Skip to content

Commit

Permalink
Merge pull request #177 from microsoftgraph/dkershaw10-dynamic-types-…
Browse files Browse the repository at this point in the history
…update

Quickstarts use dynamic types versioning
  • Loading branch information
dkershaw10 authored Sep 27, 2024
2 parents 2ceb4ef + 5049e2d commit 9e44ea4
Show file tree
Hide file tree
Showing 18 changed files with 36 additions and 12 deletions.
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
# Create client and resource apps

> **Note**: Minimum Bicep version required to deploy this quickstart template is [v0.29.45](https://github.com/Azure/bicep/releases/tag/v0.29.45).
> **Note**: Minimum Bicep version required to deploy this quickstart template is [v0.30.3](https://github.com/Azure/bicep/releases/tag/v0.30.3).
This template allows you to create a client application and a resource application, along with their service principals.

Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,9 @@
{
"experimentalFeaturesEnabled": {
"extensibility": true
},
// specify an alias for the version of the v1.0 dynamic types package you want to use
"extensions": {
"microsoftGraphV1_0": "br:mcr.microsoft.com/bicep/extensions/microsoftgraph/v1.0:0.1.8-preview"
}
}
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
extension microsoftGraph
extension microsoftGraphV1_0

@description('Id of the application role to add to the resource app')
param appRoleId string
Expand Down
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
# Create a client app with an X509 certificate from Key Vault as the credential

> **Note**: Minimum Bicep version required to deploy this quickstart template is [v0.29.45](https://github.com/Azure/bicep/releases/tag/v0.29.45).
> **Note**: Minimum Bicep version required to deploy this quickstart template is [v0.30.3](https://github.com/Azure/bicep/releases/tag/v0.30.3).
The template creates a Key Vault, through which the authorized managed identity can add an X509 certificate (if it doesn't exist) and get the certificate's public key (base64 encoded), along with the thumbprint and other metadata.
Finally the template creates the client application resource using the certificate public key as its credential. followed
Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,9 @@
{
"experimentalFeaturesEnabled": {
"extensibility": true
},
// specify an alias for the version of the v1.0 dynamic types package you want to use
"extensions": {
"microsoftGraphV1_0": "br:mcr.microsoft.com/bicep/extensions/microsoftgraph/v1.0:0.1.8-preview"
}
}
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
extension microsoftGraph
extension microsoftGraphV1_0

@description('Specifies the name of environment to run this deployment in.')
param shortEnvironmentName string
Expand Down
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
# Configure federated identity credential for GitHub Actions

> **Note1**: Minimum Bicep version required to deploy this quickstart template is [v0.29.45](https://github.com/Azure/bicep/releases/tag/v0.29.45).
> **Note1**: Minimum Bicep version required to deploy this quickstart template is [v0.30.3](https://github.com/Azure/bicep/releases/tag/v0.30.3).
> **Note2**: This template sample **only** configures the Microsoft Entra ID portion (to enable workload identity federation). Additional configuration steps are also required on the GitHub side, to ensure that the federation works end-to-end. See [Use GitHub Actions to connect to Azure](https://learn.microsoft.com/azure/developer/github/connect-from-azure?tabs=azure-cli%2Cwindows#use-the-azure-login-action-with-openid-connect), but skip the sections on "Create a Microsoft Entra application and service principal" and "Add federated credentials", as the following Bicep template replaces those sections.
Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,9 @@
{
"experimentalFeaturesEnabled": {
"extensibility": true
},
// specify an alias for the version of the v1.0 dynamic types package you want to use
"extensions": {
"microsoftGraphV1_0": "br:mcr.microsoft.com/bicep/extensions/microsoftgraph/v1.0:0.1.8-preview"
}
}
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
extension microsoftGraph
extension microsoftGraphV1_0

@description('Subject of the GitHub Actions workflow\'s federated identity credentials (FIC) that is checked before issuing an Entra ID access token to access Azure resources. GitHub Actions subject examples can be found in https://docs.github.com/actions/deployment/security-hardening-your-deployments/about-security-hardening-with-openid-connect#example-subject-claims')
param githubActionsFicSubject string
Expand Down
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
# Grant a client app access to a resource app

> **Note1**: Minimum Bicep version required to deploy this quickstart template is [v0.29.45](https://github.com/Azure/bicep/releases/tag/v0.29.45).
> **Note1**: Minimum Bicep version required to deploy this quickstart template is [v0.30.3](https://github.com/Azure/bicep/releases/tag/v0.30.3).
> **Note2**: This template depends on a successful deployment of [application-serviceprincipal-create-client-resource](../application-serviceprincipal-create-client-resource/)
Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,9 @@
{
"experimentalFeaturesEnabled": {
"extensibility": true
},
// specify an alias for the version of the v1.0 dynamic types package you want to use
"extensions": {
"microsoftGraphV1_0": "br:mcr.microsoft.com/bicep/extensions/microsoftgraph/v1.0:0.1.8-preview"
}
}
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
extension microsoftGraph
extension microsoftGraphV1_0

@description('Id of the application role to add to the resource app')
param appRoleId string
Expand Down
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
# Assign an Azure role to a security group

> **Note1**: Minimum Bicep version required to deploy this quickstart template is [v0.29.45](https://github.com/Azure/bicep/releases/tag/v0.29.45).
> **Note1**: Minimum Bicep version required to deploy this quickstart template is [v0.30.3](https://github.com/Azure/bicep/releases/tag/v0.30.3).
> **Note2**: This template depends on a successful deployment of [security-group-create-with-owners-and-members](../security-group-create-with-owners-and-members)
Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,9 @@
{
"experimentalFeaturesEnabled": {
"extensibility": true
},
// specify an alias for the version of the v1.0 dynamic types package you want to use
"extensions": {
"microsoftGraphV1_0": "br:mcr.microsoft.com/bicep/extensions/microsoftgraph/v1.0:0.1.8-preview"
}
}
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
extension microsoftGraph
extension microsoftGraphV1_0

@description('Specifies the Reader role definition ID used in the role assignment.')
param readerRoleDefinitionID string = 'acdd72a7-3385-48ef-bd42-f606fba81ae7'
Expand Down
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
# Create a group with members and owners

> **Note1**: Minimum Bicep version required to deploy this quickstart template is [v0.29.45](https://github.com/Azure/bicep/releases/tag/v0.29.45).
> **Note**: Minimum Bicep version required to deploy this quickstart template is [v0.30.3](https://github.com/Azure/bicep/releases/tag/v0.30.3).
> **Note2**: This template depends on a successful deployment of [application-serviceprincipal-create-client-resource](../application-serviceprincipal-create-client-resource/)
Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,9 @@
{
"experimentalFeaturesEnabled": {
"extensibility": true
},
// specify an alias for the version of the v1.0 dynamic types package you want to use
"extensions": {
"microsoftGraphV1_0": "br:mcr.microsoft.com/bicep/extensions/microsoftgraph/v1.0:0.1.8-preview"
}
}
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
extension microsoftGraph
extension microsoftGraphV1_0

@description('location of the resource group')
param location string = resourceGroup().location
Expand Down

0 comments on commit 9e44ea4

Please sign in to comment.