Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

TES-359: Fine tune role assignments #21

Merged
merged 1 commit into from
Nov 29, 2023
Merged

Commits on Nov 29, 2023

  1. TES-359: Role assignments overhaul

    The overhaul focuses on simplifying the module dependencies
    and responsibilities.
    
    - Vault and backup modules no longer depend on an identity
    - Added a new module rules dedicated for role assignments
      to anything required by the VMSS such as the key vault and
      backup storage account
    - Moved custom roles to the new roles module
    - Removed the storage account custom role in favor of directly
      providing the storage container in the user data script
    - Removed useless empty BLOB creation in the storage account
    - Optimized configurations role assignments for least privilege
    - Updated some comments/descriptions
    mihailradkov committed Nov 29, 2023
    Configuration menu
    Copy the full SHA
    4ba06d0 View commit details
    Browse the repository at this point in the history