starkfell/100daysofiac

100 Days of IaC in Azure

100daysofiac's Issues

Azure Policy?

If appropriate, I think covering the use of Azure Policy would be extremely beneficial, especially for enterprises.

Day 47 - transposed definitions

Day 47:
resourceId. returns an object that represents the current resource group.
resourceGroup. returns the unique identifier of a resource. You use this function when the resource name is ambiguous or not provisioned within the same template

Definitions have been transposed.

Recommend ED25519 instead of RSA ssh keys?

In day 68 you show how to create a 4096 bit RSA ssh key. Would it not be better to show how to create an ED25519 key instead? From what I can tell, it is now recommended over RSA.

[EDIT]: I see, after finishing the article, that ED25519 is not currently supported by Microsoft.

Problem with markdown

Hi,
Maybe I'm doing something wrong. I have instaled VS Code, also added extensions:
Markdown All in One
Markdown Lint
Spell Right
I don't know what next. I download pdf & I can't open in VS Code. Please help me.

Suggested Topic: GitOps

Hi guys, great series. I would like to suggest a topic since you touch AKS. We have been using GitOps in our environment and I think is quite cool. Perhaps you can use one of the "Days" to give an overview of GitOps or Microsoft Bedrock framework

Day 4 - Create an SP

The Service principal name should be "http://iac-sp". Throws me a warning every time. IDK if that's intended, but changing it would help better understand the syntax

Typo's in 'Creating a Service Principal in Azure' sample code.

Thanks for this great series Ryan and Pete. I'm running through the examples here and have found that the suggested Azure CLI code sample seems to have some typo's and should be updated to the following:

$AZURE_SP=$(/usr/bin/az ad sp create-for-rbac --scope "contributor"
--name "iac-sp" `
--years 3)

Also, the code for storing the password into an existing Key Vault works when modified to:

$IAC_SP_PASSWORD=$(echo $AZURE_SP | jq .password | tr -d '"')

/usr/bin/az keyvault secret set --name "iac-sp-password"
--vault-name "myiacvault" --value "$IAC_SP_PASSWORD"
--output none