-
Notifications
You must be signed in to change notification settings - Fork 183
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Remove failure analysis and apply code cleanup #8153
Conversation
$output = Invoke "az role assignment create --assignee '$azAdGroupId' --role 'Storage Queue Data Contributor' --scope '$scope' --output none" | ||
|
||
if ($LASTEXITCODE -ne 0) { | ||
Write-Output $output |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I'm ok with this but is there a reason you didn't put the role assignments into the bicep templates?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The storage assignments are only needed when a dev is running the service locally and connecting to live resources. This doesn't need to be persistent access
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Also, in the pipeline, the deployment principal doesn't have permission to query Entra. We'd need to hard code the group's object id into the parameters and that didn't seem correct.
/check-enforcer override |
No description provided.