Azure Reference Terraform Architecture ​

Overview ​

This Terraform reference architecture provides a modular approach to deploying essential infrastructure components for Yellowbrick in Azure. The architecture is broken down into individual sections, each covering a critical component. This approach allows flexibility and customization, ensuring that the infrastructure can be adapted to the specific needs of your environment.

The following sections guide you through the step-by-step setup of key infrastructure elements, from networking and security to the provisioning of Azure Kubernetes Service (AKS) and Azure Container Registry (ACR). Each section provides both Terraform configuration and contextual details to ensure best practices in scalability, security, and maintainability.

Details ​

• Network Configuration
  Setup of the virtual network (VNet), subnets, route tables, and public IPs to provide a secure and scalable foundation for hosting Azure resources.

• Private DNS Zone Configuration
  Configuration of Azure Private DNS Zones for internal name resolution, linking to key services like Azure Kubernetes Service, Azure Container Registry, and Blob Storage.

• AKS Cluster and Node Pool Configuration
  Setup of the Azure Kubernetes Service (AKS) cluster, including user-assigned identities, RBAC roles, node pools, and networking configurations.

• Azure Firewall Configuration
  Configuration of Azure Firewall and firewall policies to ensure secure outbound and inbound traffic control.

• Terraform Provider and Variable Configuration
  Setup of Terraform providers, versions, and input variables for initializing and managing Azure resources.

• Azure Container Registry (ACR) and Private Endpoint Configuration
  Configuration of the Azure Container Registry (ACR) with a private endpoint to enable secure access to container images within the virtual network.