1fb7266469
- Introduced Aggregator.sol for Chainlink-compatible oracle functionality, including round-based updates and access control. - Added OracleWithCCIP.sol to extend Aggregator with CCIP cross-chain messaging capabilities. - Created .gitmodules to include OpenZeppelin contracts as a submodule. - Developed a comprehensive deployment guide in NEXT_STEPS_COMPLETE_GUIDE.md for Phase 2 and smart contract deployment. - Implemented Vite configuration for the orchestration portal, supporting both Vue and React frameworks. - Added server-side logic for the Multi-Cloud Orchestration Portal, including API endpoints for environment management and monitoring. - Created scripts for resource import and usage validation across non-US regions. - Added tests for CCIP error handling and integration to ensure robust functionality. - Included various new files and directories for the orchestration portal and deployment scripts.
159 lines
5.0 KiB
Markdown
159 lines
5.0 KiB
Markdown
# Changelog: Well-Architected Framework Integration
|
|
|
|
## [Unreleased] - Well-Architected Framework Integration
|
|
|
|
### Added
|
|
|
|
#### Well-Architected Framework Support
|
|
- Management Groups hierarchy support
|
|
- Multiple resource groups organized by purpose
|
|
- Enhanced Key Vault module with RBAC and Private Endpoints
|
|
- Budget module for cost management
|
|
- Comprehensive tagging support
|
|
- Environment-aware configuration
|
|
|
|
#### New Terraform Modules
|
|
- `terraform/modules/management-groups/`: Management Groups hierarchy
|
|
- `terraform/modules/resource-groups/`: Organized resource groups
|
|
- `terraform/modules/keyvault-enhanced/`: Enhanced Key Vault with RBAC
|
|
- `terraform/modules/budget/`: Consumption budgets
|
|
- `terraform/well-architected/`: Well-Architected Framework configuration
|
|
|
|
#### New Documentation
|
|
- `docs/AZURE_WELL_ARCHITECTED_REVIEW.md`: Comprehensive review
|
|
- `docs/AZURE_WELL_ARCHITECTED_IMPLEMENTATION.md`: Implementation guide
|
|
- `docs/AZURE_WELL_ARCHITECTED_SUMMARY.md`: Summary of recommendations
|
|
- `docs/AZURE_WELL_ARCHITECTED_QUICK_START.md`: Quick start guide
|
|
- `docs/MIGRATION_TO_WELL_ARCHITECTED.md`: Migration guide
|
|
- `docs/PROJECT_UPDATE_SUMMARY.md`: Update summary
|
|
- `terraform/README.md`: Terraform configuration guide
|
|
|
|
### Changed
|
|
|
|
#### Terraform Configuration
|
|
- **Breaking**: Added `environment` variable (default: "prod")
|
|
- **Breaking**: Added `use_well_architected` flag (default: false)
|
|
- Updated `terraform/main.tf` to support both legacy and Well-Architected deployments
|
|
- Updated all modules to support environment and tags variables
|
|
- Updated provider configuration for better security
|
|
- Updated resource group creation to be conditional
|
|
|
|
#### Modules
|
|
- **Networking Module**: Added environment and tags support
|
|
- **Kubernetes Module**: Added environment and tags support, fixed node pool subnet assignments
|
|
- **Storage Module**: Added environment-aware configuration (retention, replication)
|
|
- **Secrets Module**: Added environment-aware configuration, deprecation notice
|
|
|
|
#### Scripts
|
|
- Updated `scripts/key-management/azure-keyvault-setup.sh` to support Well-Architected resource group naming and RBAC
|
|
|
|
#### Documentation
|
|
- Updated `README.md` with Well-Architected Framework section
|
|
- Updated `docs/DEPLOYMENT.md` with Well-Architected Framework references
|
|
- Updated `docs/QUICKSTART.md` with Well-Architected Framework references
|
|
|
|
### Security
|
|
|
|
#### Key Vault Improvements
|
|
- RBAC support (enhanced module)
|
|
- Network restrictions (Deny by default for production)
|
|
- Private Endpoints support
|
|
- Enhanced purge protection
|
|
- Increased retention periods (90 days for production)
|
|
|
|
#### Network Security
|
|
- Environment-aware network restrictions
|
|
- Production: Deny by default
|
|
- Non-production: Allow by default (for development)
|
|
|
|
### Cost Management
|
|
|
|
#### Budget Alerts
|
|
- Multi-threshold alerts (50%, 80%, 100%)
|
|
- Email notifications
|
|
- Role-based notifications
|
|
|
|
#### Tagging
|
|
- Comprehensive tagging support
|
|
- Cost allocation by environment
|
|
- Cost allocation by purpose
|
|
- Cost allocation by lifecycle
|
|
|
|
### Operational Excellence
|
|
|
|
#### Environment Separation
|
|
- Separate configurations for prod, dev, test, staging
|
|
- Environment-aware resource sizing
|
|
- Environment-aware retention policies
|
|
|
|
#### Resource Organization
|
|
- Resource groups organized by purpose
|
|
- Resource groups organized by lifecycle
|
|
- Improved resource management
|
|
|
|
### Backward Compatibility
|
|
|
|
#### Legacy Support
|
|
- Legacy single resource group deployment still supported
|
|
- Gradual migration path
|
|
- Backward compatible variable defaults
|
|
|
|
### Migration
|
|
|
|
#### Migration Guide
|
|
- Step-by-step migration instructions
|
|
- Resource migration procedures
|
|
- Key Vault migration (access policies to RBAC)
|
|
- Rollback procedures
|
|
|
|
## Migration Notes
|
|
|
|
### For Existing Deployments
|
|
|
|
1. **No Breaking Changes**: Legacy deployment mode is still supported
|
|
2. **Gradual Migration**: Can migrate to Well-Architected Framework gradually
|
|
3. **Environment Variable**: New `environment` variable (default: "prod")
|
|
4. **Tags**: New comprehensive tagging (backward compatible)
|
|
|
|
### For New Deployments
|
|
|
|
1. **Recommended**: Use Well-Architected Framework from start
|
|
2. **Configuration**: Use `terraform/well-architected/main.tf`
|
|
3. **Security**: Use enhanced Key Vault module with RBAC
|
|
4. **Cost Management**: Set up budget alerts
|
|
|
|
## Upgrade Path
|
|
|
|
### Step 1: Update Terraform Configuration
|
|
```bash
|
|
cd terraform
|
|
terraform init -upgrade
|
|
```
|
|
|
|
### Step 2: Review Variables
|
|
- Review `terraform/variables.tf` for new variables
|
|
- Update `terraform.tfvars` with environment and tags
|
|
|
|
### Step 3: Plan Deployment
|
|
```bash
|
|
terraform plan -var-file=terraform.tfvars
|
|
```
|
|
|
|
### Step 4: Apply Changes
|
|
```bash
|
|
terraform apply -var-file=terraform.tfvars
|
|
```
|
|
|
|
### Step 5: Migrate to Well-Architected Framework (Optional)
|
|
- Follow migration guide
|
|
- Create Well-Architected resource groups
|
|
- Migrate resources
|
|
- Update Key Vault configuration
|
|
|
|
## References
|
|
|
|
- [Well-Architected Framework Review](docs/AZURE_WELL_ARCHITECTED_REVIEW.md)
|
|
- [Well-Architected Implementation](docs/AZURE_WELL_ARCHITECTED_IMPLEMENTATION.md)
|
|
- [Migration Guide](docs/MIGRATION_TO_WELL_ARCHITECTED.md)
|
|
|