# Cisco-FSCOA

**Repository Path**: mirrors_CiscoDevNet/Cisco-FSCOA

## Basic Information

- **Project Name**: Cisco-FSCOA
- **Description**: Cisco Full Stack Cloud Operations Automation
- **Primary Language**: Unknown
- **License**: Not specified
- **Default Branch**: main
- **Homepage**: None
- **GVP Project**: No

## Statistics

- **Stars**: 0
- **Forks**: 0
- **Created**: 2022-10-24
- **Last Updated**: 2026-02-15

## Categories & Tags

**Categories**: Uncategorized

**Tags**: None

## README

# Cisco-FSCOA
Cisco Full Stack Cloud Operations Automation

SD-WAN
This lab automates much of the SD-WAN cluster deployment into the Cloud Provider for MSPs and explains how to setup
the secure pipeline integrated with hashicorp vault and concourse, to deploy and configure an SD-WAN cluster in the cloud.

The underlying infrastructure is - Cloud Provider Account, self managed kubernetes cluster(kops works),
SD-WAN Images(all 3 personalities), vault and concourse helm install, integration with Cloud Provider. Many options available.

repo contact: sconrod@cisco.com, sherrilconrod@yahoo.com

Env Setup
If you do not have an existing CICD environment setup you can first set that up as follows:
1. Deploy KOPS kubernetes cluster to Cloud Provider & setup DNS with your domain(you can buy one from godaddy if you need one)
2. Deploy hashicorp vault helm chart, Configure Chart(update DNS etc in helm values)
3. Follow the steps at Concourse to setup the approle method of auth in vault and use the Cloud Provider docs to 
setup the CP with vault, for example, for AWS https://developer.hashicorp.com/vault/tutorials/cloud-ops/vault-auth-method-aws
4. Update Concourse Helm Values with approle and id ad well as DNS and deploy

Setup Group Access or AD/SSO or any SSO you like with Vault.
Deploy the pipeline
Verify the first pipeline with your custom params file (with your git ssh key) - this job checks that auth with all resources: git, dockerhub(public access),
cloud provider, vault etc. If green you can then instantiate your first pipeline run.

Deploys VPC and All Objects and Deploys SDWAN Images, Configures a high degree of SDWAN Connects and Configures up to the point of Certificate Installation.

More Specific Documentation is included in Repo 

![Alt text](https://github.com/CiscoDevNet/Cisco-FSCOA/blob/main/devops-basic-componentblock-arch.png)

![Alt text](https://github.com/CiscoDevNet/Cisco-FSCOA/blob/main/sample-cicd-pipeline.png)