Create SSL certificate and bind domain for Azure web application:
-
Create web SSL certificate for certificate taken from key vault SSL certificate (
kv-id
,kv-secret-name
) -
Create domain (
domain
) for app service (app-service-name
) and certificate (thumbprint
). Thumbprint should be the thumbprint of the certificate created by first step.
- Az cli
$ nano config.pl6
{
domain => "app.domain.foo",
thumbprint => "ABC010101H0A....",
az-res-group => "my-az-grp",
kv-id => "my-kv-storage",
kv-secret-name => "production-cert",
app-service => "app"
}
$ sparrowdo --git=https://github.com/melezhik/azure-web-cert.git --local_mode
Azure resource group
SSL certificate thumbprint
Domain name
Key vault identification
Key vault secret name
Azure application service name
This mode is applied by default. ARM templates are generated, validated and executed.
You can choose options, read next two sections.
In this mode ARM templates are generated, but not executed.
Set config to dry-run
:
$ cat config.pl6
{
mode => 'dry-run',
# Other params
}
In this mode ARM templates are generated, validated but not executed.
Set config to validate
:
$ cat config.pl6
{
mode => 'validate',
# Other params
}
$ cat config.pl
{
skip-cert-crt => True
# Other params
}
$ cat config.pl
{
check-ssl => True
# Other params
}
Alexey Melezhik