input\_region)| The AWS region to use |`string`|`"eu-west-1"`| no |
211
211
| <aname="input_state_bucket_arn"></a> [state\_bucket\_arn](#input\_state\_bucket\_arn)| ARN of the state bucket to grant access to the s3 user |`string`| n/a | yes |
Copy file name to clipboardExpand all lines: azure/README.md
+10-20Lines changed: 10 additions & 20 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -21,7 +21,7 @@ Please note that this setup relies on bash scripts that have been tested in MacO
21
21
22
22
## Installation
23
23
24
-
**Note-I**: We create resources in `east us` by default. You can set the region by editing `terraform.tfvars`.
24
+
**Note-I**: We create resources in `east us` by default. You can set the region by editing [`terraform.tfvars`](./terraform.tfvars).
25
25
26
26
**Note-II**: The cluster you create has its access bound to the public IP of the creator. In other words: the cluster you create with this code has its access bound to your public IP-address if you apply it locally. If you switched to a different network, you'll need to run `terraform apply` again to update the firewall rules.
27
27
@@ -43,34 +43,24 @@ terraform init
43
43
terraform apply
44
44
```
45
45
46
-
The storage account name should be in the output. Please use that to configure the Terraform backend in `main.tf` by uncommenting the part on the `backend "azurerm"` inside the `terraform` block. Assign the `storage_account_name` to the one from the output.
46
+
The storage account name should be in the output. Please use that to configure the Terraform backend in [`main.tf`](./main.tf) by uncommenting the part on the `backend "azurerm"` inside the `terraform` block. Assign the `storage_account_name` to the one from the output.
47
47
48
48
**Note**: You'll need to follow the description [below](#wrongsecrets-ctf-party) in step 1 for the "existing resource group" i.e., use the `azurerm_resource_group.default` resource.
49
49
50
50
### WrongSecrets-ctf-party
51
51
52
-
1. Set either a new resource group or use an existing resource group in `main.tf` (it defaults to the existing `OWASP-Projects` resource group). Note that you'll need to find/replace references to "azurerm_resource_group.default" to "arurerm_resource_group.default" if you want to create a new one.
52
+
1. Set either a new resource group or use an existing resource group in [`main.tf`](main.tf) (it defaults to the existing `OWASP-Projects` resource group). Note that you'll need to find/replace references to `azurerm_resource_group.default` to `data.arurerm_resource_group.default` if you want to create a new one.
53
53
2. check whether you have the right project by doing `az account show` (after `az login`). Want to set the project as your default? Use `az account set --subscription <.id here>`.
54
54
3. If not yet enabled, register the required services for the subscription, run:
az provider register --namespace Microsoft.ContainerService
57
+
az provider register --namespace Microsoft.KeyVault
58
+
az provider register --namespace Microsoft.ManagedIdentity
59
+
```
58
60
4. Run `terraform init` (if required, use `tfenv` to select TF 0.14.0 or higher )
59
61
5. Run `terraform plan` to see what will be created (optional).
60
62
6. Run `terraform apply`. Note: the apply will take 5 to 20 minutes depending on the speed of the Azure backplane.
61
-
7. Go to the values of the helm chart and replace the wrongsecrets.config with this:
62
-
63
-
```yaml
64
-
K8S_ENV: "azure"
65
-
```
66
-
67
-
and replace the value of wrongsecrets.env having the name 'K8S_ENV' with this:
68
-
69
-
```yaml
70
-
value: "azure"
71
-
```
72
-
73
-
8. Run `./build-and-deploy-azure.sh`. Your kubeconfig file will automatically be updated.
63
+
7. Run `./build-and-deploy-azure.sh`. Your kubeconfig file will automatically be updated.
74
64
75
65
Your AKS cluster should be visible in your resource group. Want a different region? You can modify `terraform.tfvars` or input it directly using the `region` variable in plan/apply.
76
66
@@ -206,7 +196,7 @@ No modules.
206
196
| Name | Description | Type | Default | Required |
Copy file name to clipboardExpand all lines: azure/build-and-deploy-azure.sh
+2Lines changed: 2 additions & 0 deletions
Original file line number
Diff line number
Diff line change
@@ -32,6 +32,7 @@ esac
32
32
33
33
echo"This is a script to bootstrap the configuration. You need to have installed: helm, kubectl, vault, grep, cat, sed, envsubst, and azure cli, and is only tested on mac, Debian and Ubuntu"
34
34
35
+
echo"obtaining the shared state locally, if you use shared state you will see an error below, there is no problem in that case"
35
36
# The storage account to store the terraform state file
0 commit comments