Skip to content

Commit 4ce530c

Browse files
removed internal facing comment
1 parent 3b4c01c commit 4ce530c

File tree

1 file changed

+7
-7
lines changed

1 file changed

+7
-7
lines changed

articles/virtual-machines/linux/image-builder-troubleshoot.md

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -88,21 +88,21 @@ The template already exists.
8888

8989
If you submit an image configuration template and the submission fails, a failed template artifact still exists. Delete the failed template.
9090

91-
### Updating or resetting MSI on image templates
91+
### Reassigning MSI on image templates
9292

9393
#### Error
9494

9595
```text
96-
The assigned managed identity cannot be used. Please re-assign an identity. For more troubleshooting steps go to https://aka.ms/azvmimagebuilderts
96+
The assigned managed identity cannot be used. Please remove the existing one and re-assign a new identity. For more troubleshooting steps go to https://aka.ms/azvmimagebuilderts.
9797
```
9898

9999
#### Cause
100100

101101
There are cases where [Managed Service Identities (MSI)](/azure/virtual-machines/linux/image-builder-permissions-cli#create-a-user-assigned-managed-identity) assigned to the image template cannot be used:
102102

103-
1. MSI is deleted before the image template is deleted (custom rg scenario)
104-
1. MSI credentials URL is lost and therefore can't get credentials for the MSI
105-
1. Other cases where the assigned MSI doesn't work
103+
1. MSI is deleted before the image template is deleted ([staging resource group](/azure/virtual-machines/linux/image-builder-json?#properties-stagingresourcegroup) scenario)
104+
1. The Image Builder template uses a customer provided staging resource group
105+
1. The identity is deleted and attempted to recreate the identity with the same name, but without re-assigning the MSI. Though the resource ids are the same, the underlying service principal has been changed.
106106

107107

108108
#### Solution
@@ -112,13 +112,13 @@ Use Azure CLI to reset identity on the image template. Ensure you [update](/azur
112112
Remove the managed identity from the target image builder template
113113

114114
```azurecli-interactive
115-
az image bulider identity remove -g <template rg> -n <template name> -- user-assigned <identity resource id>
115+
az image builder identity remove -g <template resource group> -n <template name> --user-assigned <identity resource id>
116116
```
117117

118118
Re-assign identity to the target image builder template
119119

120120
```azurecli-interactive
121-
az image bulider identity assign -g <template rg> -n <template name> -- user-assigned <identity resource id>
121+
az image builder identity assign -g <template rg> -n <template name> --user-assigned <identity resource id>
122122
```
123123

124124
### The resource operation finished with a terminal provisioning state of "Failed"

0 commit comments

Comments
 (0)