jesseloudon

---
lint: |
  ansible-lint tasks/main.yml
dependency:
  name: galaxy
driver:
  name: azure
platforms:
  - name: win2019
provisioner:

jesseloudon

---
  - name: Create
    hosts: localhost
    connection: local
    gather_facts: false
  
    vars:
      resource_group_name: ansible-dev-win2019-yourinitials
      virtual_network_resource_group_name: ansible-dev-yourinitials
      virtual_network_name: ansible-dev-yourinitials

jesseloudon

---
lint: |
  ansible-lint tasks/main.yml
dependency:
  name: galaxy
driver:
  name: azure
platforms:
  - name: rhel8
provisioner:

jesseloudon

---
  - name: Create
    hosts: localhost
    connection: local
    gather_facts: false
  
    vars:
      resource_group_name: ansibledev-rhel8-yourinitials
      virtual_network_resource_group_name: ansibledev-yourinitials
      virtual_network_name: ansibledev-yourinitials

jesseloudon

jobs:
  terraform:
    env:
        ARM_CLIENT_ID: ${{ secrets.az_client_id }}
        ARM_CLIENT_SECRET: ${{ secrets.az_client_secret }}
        ARM_SUBSCRIPTION_ID: ${{ secrets.az_subscription_id }}
        ARM_TENANT_ID: ${{ secrets.az_tenant_id }}

jesseloudon

az login
az account list
az account set --subscription="XXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXX"
az ad sp create-for-rbac --name "TF-AzureRM-Policy" --role="Resource Policy Contributor" --scopes="/subscriptions/XXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXX"

jesseloudon

terraform {
  required_version = "~> 0.12.0"
  required_providers {
    azurerm = "~> 2.11.0"
  }
  backend "remote" {
    hostname     = "app.terraform.io"
    organization = "GlobalBao"
    workspaces {
      name = "azurerm-policy-visualstudio"

jesseloudon

name: Terraform Plan
on:
  push:
    branches: [ master ]
  pull_request:
    branches: [ master ]
    
jobs:

  Terraform-Plan:

jesseloudon

name: Terraform Apply
on:
  workflow_dispatch:
    
jobs:

  Terraform-Apply:
    runs-on: ubuntu-latest
    
    steps:

jesseloudon

module "policy_assignments" {
  source = "./modules/policy-assignments"

  tag_governance_policyset_id             = "${module.policyset_definitions.tag_governance_policyset_id}"
  iam_governance_policyset_id             = "${module.policyset_definitions.iam_governance_policyset_id}"
  security_governance_policyset_id        = "${module.policyset_definitions.security_governance_policyset_id}"
  data_protection_governance_policyset_id = "${module.policyset_definitions.data_protection_governance_policyset_id}"
}