1fb7266469
- Introduced Aggregator.sol for Chainlink-compatible oracle functionality, including round-based updates and access control. - Added OracleWithCCIP.sol to extend Aggregator with CCIP cross-chain messaging capabilities. - Created .gitmodules to include OpenZeppelin contracts as a submodule. - Developed a comprehensive deployment guide in NEXT_STEPS_COMPLETE_GUIDE.md for Phase 2 and smart contract deployment. - Implemented Vite configuration for the orchestration portal, supporting both Vue and React frameworks. - Added server-side logic for the Multi-Cloud Orchestration Portal, including API endpoints for environment management and monitoring. - Created scripts for resource import and usage validation across non-US regions. - Added tests for CCIP error handling and integration to ensure robust functionality. - Included various new files and directories for the orchestration portal and deployment scripts.
153 lines
3.9 KiB
Markdown
153 lines
3.9 KiB
Markdown
# Azure Well-Architected Framework - Quick Start
|
|
|
|
## Overview
|
|
|
|
This quick start guide provides the essential steps to implement Well-Architected Framework recommendations for the DeFi Oracle Meta Mainnet infrastructure.
|
|
|
|
## Prerequisites
|
|
|
|
- Azure CLI installed and configured
|
|
- Terraform >= 1.0 installed
|
|
- Azure subscription with appropriate permissions
|
|
- Understanding of Azure Management Groups
|
|
|
|
## Step 1: Create Management Groups (5 minutes)
|
|
|
|
```bash
|
|
# Login to Azure
|
|
az login
|
|
|
|
# Create Management Groups
|
|
az account management-group create --name "Production" --display-name "Production"
|
|
az account management-group create --name "Non-Production" --display-name "Non-Production"
|
|
az account management-group create --name "SharedServices" --display-name "Shared Services"
|
|
```
|
|
|
|
## Step 2: Deploy Resource Groups (10 minutes)
|
|
|
|
```bash
|
|
# Navigate to well-architected directory
|
|
cd terraform/well-architected
|
|
|
|
# Copy example variables
|
|
cp terraform.tfvars.example terraform.tfvars
|
|
|
|
# Edit terraform.tfvars with your values
|
|
# - environment: prod, dev, test, or staging
|
|
# - location: Azure region (e.g., eastus)
|
|
# - subscription_id: Your Azure subscription ID
|
|
|
|
# Initialize Terraform
|
|
terraform init
|
|
|
|
# Plan deployment
|
|
terraform plan -var-file=terraform.tfvars
|
|
|
|
# Apply deployment
|
|
terraform apply -var-file=terraform.tfvars
|
|
```
|
|
|
|
## Step 3: Configure Key Vault (15 minutes)
|
|
|
|
The enhanced Key Vault is automatically deployed. Update the configuration:
|
|
|
|
```hcl
|
|
# terraform/well-architected/terraform.tfvars
|
|
key_vault_allowed_subnet_ids = [
|
|
# Add your subnet IDs
|
|
]
|
|
|
|
key_vault_allowed_ip_ranges = [
|
|
# Add your management IPs
|
|
]
|
|
|
|
key_vault_private_endpoint_subnet_id = ""
|
|
# Add private endpoint subnet ID (optional for prod)
|
|
```
|
|
|
|
Apply the changes:
|
|
|
|
```bash
|
|
terraform apply -var-file=terraform.tfvars
|
|
```
|
|
|
|
## Step 4: Configure Budget Alerts (5 minutes)
|
|
|
|
Update budget configuration:
|
|
|
|
```hcl
|
|
# terraform/well-architected/terraform.tfvars
|
|
budget_amount = 10000 # Monthly budget in USD
|
|
budget_contact_emails = [
|
|
"devops@example.com" # Update with your email
|
|
]
|
|
```
|
|
|
|
Apply the changes:
|
|
|
|
```bash
|
|
terraform apply -var-file=terraform.tfvars
|
|
```
|
|
|
|
## Step 5: Verify Deployment (5 minutes)
|
|
|
|
```bash
|
|
# List resource groups
|
|
az group list --query "[?contains(name, 'rg-prod-')].{Name:name, Location:location}" --output table
|
|
|
|
# List Key Vaults
|
|
az keyvault list --query "[].{Name:name, ResourceGroup:resourceGroup}" --output table
|
|
|
|
# List budgets
|
|
az consumption budget list --subscription <subscription-id>
|
|
```
|
|
|
|
## What's Next?
|
|
|
|
1. **Review Documentation**: Read the full [Well-Architected Review](AZURE_WELL_ARCHITECTED_REVIEW.md)
|
|
2. **Implement Security**: Follow the [Implementation Guide](AZURE_WELL_ARCHITECTED_IMPLEMENTATION.md)
|
|
3. **Migrate Resources**: Move existing resources to new resource groups
|
|
4. **Configure Policies**: Set up Azure Policy assignments
|
|
5. **Monitor Costs**: Review cost reports and optimize spending
|
|
|
|
## Common Issues
|
|
|
|
### Issue: Management Group Creation Fails
|
|
|
|
**Solution**: Ensure you have appropriate permissions (Owner or Management Group Contributor)
|
|
|
|
```bash
|
|
# Check your permissions
|
|
az role assignment list --assignee <your-object-id> --scope "/providers/Microsoft.Management/managementGroups"
|
|
```
|
|
|
|
### Issue: Key Vault Network Restrictions Too Strict
|
|
|
|
**Solution**: Temporarily allow your IP or subnet, then refine:
|
|
|
|
```hcl
|
|
key_vault_allowed_ip_ranges = [
|
|
"1.2.3.4/32" # Your current IP
|
|
]
|
|
```
|
|
|
|
### Issue: Budget Not Created
|
|
|
|
**Solution**: Ensure you have Cost Management Contributor role:
|
|
|
|
```bash
|
|
# Assign role
|
|
az role assignment create \
|
|
--role "Cost Management Contributor" \
|
|
--assignee <your-object-id> \
|
|
--scope "/subscriptions/<subscription-id>"
|
|
```
|
|
|
|
## References
|
|
|
|
- [Well-Architected Review](AZURE_WELL_ARCHITECTED_REVIEW.md)
|
|
- [Well-Architected Implementation](AZURE_WELL_ARCHITECTED_IMPLEMENTATION.md)
|
|
- [Well-Architected Summary](AZURE_WELL_ARCHITECTED_SUMMARY.md)
|
|
- [Microsoft Well-Architected Framework](https://docs.microsoft.com/azure/architecture/framework/)
|
|
|