Find out how to deploy Automations from our Github repository, and connect them to your Hyperglance VM
Before you can deploy automations you will need:
- Terraform CLI - Install instructions
- Azure CLI - Install instructions
- Func CLI - Install instructions
Azure role assignments
This deployment utilizes system assigned managed identities to limit the scope of the Azure function to the subscription it is deployed in.
To assign Azure roles to a managed identity, you must have:
- Microsoft.Authorization/roleAssignments/write permissions
Storage account permissions
The account under which Hyperglance run needs to be able to write to the Storage Account used by the automations. This may be achieved by granting Hyperglance the Storage Account Contributor built-in role.
Follow the pre-requisite steps above.
Connect the Azure CLI to the Azure account that you wish to deploy the function in and set the subscription to use: az login
Note: Guidance on authenticating to Azure can be found here
az account set --subscription <subscription name>
Clone our repo or download the zip
git clone https://github.com/hyperglance/azure-rule-automations.git
Navigate to the terraform deployment directory
Create a a file subscriptions.csv with the subscriptions you want to act on separated by a comma.
MySubscription, AnotherSubscriptionOfMine, ...
Deploy the stack:
Terraform will prompt for the region you wish to deploy to and for final confirmation.
Once complete, the storage account ID and will be returned:
Apply complete! Resources: 11 added, 0 changed, 0 destroyed.
func_command = "func azure functionapp publish hyperglance-automations-legible-buffalo"
storage_account_resource_id = "/subscriptions/<subscription ID>/resourceGroups/hyperglance-automations-legible-buffalo/providers/Microsoft.Storage/storageAccounts/rii5it09y343"
The storage account ID is required to configure automations in Hyperglance The func command is required to deploy the function code to the Azure function
Copy the storage account ID into the Hyperglance UI: Settings ➔ Automations ➔ Azure ➔ Storage Account Resource ID or visit this URL: https://your-hyperglance-ip/#/admin/automations
Deploy the function code to the function
Note: We're working on integrating this step into the Terraform deployment...
Change directory to the root of the repo and execute the func command generated by Terraform:
func azure functionapp publish hyperglance-automations-legible-buffalo
That's it - Automations are now enabled against this subscription!
- Within Hyperglance click on any rule or visit the Advanced Search page to start exploring automations features.