Sample Project

'use strict';

const express = require('express');

// Constants
const PORT = 80;
const HOST = '0.0.0.0';

// App
const app = express();
app.get('/', (req, res) => {
  res.send('Hello from ' + process.env.PODNAME);
});

app.listen(PORT, HOST);
console.log(`Running on https://${HOST}:${PORT}`);

FROM node:carbon
WORKDIR /app
COPY package*.json ./
RUN npm install
COPY src /app
EXPOSE 80
CMD [ "node", "index.js" ]

apiVersion: apps/v1
kind: Deployment
metadata:
  name: nodejs-front
spec:
  replicas: 2
  selector:
    matchLabels:
      app: nodejs-front
  template:
    metadata:
      labels:
        app: nodejs-front
    spec:
      containers:
      - name: nodejs-front
        image: jacregistry1.azurecr.io/aksdevops-nodejs:#{Build.BuildId}#
        ports:
        - containerPort: 80
        env:
          - name: PODNAME
            valueFrom:
              fieldRef:
                fieldPath: metadata.name
      imagePullSecrets:
      - name: registrysecret
---
apiVersion: v1
kind: Service
metadata:
  name: nodejs-front
spec:
  type: LoadBalancer
  ports:
  - port: 80
  selector:
    app: nodejs-front

Build Pipeline

npm install

Replace tokens in Yaml

Build an image

Push an image

Copy Yaml

Publish Artifact

Release Pipeline

{
  "HostConfig": {
    "PortBindings": {
      "5000/tcp": [
        {
          "HostPort": "8085"
        }
      ]
    }
  },
  "Cmd": [
      "Eula=accept",
      "Billing=https://westus.api.cognitive.microsoft.com/text/analytics/v2.0",
      "ApiKey=2bae6d626a3c44cf9e86dec697498611"
  ]
}

1. Sign in to the Azure portal to which the Azure stack is registered.
2. Select Azure Active Directory > App registrations > New application registration.
3. Provide a name and URL for the application. Select either Web app / API or Native for the type of application you want to create. After setting the values, select Create.

1. In the Azure stack tenant portal, navigate to the subscription page, select Access Control(IAM) tab.
2. Select Add, select contributor role, select the application which is just created above. If the application is not listed, use the application id to search shown below.

grant_type=client_credentials
&client_id=<the application id retrieved in the first step>
&client_secret=<the application key retrieved in the first step>
&resource=<the resource url just retrieved>
&scope=openid

        private static Task ResetCallback(MethodRequest methodRequest, object userContext)
        {
            var data = Encoding.UTF8.GetString(methodRequest.Data);
            Console.Write(data);
            return Task.FromResult(new MethodResponse(200));
        }
        private static void Main(string[] args)
        {
            Console.WriteLine("IoT Hub Quickstarts #1 - Simulated device. Ctrl-C to exit.\n");

            // Connect to the IoT hub using the MQTT protocol
            s_deviceClient = DeviceClient.CreateFromConnectionString(s_connectionString, TransportType.Amqp);
            s_deviceClient.SetMethodHandlerAsync("reset", ResetCallback, null).Wait();
            while (true)
            {
                // other job        
            }

            Console.ReadLine();
        }

SELECT  
    'reset' AS command 
INTO 
   alert 
FROM 
   temperature TIMESTAMP BY timeCreated 
GROUP BY TumblingWindow(second,30) 
HAVING Avg(machine.temperature) > 70

FROM microsoft/dotnet:2.1-sdk AS build-env
WORKDIR /app

COPY *.csproj ./
RUN dotnet restore

COPY . ./
RUN dotnet publish -c Release -o out

FROM microsoft/dotnet:2.1-runtime
WORKDIR /app
COPY --from=build-env /app/out ./

RUN useradd -ms /bin/bash moduleuser
USER moduleuser

ENTRYPOINT ["dotnet", "mycustommodule.dll"]

moduleClient.InvokeMethodAsync(message.ConnectionDeviceId, new MethodRequest("reset", Encoding.ASCII.GetBytes(res)));

