This repository contains a simple Azure template and configuration instructions which can be used to prepare an Azure account to install and demo a CloudShell Azure deployment. The deployment architecture is intended for demo/POC purposes and is not suitable for production environments.
To prepare an Azure environment for a CloudShell demo, first deploy the basic template by clicking the button below, then follow the instructions in this file to configure the required permissions for the CloudShell application.
Click the button below to deploy this template to your Azure account:
The following diagram describes the deployment topology.
As seen in the above diagram this template will create the following elements in Azure:
- CloudShell Management VNET
- CloudShell Management Subnet
- CloudShell Management Storage
- CloudShell Management Resource Group
- CloudShell Management Security Group
- Windows VM (default DS4_v2) for the following products (installed separately): CloudShell Portal, Quali server (including Execution Server and CloudShell DB)
- Linux VM (default DS2_v2) for the following product: QualiX
- CloudShell Sandboxes VNET
- Peering between the CloudShell Sandboxes VNET and the CloudShell Management VNET
Note that additional VMs may be dynamically allocated for each sandbox.
CloudShell Apps communicate with Azure using the Azure API. However, to enable the two platforms to work with each other, you need to add a web application that has permissions to use the Azure API.
During the Azure configuration process you'll obtain an application ID and a secret key which, along with your subscription ID and tenant ID you'll need to configure CloudShelll. Please pay attention in the steps below to the instructions regarding these important values.
Follow the instructions below to grant CloudShell access to your Azure cloud account.
-
Login to Azure Portal with your Administrator permissions.
-
Open Azure's Cloud Shell by clicking on the header button on the top right corner
If it's your first time using this feature, follow Azure's instructions to create a storage account. -
Make sure that the shell is opened in Bash mode.
-
Copy the following shell commands, and paste into Azure's shell and press Enter.
This script will add an Azure AD application, delegate Azure API permissions to the application and configure the web application as Contributor.
curl https://raw.githubusercontent.com/qualisystems/Azure-POC-Template/api_setup_script/api_setup.sh > cloudshell.sh &&
chmod +x cloudshell.sh &&
./cloudshell.sh
-
The script should start running, this may take a couple of minutes, please wait until it completes.
-
Copy and store the Applicate ID, Application Secret, Tenant ID and Subscription ID somewhere you'll remember and continue to the next step.
Please contact a Quali representative to continue the installation process.