azureprovider

Overview ¶

pkg/provider/azure/provider.go

Azure provider for Orkestra.

Handles the "azure" block in Katalog declarations. Uses the official Azure SDK for Go (azure-sdk-for-go v2 / azidentity).

Supported resource kinds:

blob        — Azure Blob Storage container (create, set metadata, delete)
servicebus  — Azure Service Bus namespace topic (create, delete) and subscription (create, delete)
sqldatabase — Azure SQL Database (create, update service tier, delete)

Installation:

go get github.com/Azure/azure-sdk-for-go/sdk/azidentity
go get github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/storage/armstorage
go get github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/servicebus/armservicebus
go get github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/sql/armsql

Registration:

p, err := azureprovider.NewFromAuth(ctx, auth)
registry.Register(p)

Auth keys (providers[].auth block):

subscriptionId — Azure subscription ID (required)
tenantId       — Azure tenant ID (required for service principal auth)
clientId       — Service principal / managed identity client ID
clientSecret   — Service principal client secret (omit to use managed identity)
resourceGroup  — Default resource group for all resources (can be overridden per declaration)

When clientSecret is absent, DefaultAzureCredential is used, which supports managed identity, CLI auth, and environment variables in order.

Katalog:

providers:
  - name: azure
    required: true
    auth:
      subscriptionId: "$AZURE_SUBSCRIPTION_ID"
      tenantId: "$AZURE_TENANT_ID"
      clientId: "$AZURE_CLIENT_ID"
      clientSecret: "$AZURE_CLIENT_SECRET"
      resourceGroup: "$AZURE_RESOURCE_GROUP"

operatorBox:
  providers:
    azure:
      - blob:
          storageAccount: "{{ .spec.storageAccount }}"
          container: "{{ .metadata.name }}"
          resourceGroup: "{{ .spec.resourceGroup }}"

      - servicebus:
          namespace: "{{ .spec.sbNamespace }}"
          topic: "{{ .metadata.name }}-events"
          subscription: "{{ .metadata.name }}-sub"
          resourceGroup: "{{ .spec.resourceGroup }}"

      - sqldatabase:
          server: "{{ .spec.sqlServer }}"
          name: "{{ .metadata.name }}"
          sku: Basic
          resourceGroup: "{{ .spec.resourceGroup }}"
          when:
            - field: spec.needsDatabase
              equals: "true"