{
  "routes": {
    "downstreamdevice2asa": "FROM /messages/* WHERE NOT IS_DEFINED($connectionModuleId) INTO BrokeredEndpoint(\"/modules/asajob/inputs/temperature\")",
    "asa2custommodule": "FROM /messages/modules/asajob/outputs/* INTO BrokeredEndpoint(\"/modules/custommodule/inputs/input1\")",
    "ToIoTHub": "FROM /messages/modules/custommodule/outputs/output1 INTO $upstream"
   }
}

Import-Module .\Connect\AzureStack.Connect.psm1

# For Azure Stack development kit, this value is set to https://adminmanagement.local.azurestack.external. To get this value for Azure Stack integrated systems, contact your service provider.
$ArmEndpoint = "https://adminmanagement.local.azurestack.external"

# Register an AzureRM environment that targets your Azure Stack instance
Add-AzureRMEnvironment `
    -Name "AzureStackAdmin" `
    -ArmEndpoint $ArmEndpoint

# Get the Active Directory tenantId that is used to deploy Azure Stack     
$TenantID = Get-AzsDirectoryTenantId `
    -ADFS `
    -EnvironmentName "AzureStackAdmin"

# Sign in to your environment
Add-AzureRmAccount `
    -EnvironmentName "AzureStackAdmin" `
    -TenantId $TenantID

"storageProfile": {
          "imageReference": {
            "publisher": "[parameters('imagePublisher')]",
            "offer": "[parameters('imageOffer')]",
            "sku": "[parameters('imageSku')]",
            "version": "latest"
          },
          "osDisk": {
            "name": "osdisk",
            "vhd": {
              "uri": "[concat(reference(concat('Microsoft.Storage/storageAccounts/', variables('storageAccountName')), providers('Microsoft.Storage', 'storageAccounts').apiVersions[0]).primaryEndpoints.blob, variables('vmStorageAccountContainerName'),'/', variables('OSDiskName'), '.vhd')]"
            },
            "caching": "ReadWrite",
            "createOption": "FromImage"
          }
        },

{
  "HostConfig": {
    "PortBindings": {
      "80/tcp": [
        {
          "HostPort": "8085"
        }
      ]
    }
  }
}

Generate Let's Encrypt Certificate

git clone https://github.com/letsencrypt/letsencrypt
cd letsencrypt
./letsencrypt-auto certonly

Setup SSL Offloading in Nginx

server {
    listen 80;
    server_name jacjenkins.centralus.cloudapp.azure.com;
    error_page 403 /jenkins-on-azure;
    location / {
        proxy_set_header        Host $host:$server_port;
        proxy_set_header        X-Real-IP $remote_addr;
        proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header        X-Forwarded-Proto $scheme;


        # Fix the “It appears that your reverse proxy set up is broken" error.
        proxy_pass          https://localhost:8080;
        proxy_redirect      https://localhost:8080 https://customname.centralus.cloudapp.azure.com;
        proxy_read_timeout  90;
    }
    location /cli {
        rewrite ^ /jenkins-on-azure permanent;
    }

    location ~ /login* {
        rewrite ^ /jenkins-on-azure permanent;
    }
    location /jenkins-on-azure {
      alias /usr/share/nginx/azure;
    }
}

server {
    listen 443 ssl;
    server_name customdomain;
    ssl_certificate /etc/letsencrypt/live/customdomain/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/customdomain/privkey.pem;
    location / {
        proxy_set_header        Host $host:$server_port;
        proxy_set_header        X-Real-IP $remote_addr;
        proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header        X-Forwarded-Proto $scheme;


        # Fix the “It appears that your reverse proxy set up is broken" error.
        proxy_pass          https://localhost:8080;
        proxy_read_timeout  90;
    }
}

protected string BuildRedirectUri(string targetPath)
=> Request.Scheme + "://" + Request.Host + OriginalPathBase + targetPath;

public static class MyOAuthExtensions
{
        public static AuthenticationBuilder AddMyOAuth(this AuthenticationBuilder builder, string authenticationScheme, Action configureOptions)
            => builder.AddOAuth<OAuthOptions, MyOAuthHandler>(authenticationScheme, configureOptions);
}


public class MyOAuthHandler : OAuthHandler where TOptions : OAuthOptions, new()
{
        public MyOAuthHandler(IOptionsMonitor options, ILoggerFactory logger, UrlEncoder encoder, ISystemClock clock)
            : base(options, logger, encoder, clock)
        { }

