DevOps Training Session 8: Cloud - IAM
Hello btb from previous session, we meet some trouble for authentication so reach this session, i want show how i process some issue about IAM, how to get permission for VM and provisioning again for VM with customstring, so enjoy it –>
Image Not Showing
Possible Reasons
- The image file may be corrupted
- The server hosting the image is unavailable
- The image path is incorrect
- The image format is not supported
Learn More →
Step and resource for run goal with searching
Note: This functionallity is cost to much time to process with expectation so –> If you want to do what exactly you want, you need to give time to correct it, my script is just my opinion and will meet some trouble can guess
So on my opinion, i just put down some rule for connection my resource from azure by using user-managed identity so what we got
- We need create the user-managed-identity for first
- This require one need to stay in resource group and so you must to do it first or reference into the DOC for read more information
- After that, you need reach to next step on create rule or using the exist rule like
-
This rule used for read the Container registry, other resource we need to generate the authentication to connect into that kind
-
So the end we got to do somekind like assign this for target. In this situation, for easy case i assign this rule for Resource group for two reason
- First, the inheritance which the most of case, Resource group is the biggest but another is bigger than is Subcription but this kind is don't want give the rule for all kind can access my repo –> Trust zero for this resource group - quite easy
Image Not Showing
Possible Reasons
- The image file may be corrupted
- The server hosting the image is unavailable
- The image path is incorrect
- The image format is not supported
Learn More →
Image Not Showing
Possible Reasons
- The image file may be corrupted
- The server hosting the image is unavailable
- The image path is incorrect
- The image format is not supported
Learn More →
- Second, it easy to managed –> U can understand when you give it for this for one boundary –> Anything can remove and update easily
Image Not Showing
Possible Reasons
- The image file may be corrupted
- The server hosting the image is unavailable
- The image path is incorrect
- The image format is not supported
Learn More →
Custom script for VM
Question we meet on situation how to custom for startup data, when we bring up the VM we got service inside. Like Example
- So we want to execute this script on startup with cloudinit we need using this kinds and we need this Doc to understand what we need to do
- So after that we can add on some script with this kind like
So after that we got the service can create with terraform like what you want with shell script
Image Not Showing
Possible Reasons
- The image file may be corrupted
- The server hosting the image is unavailable
- The image path is incorrect
- The image format is not supported
Learn More →
Behind the scene
- Anything kind on that IAM can reffer that container, blob, … –> So this kind you can understand what we need to do on next step is create the VM
- Get the goal
Image Not Showing
Possible Reasons
- The image file may be corrupted
- The server hosting the image is unavailable
- The image path is incorrect
- The image format is not supported
Learn More →
LOL
Image Not Showing
Possible Reasons
- The image file may be corrupted
- The server hosting the image is unavailable
- The image path is incorrect
- The image format is not supported
Learn More →
Example:
Image Not Showing
Possible Reasons
- The image file may be corrupted
- The server hosting the image is unavailable
- The image path is incorrect
- The image format is not supported
Learn More →
References
Doc: azurerm_virtual_machine_extension
Azure virtual machine extensions and features
Azurerm virtual machine extension example
Custom script example
Grep with next line
Error retrieving Azure Storage Account
Custom Script Linux