feat: Add TF IaC + rephrase lab doc

- IaC extracted from https://github.com/damienaicheh/azure-workshop-setup
- Rephrased a few steps in the lab doc
- Extended the devcontainer for Terraform and C# Devkit

---------

Co-authored-by: Damien Aicheh <[email protected]>
Co-authored-by: Julien S <[email protected]>

Author: 3 people

.devcontainer/devcontainer.json

@@ -43,6 +43,7 @@
         "azurite.azurite",
         // Language related extensions
         "ms-dotnettools.csharp", 
+        "ms-dotnettools.csdevkit",
         "ms-python.python",
         // Mardown helpers : 
         "davidanson.vscode-markdownlint", 

.github/workflows/packages.yml

@@ -13,6 +13,9 @@ jobs:
     steps:
     - name: Checkout
       uses: actions/checkout@v3
+    
+    - name: Terraform
+      run:  cd terraform && zip -r ../terraform.zip .
 
     - name: .NET zip solutions
       run:  cd src/solutions/dotnet && zip -r ../../../dotnet-solution.zip .

.gitignore

@@ -5,3 +5,47 @@ __blobstorage__*
 __queuestorage__*
 __azurite_*
 *.bkp
+
+# Local Dotnet Dev Tools
+*.sln
+
+### Terraform ###
+# Local .terraform directories
+**/.terraform/*
+
+# .tfstate files
+*.tfstate
+*.tfstate.*
+
+# dev tf files
+tf
+plan.out
+
+# Crash log files
+crash.log
+crash.*.log
+
+# Exclude all .tfvars files, which are likely to contain sensitive data, such as
+# password, private keys, and other secrets. These should not be part of version
+# control as they are data points which are potentially sensitive and subject
+# to change depending on the environment.
+*.tfvars
+*.tfvars.json
+
+# Ignore override files as they are usually used to override resources locally and so
+# are not checked in
+override.tf
+override.tf.json
+*_override.tf
+*_override.tf.json
+
+# Include override files you do wish to add to version control using negated pattern
+# !example_override.tf
+
+# Include tfplan files to ignore the plan output of command: terraform plan -out=tfplan
+# example: *tfplan*
+
+# Ignore CLI configuration files
+.terraformrc
+terraform.rc
+.terraform.lock.hcl

docs/assets/serverless.drawio

@@ -53,7 +53,7 @@ The **FastTrack** required steps will be prefixed with a `🚀` label : These ar
 
 </div>
 
-## 🚀 Prerequisites
+## 🚀 Dev Environment Setup
 
 Before starting this lab, be sure to set your Azure environment :
 
@@ -132,7 +132,9 @@ The following tools and access will be necessary to run the lab in good conditio
 
 Once you have set up your local environment, you can clone the Hands-on-lab-serverless repo you just forked on your machine, and open the local folder in Visual Studio Code and head to the next step. 
 
-### 👉 All : Load the Workspace
+## 🚀 Visual Studio Code Setup
+
+### 👉 Load the Workspace
 
 Once your environment is ready, you will have to enter the Visual Studio Workspace to get all the tools ready.
 To do so, click the **burger menu** in the top left corner (visible only with codespace), **File** and then **Open Workspace from File...** 
@@ -149,7 +151,7 @@ To do so, click the **burger menu** in the top left corner (visible only with co
 
 Let's begin!
 
-### 🔑 All : Sign in to Azure
+### 🔑 Sign in to Azure
 
 <div class="task" data-title="Task">
 
@@ -197,6 +199,44 @@ az provider register --namespace 'Microsoft.Web'
 
 </details>
 
+### Deploy the infrastructure
+
+If you choose to do the FastTrack version, you must deploy the infrastructure before starting the lab. 
+
+First, you need to initialize the terraform infrastructure by running the following command:
+
+```bash
+cd terraform && terraform init
+```
+
+Then run the following command to deploy the infrastructure:
+
+```bash
+# Apply the deployment directly
+terraform apply -auto-approve
+```
+
+Now you can deploy the web app code into the Static Web App:
+
+```bash
+# Restore packages 
+cd ../src/webapp && npm install
+
+# Build the Web App
+npm run swa:build
+
+# Deploy the web app code into the Static Web App
+RESOURCE_GROUP_NAME="$(terraform output -raw resource_group_name)"
+STATIC_WEB_APP="$(terraform output -raw static_web_app_name)"
+
+npm run swa:deploy -- \
+  --resource-group $RESOURCE_GROUP_NAME \
+  --app-name $STATIC_WEB_APP \
+  --no-use-keychain
+```
+
+The deployment should take around 5 minutes to complete.
+
 ## Scenario
 
 The goal of the full lab is to upload an audio file to Azure and retrieve the transcripts back using a Web Application.
@@ -369,7 +409,7 @@ This command will create the Static Web App in Azure and will then prompt you fo
 
 You can also opt for building and deploying the web app from your machine without having to fork the project and give permissions to [AzureAppServiceCLI][app-service-cli] to access the code.
 