        // Copy from https://github.com/aspnet/Security/blob/dev/src/Microsoft.AspNetCore.Authentication.OAuth/OAuthHandler.cs
        protected override async Task HandleChallengeAsync(AuthenticationProperties properties)
        {
            if (string.IsNullOrEmpty(properties.RedirectUri))
            {
                properties.RedirectUri = CurrentUri;
            }

            // OAuth2 10.12 CSRF
            GenerateCorrelationId(properties);

            var authorizationEndpoint = BuildChallengeUrl(properties, BuildRedirectUri(Options.CallbackPath));
            var redirectContext = new RedirectContext(
                Context, Scheme, Options,
                properties, authorizationEndpoint);
            await Events.RedirectToAuthorizationEndpoint(redirectContext);
        }

        protected new string BuildRedirectUri(string targetPath)
        {
            var schema = Request.Headers["X-Forwarded-Proto"].Count > 0 ? Request.Headers["X-Forwarded-Proto"][0] : Request.Scheme;
            var host = = Request.Headers["X-Forwarded-Host"].Count > 0 ? Request.Headers["X-Forwarded-Host"][0] : Request.Host;
            return schema + "://" + host + OriginalPathBase + targetPath;         
        }
}

- name: Create Azure VM
  hosts: localhost
  connection: local
  tasks:
  - name: Create VM
    azure_rm_virtualmachine:
      resource_group: myResourceGroup
      name: myVM
      vm_size: Standard_DS1_v2
      admin_username: jacky
      admin_password: changeit
      image:
        offer: CentOS
        publisher: OpenLogic
        sku: '7.3'
        version: latest

• azure_rm_acs - Manage an Azure Container Service Instance (ACS).
• azure_rm_availabilityset - Manage Azure availability set.
• azure_rm_availabilityset_facts - Get availability set facts.
• azure_rm_deployment - Create or destroy Azure Resource Manager template deployments
• azure_rm_dnsrecordset - Create, delete and update DNS record sets and records.
• azure_rm_dnsrecordset_facts - Get DNS Record Set facts.
• azure_rm_dnszone - Manage Azure DNS zones.
• azure_rm_dnszone_facts - Get DNS zone facts.
• azure_rm_functionapp - Manage Azure Function Apps
• azure_rm_functionapp_facts - Get Azure Function App facts
• azure_rm_loadbalancer - Manage Azure load balancers.
• azure_rm_loadbalancer_facts - Get load balancer facts.
• azure_rm_managed_disk - Manage Azure Manage Disks
• azure_rm_managed_disk_facts - Get managed disk facts.
• azure_rm_networkinterface - Manage Azure network interfaces.
• azure_rm_networkinterface_facts - Get network interface facts.
• azure_rm_publicipaddress - Manage Azure Public IP Addresses.
• azure_rm_publicipaddress_facts - Get public IP facts.
• azure_rm_resourcegroup - Manage Azure resource groups.
• azure_rm_resourcegroup_facts - Get resource group facts.
• azure_rm_securitygroup - Manage Azure network security groups.
• azure_rm_securitygroup_facts - Get security group facts.
• azure_rm_storageaccount - Manage Azure storage accounts.
• azure_rm_storageaccount_facts - Get storage account facts.
• azure_rm_storageblob - Manage blob containers and blob objects.
• azure_rm_subnet - Manage Azure subnets.
• azure_rm_virtualmachine - Manage Azure virtual machines.
• azure_rm_virtualmachine_extension - Managed Azure Virtual Machine extension
• azure_rm_virtualmachine_scaleset - Manage Azure virtual machine scale sets.
• azure_rm_virtualmachine_scaleset_facts - Get Virtual Machine Scale Set facts
• azure_rm_virtualmachineimage_facts - Get virtual machine image facts.
• azure_rm_virtualnetwork - Manage Azure virtual networks.
• azure_rm_virtualnetwork_facts - Get virtual network facts.