Epic: AVD Full Automation Build-Out

[kristopherjturner]

Epic: AVD Full Automation Build-Out (Re-Baselined)

This epic governs end-to-end AVD automation on Azure Local with explicit contract boundaries, parity tracking, and evidence-gated closure.

Scope Boundaries

• Control plane: Azure resources (host pool, app group, workspace, diagnostics, identity integrations).
• Session host plane: Azure Local VM lifecycle, domain join, registration, post-configuration.
• Tooling model: Bicep is currently the strongest canonical path; other tools must converge to equivalent behavior or explicitly document delegated differences.

Contract Modes

• Strict direct: tool reads config/variables.yml directly.
• Derived: tool-specific parameters are generated from canonical config.
• Transitional: tool-native parameter file accepted temporarily until bridge is implemented.

Hard Close Gate (Mandatory)

No child issue can close without all of:

1. Contract evidence: exact input contract and validation behavior documented.
2. Parity evidence: direct vs delegated behavior declared and tested.
3. Repro evidence: command transcript + outputs + referenced files/paths.
4. Dependency evidence: blocking cross-repo issues resolved or explicitly waived.

Child Workstream

• Sub-Task 1: Config & Schema Expansion #10 — Config & schema expansion
• Sub-Task 2: PowerShell Automation Scripts #12 — PowerShell automation scripts
• Sub-Task 3: Terraform + Azure Verified Modules #14 — Terraform + AVM
• Sub-Task 4: Ansible End-to-End Playbooks #16 — Ansible end-to-end playbooks
• Sub-Task 5: Bicep + Azure Verified Modules #18 — Bicep + AVM
• Sub-Task 6: ARM Templates (from Bicep) #21 — ARM templates
• Sub-Task 7: Monitoring, Defender & Diagnostics #24 — Monitoring, Defender & diagnostics
• Sub-Task 8: Identity & RBAC Automation #26 — Identity & RBAC automation
• Sub-Task 9: Image Management & FSLogix Configuration #28 — Image management & FSLogix configuration
• Sub-Task 10: Documentation + Draw.io Diagrams #30 — Documentation + diagrams
• Sub-Task 11: CI/CD Pipelines #32 — CI/CD pipelines
• Sub-Task 12: End-to-End Validation Matrix #34 — End-to-end validation matrix

Cross-Repo Dependencies

• SOFS-FSLogix epic/children (profile storage and integration dependencies)
• Toolkit variable registry and IaC maturity tracking

References

• Audit source: temp2.md

[kristopherjturner]

Epic complete — all 12 child issues closed. Documentation plan (temp2-plans.md) fully implemented via PR #43 on branch feature/epic-8-completion.

Closed children:

• Sub-Task 1: Config & Schema Expansion #10 Config & Schema ✓
• Sub-Task 2: PowerShell Automation Scripts #12 PowerShell Automation ✓
• Sub-Task 3: Terraform + Azure Verified Modules #14 Terraform + AVM ✓
• Sub-Task 4: Ansible End-to-End Playbooks #16 Ansible Playbooks ✓
• Sub-Task 5: Bicep + Azure Verified Modules #18 Bicep + AVM ✓
• Sub-Task 6: ARM Templates (from Bicep) #21 ARM Templates ✓
• Sub-Task 7: Monitoring, Defender & Diagnostics #24 Monitoring, Defender & Diagnostics ✓
• Sub-Task 8: Identity & RBAC Automation #26 Identity & RBAC ✓
• Sub-Task 9: Image Management & FSLogix Configuration #28 Image & FSLogix ✓
• Sub-Task 10: Documentation + Draw.io Diagrams #30 Documentation + Diagrams ✓
• Sub-Task 11: CI/CD Pipelines #32 CI/CD Pipelines ✓
• Sub-Task 12: End-to-End Validation Matrix #34 Validation Matrix ✓

Deliverables: deep-design, FSLogix integration, monitoring queries, cost management, Defender hardening, RBAC reference, RDApps guide, host-pool options, draw.io diagrams with PNG exports, mkdocs navigation, cross-links, and validation checklist.