-First let's [download][webapp-zip] or clone the [project][github-hol] locally and go inside the `src/webapp` folder.
+First let's go inside the `src/webapp` folder.
 
 Now, you can follow these steps to create the static web app:
 
@@ -1391,7 +1431,7 @@ It's now time to connect the Azure Function App which stand for a small API to u
 <details>
 <summary>📚 Toggle solution</summary>
 
-First, go to the Azure Static Web App resource and inside `Configuration` in the `Application Settings` set the environment variable `FILE_UPLOADING_URL` to the same Azure Function `AudioUpload` endpoint you retrieved earlier in the lab above.
+First, go to the Azure Static Web App resource and inside `Configuration` in the `Application Settings` set the environment variable `FILE_UPLOADING_URL` to the same Azure Function `AudioUpload` endpoint you retrieved earlier in the lab above like `https://<functionapp>.azurewebsites.net/api/audioupload?code=<...>`.
 
 If your function expects a binary as an input then you will also need to set `FILE_UPLOADING_FORMAT` to `binary`
 
@@ -1744,15 +1784,15 @@ The next step is to use the newly created Web PubSub instance (`wps<environment>
 
 Add a new Cosmos DB-triggered function `CosmosToWebPubSub` to your Function App and use the following settings:
 
-| App setting                         | Description                       |
-|-------------------------------------|-----------------------------------|
-| WEB_PUBSUB_HUB_ID                   | Web PubSub hub name               |  
-| WEB_PUBSUB_CONNECTION_STRING        | Web PubSub hub connection string  |
+| App setting                         | Description                           |
+|-------------------------------------|---------------------------------------|
+| WEB_PUBSUB_HUB_ID                   | Web PubSub resource name              |  
+| WEB_PUBSUB_CONNECTION_STRING        | Web PubSub primary connection string  |
 
 You need to update the App settings of the Function App by adding the 2 new settings:
 
 - Set `WEB_PUBSUB_HUB_ID` with the name of the Web PubSub resource
-- Set `WEB_PUBSUB_CONNECTION_STRING` with one of the connection string in the `Keys` section of your Web PubSub resource on Azure.
+- Set `WEB_PUBSUB_CONNECTION_STRING` with the primary connection string in the `Keys` section of your Web PubSub resource on Azure.
 
 </details>
 
@@ -1882,7 +1922,7 @@ The last step is to consume the newly published transcriptions in the demo Web A
 
 > Set environment variables in your Static Web App for:
 > - The connection string of the Web PubSub with `WPS_CONNECTION_STRING`
-> - The Web PubSub name with `WPS_HUB_NAME`
+> - The Web PubSub resource name with `WPS_HUB_NAME`
 > - Ensure that new transcriptions are displayed in the Web App as you upload new audio files.
 
 </div>
@@ -1941,5 +1981,4 @@ To do so, click on `delete resource group` in the Azure Portal to delete all the
 ```bash
 # Delete the resource group with all the resources
 az group delete --name <resource-group>
-
 ```

docs/workshop.md

@@ -2,7 +2,7 @@
 ## files generated by popular Visual Studio add-ons.
 
 # Azure Functions localsettings file
-local.settings.json
+!local.settings.json
 
 # User-specific files
 *.suo

src/solutions/dotnet/.gitignore

@@ -0,0 +1,14 @@
+{
+    "IsEncrypted": false,
+    "Values": {
+        "FUNCTIONS_WORKER_RUNTIME": "dotnet-isolated",
+        "AzureWebJobsStorage": "UseDevelopmentStorage=true",
+        "STORAGE_ACCOUNT_CONTAINER": "",
+        "STORAGE_ACCOUNT_CONNECTION_STRING": "",
+        "WEB_PUBSUB_HUB_ID": "",
+        "WEB_PUBSUB_CONNECTION_STRING": "",
+        "COSMOS_DB_DATABASE_NAME": "",
+        "COSMOS_DB_CONTAINER_ID": "",
+        "COSMOS_DB_CONNECTION_STRING_SETTING": ""
+    }
+}

src/solutions/dotnet/local.settings.json

@@ -91,7 +91,9 @@ out
 bin
 obj
 appsettings.json
-local.settings.json
+
+# Azure Functions localsettings file
+!local.settings.json
 
 # Azurite artifacts
 __blobstorage__

src/solutions/nodejs/.gitignore

@@ -0,0 +1,14 @@
+{
+    "IsEncrypted": false,
+    "Values": {
+        "FUNCTIONS_WORKER_RUNTIME": "node",
+        "AzureWebJobsStorage": "UseDevelopmentStorage=true",
+        "STORAGE_ACCOUNT_CONTAINER": "",
+        "STORAGE_ACCOUNT_CONNECTION_STRING": "",
+        "WEB_PUBSUB_HUB_ID": "",
+        "WEB_PUBSUB_CONNECTION_STRING": "",
+        "COSMOS_DB_DATABASE_NAME": "",
+        "COSMOS_DB_CONTAINER_ID": "",
+        "COSMOS_DB_CONNECTION_STRING_SETTING": ""
+    }
+}

