Azure Plugin for Formae

Formae plugin for managing Azure resources.

Supported Resources

Resource Type	Description
AZURE::Resources::ResourceGroup	Resource groups
AZURE::Network::VirtualNetwork	Virtual networks
AZURE::Network::Subnet	Subnets
AZURE::Network::NetworkInterface	Network interfaces
AZURE::Network::NetworkSecurityGroup	Network security groups
AZURE::Network::PublicIPAddress	Public IP addresses
AZURE::Compute::VirtualMachine	Virtual machines
AZURE::Storage::StorageAccount	Storage accounts
AZURE::KeyVault::Vault	Key vaults
AZURE::ContainerService::ManagedCluster	AKS clusters
AZURE::ContainerService::MaintenanceConfiguration	AKS maintenance windows
AZURE::ContainerService::TrustedAccessRoleBinding	AKS trusted access for Azure services
AZURE::KubernetesConfiguration::Extension	Kubernetes extensions (Flux, Dapr, etc.)
AZURE::KubernetesConfiguration::FluxConfiguration	GitOps Flux v2 configurations
AZURE::ContainerRegistry::Registry	Container registries
AZURE::DBforPostgreSQL::FlexibleServer	PostgreSQL flexible servers
AZURE::DBforPostgreSQL::FirewallRule	PostgreSQL firewall rules
AZURE::DBforPostgreSQL::Database	PostgreSQL databases
AZURE::DBforPostgreSQL::Configuration	PostgreSQL server parameters
AZURE::ManagedIdentity::UserAssignedIdentity	Managed identities
AZURE::ManagedIdentity::FederatedIdentityCredential	Federated identity credentials (workload identity / OIDC)
AZURE::Authorization::RoleAssignment	Role assignments
AZURE::Network::LoadBalancer	Load balancers
AZURE::Network::PrivateDnsZone	Private DNS zones
AZURE::Network::PrivateDnsZoneVirtualNetworkLink	Private DNS zone-to-VNet links
AZURE::Network::PrivateEndpoint	Private endpoints
AZURE::Network::PrivateDnsZoneGroup	Private DNS zone group bindings
AZURE::Storage::BlobContainer	Blob containers
AZURE::Compute::Disk	Managed disks
AZURE::Compute::VirtualMachineScaleSet	Virtual machine scale sets

Configuration

Configure an Azure target in your Forma file:

new formae.Target {
    label = "my-azure-target"
    namespace = "AZURE"
    config = new Mapping {
        ["SubscriptionId"] = "your-subscription-id"
    }
}

Authentication uses DefaultAzureCredential which tries (in order):

• Environment variables (AZURE_CLIENT_ID, AZURE_CLIENT_SECRET, AZURE_TENANT_ID)
• Managed Identity
• Azure CLI (az login)

Examples

See examples/ for usage patterns:

• networking/ - VNet and subnet setup
• kubernetes/ - AKS cluster with ACR
• database/ - PostgreSQL flexible server
• virtual-machine/ - VM with networking
• subscription-bootstrap/ - Resource group, key vault, storage account

License

FSL-1.1-ALv2