Getting Started with Containers in Azure: Deploy Secure Cloud Applications Using Terraform

Table of Contents About the Author About the Technical Reviewer Chapter 1: Getting Started with Azure and Terraform Introduction Goals of This Chapter Tools and Services for the Setup Visual Studio Code Installing VS Code VS Code Extensions Installing VS Code Extensions Windows Subsystem for Linux Installing WSL on Windows 11 Azure CLI Installing Azure CLI on Windows with WinGet Installing Azure CLI on Linux Installing Azure CLI on macOS PowerShell 7 Installing PowerShell 7 on Windows Installing PowerShell 7 on macOS Installing PowerShell 7 on Linux Terraform A High-Level Example of Terraform Installing Terraform on macOS Enabling Terraform Tab Completion on macOS Installing Terraform on Linux Installing Terraform on Ubuntu Enabling Terraform Tab Completion on Ubuntu Installing Terraform on Windows Terraform Package Manager Installing tfenv on macOS Installing tfenv on Linux How to Use tfenv Getting Started with Azure Infrastructure Authenticating to Azure Deploying Azure Infrastructure with Terraform The “Terraform Init” Command The “Terraform Plan” Command The “Terraform Apply” Command The “Terraform Destroy” Command Summary Chapter 2: Azure Web App for Containers Introduction Setting Up Web App for Containers Provider Configuration Web App for Containers Configuration The “Terraform Plan” Command The Terraform State File Deploying Web App for Containers Deploying the Code Terraform Output Creating an Output File Using a Git Ignore File with Terraform Using the Global Git Ignore File Cleaning Up Our Deployment Managing Web App for Containers Scaling Backing Up Web Apps Customizing Deployment Variable Interpolation Securing Web App for Containers HTTPS Private Endpoints Configuring Terraform for a Private Endpoint Disabling Public Access to the Web App Summary Chapter 3: Azure Container Registry Introduction Key Features of Azure Container Images Setting Up the Azure Container Registry Terraform Configuration Outputting Sensitive Information Deploying the Azure Container Registry Adding Tags Noticing the Output Building, Pushing, and Running Container Images with ASR Tasks Pulling an Image from ACR ACR Pricing Tiers Managing the Azure Container Registry ACR Tasks Running Azure CLI Commands with Terraform Terraform Null Resource Securing ACR Terraform Data Sources Securing Our ACR Configuration ACR Georeplication Using ACR with Azure Web App for Containers Using a Terraform Variables File Configuring Azure Web App with ACR Passing Variables Using “Terraform Apply” Checking the Logs Summary Chapter 4: Azure Container Instances Introduction Key Benefits of ACI Use Cases Deploying Azure Container Instances Full Code Deploying Multiple ACI Containers Using Azure Container Instances with Azure Container Registry The “Variables.tf” File The “Main.tf” File Applying the Code Mounting a Data Volume to an ACI Container Storage Account Azure File Share Mounting Data Volume to the Container The Complete Code Managing Azure Container Instances Connecting to a Running ACI Container Using Azure CLI to Run Commands inside ACI Viewing ACI Logs Using Azure CLI to View Logs Viewing Diagnostic Information Reviewing Diagnostic Events Enabling Advanced Log Collection Configuring Azure Log Analytics The Log Analytics Resource Block Completing the Configuration Code Viewing the Logs Stopping, Starting, and Restarting ACI Containers with Azure CLI Stopping the Container Group Starting the Container Group Restarting the Container Group Liveness and Readiness Probes Liveness Probes Readiness Probe Summary Chapter 5: Azure Kubernetes Service Introduction About Kubernetes Kubernetes Components Kubernetes Master Kubernetes Nodes Kubernetes Add-Ons Getting Started with AKS Deploying the AKS Cluster Connecting to AKS Using the Azure Command-Line Interface Deploying an Application to the AKS Cluster The “Deployment.yaml” File Checking the Deployment Status Deleting the Deployment Scaling the Application Enabling Autoscaling Connecting the AKS Cluster to the Azure Container Registry Using the ACR Container Image with AKS AKS Volumes Creating a Storage Class Creating a Volume Claim Configuring a Pod to Use a Persistent Volume Upgrading an AKS Cluster Autoupgrading the AKS Cluster Terraform Remote State Configuring the Remote State Adding Backend Configuration State Locking Exporting Azure Resources to Terraform Summary Chapter 6: Azure DevOps and Container Service Introduction Azure DevOps Services Setting Up Azure DevOps Creating an Azure DevOps Organization Creating a Project Creating a Personal Access Token Creating a Repository Using Terraform with Azure DevOps Installing Terraform Task Azure Pipelines Creating an Azure Container Registry ACR.TF AZURE-PIPELINES.YML Creating an Azure Pipeline Reviewing the Pipeline Building and Pushing a Docker Image to ACR with Azure Pipelines Using Terraform Destroy with Azure Pipelines The AzAPI Provider Deploying an ACR Using the AzAPI Provider Full Code Managing Secrets in Azure Key Vault and Azure DevOps Deploying Azure Key Vault Using Terraform Full Terraform Code Creating a Secret in Azure Key Vault Connecting Azure Key Vault to Azure Pipelines Accessing Key Vault Secrets from a YAML Pipeline Accessing Secrets from an Azure Pipeline Summary Chapter 7: Azure Compliance and Security Introduction Defender for Cloud Setting Up Azure with Defender for Containers Full Configuration Code Checking the Deployment Securing IaC Code with Defender for DevOps Installing Extensions Connecting the Azure DevOps Organization to Defender for DevOps Enabling the Plan Scanning a Terraform Pipeline for Vulnerabilities Summary Index Master the skills needed to deploy container services on Microsoft Azure using Terraform. This book will take you through the entire process of designing, deploying, and managing container services such as Azure Kubernetes Service (AKS), Azure Container Instances (ACI), Azure Container Registry (ACR), and Azure Web App for Containers. In this fully updated second edition, Author Shimon Ifrah demonstrates how to use Terraform, PowerShell and Azure CLI to provision and manage container services in Azure. As you’ll be using Terraform as the main tool for deployment, a basic knowledge of Terraform is a prerequisite. In addition, you will see how Azure DevOps services can be used to deploy infrastructure and container services with Terraform using Azure Pipelines without using the Azure Portal. The book concludes with a tutorial on how to use Azure Defender for Cloud to safeguard Terraform and infrastructure-as-code against malicious threats, so you can deliver secure applications. Upon completing this book, you will have a thorough understanding of how to use Terraform to deploy secure and efficient cloud applications on Azure. What You Will Learn Leverage Terraform for the deployment of containerized services Understand Azure DevOps Pipelines and Repos to deploy infrastructure and container services. Safeguard your infrastructure-as-code and detect vulnerabilities using Azure Defender for the cloud Who This Book Is For Azure administrators, developers, and architects who want to get started and learn more about containers and containerized applications on Microsoft Azure.