src/solutions/nodejs/local.settings.json

@@ -0,0 +1,6 @@
+resource "azurerm_application_insights" "this" {
+  name                = format("aai-%s", local.resource_suffix_kebabcase)
+  location            = azurerm_resource_group.this.location
+  resource_group_name = azurerm_resource_group.this.name
+  application_type    = "web"
+}

terraform/aai.tf

@@ -0,0 +1,10 @@
+resource "azurerm_cognitive_account" "this" {
+  name                = format("cog-%s", local.resource_suffix_kebabcase)
+  location            = azurerm_resource_group.this.location
+  resource_group_name = azurerm_resource_group.this.name
+  kind                = "SpeechServices"
+
+  sku_name = "S0"
+
+  tags = local.tags
+}

terraform/cognitive.tf

@@ -0,0 +1,58 @@
+resource "azurerm_cosmosdb_account" "this" {
+  name                = format("cosmos-%s", local.resource_suffix_kebabcase)
+  location            = azurerm_resource_group.this.location
+  resource_group_name = azurerm_resource_group.this.name
+  offer_type          = "Standard"
+  kind                = "GlobalDocumentDB"
+  tags                = local.tags
+
+  capabilities {
+    name = "EnableServerless"
+  }
+
+  consistency_policy {
+    consistency_level       = "Session"
+    max_interval_in_seconds = 5
+    max_staleness_prefix    = 100
+  }
+
+  geo_location {
+    location          = azurerm_resource_group.this.location
+    failover_priority = 0
+  }
+}
+
+resource "azurerm_cosmosdb_sql_database" "this" {
+  name                = local.cosmos_db_database_name
+  resource_group_name = azurerm_cosmosdb_account.this.resource_group_name
+  account_name        = azurerm_cosmosdb_account.this.name
+}
+
+resource "azurerm_cosmosdb_sql_container" "this" {
+  name                  = local.cosmos_db_container_name
+  resource_group_name   = azurerm_cosmosdb_account.this.resource_group_name
+  account_name          = azurerm_cosmosdb_account.this.name
+  database_name         = azurerm_cosmosdb_sql_database.this.name
+  partition_key_path    = "/id"
+  partition_key_version = 1
+
+  indexing_policy {
+    indexing_mode = "consistent"
+
+    included_path {
+      path = "/*"
+    }
+
+    included_path {
+      path = "/included/?"
+    }
+
+    excluded_path {
+      path = "/excluded/?"
+    }
+  }
+
+  unique_key {
+    paths = ["/idlong", "/idshort"]
+  }
+}

terraform/cosmos_db.tf

@@ -0,0 +1 @@
+data "azurerm_client_config" "current" {}

terraform/data.tf

@@ -0,0 +1,8 @@
+resource "azurerm_eventgrid_system_topic" "this" {
+  count                  = var.full_deployment ? 1 : 0
+  name                   = format("egst-audio-storage-%s", local.resource_suffix_kebabcase)
+  resource_group_name    = azurerm_resource_group.this.name
+  location               = azurerm_resource_group.this.location
+  source_arm_resource_id = azurerm_storage_account.this.id
+  topic_type             = "Microsoft.Storage.StorageAccounts"
+}

terraform/egst.tf

@@ -0,0 +1,35 @@
+resource "azurerm_linux_function_app" "func_cache" {
+  name                = format("func-%s", local.resource_suffix_kebabcase)
+  resource_group_name = azurerm_resource_group.this.name
+  location            = azurerm_resource_group.this.location
+
+  storage_account_name       = azurerm_storage_account.func.name
+  storage_account_access_key = azurerm_storage_account.func.primary_access_key
+  service_plan_id            = azurerm_service_plan.this.id
+
+  tags = local.tags
+
+  identity {
+    type = "SystemAssigned"
+  }
+
+  app_settings = {
+    FUNCTIONS_WORKER_RUNTIME              = "dotnet-isolated"
+    STORAGE_ACCOUNT_CONTAINER             = "audios"
+    STORAGE_ACCOUNT_CONNECTION_STRING     = azurerm_storage_account.this.primary_connection_string
+    APPINSIGHTS_INSTRUMENTATIONKEY        = azurerm_application_insights.this.instrumentation_key
+    APPLICATIONINSIGHTS_CONNECTION_STRING = azurerm_application_insights.this.connection_string
+    COSMOS_DB_DATABASE_NAME               = local.cosmos_db_database_name
+    COSMOS_DB_CONTAINER_ID                = local.cosmos_db_container_name
+    COSMOS_DB_CONNECTION_STRING_SETTING   = azurerm_cosmosdb_account.this.primary_sql_connection_string
+    WEB_PUBSUB_HUB_ID                     = azurerm_web_pubsub.this.name
+    WEB_PUBSUB_CONNECTION_STRING          = azurerm_web_pubsub.this.primary_connection_string
+  }
+
+  site_config {
+    application_stack {
+      dotnet_version              = "7.0"
+      use_dotnet_isolated_runtime = true
+    }
+  }
+}