You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This guide describes the Azure Operator Service Manager (AOSM) private link (PL) feature for artifact stores hosted on Azure Operator Nexus. As part of the AOSM edge registry initiative, PL uses Azure private endpoints, and Azure private link service, to securely backhaul Nexus on-premise artifact store traffic. This traffic is never exposed to the internet, instead it exclusively traverses Microsoft's private network.
14
+
This guide describes the Azure Operator Service Manager (AOSM) private link (PL) feature for artifact stores hosted on Azure Operator Nexus. As part of the AOSM edge registry initiative, PL uses Azure private endpoints, and Azure private link service, to securely backhaul Nexus on-premise artifact store traffic. This traffic is never exposed to the internet, instead exclusively traversing Microsoft's private network.
15
15
16
16
## Introduction
17
17
This document provides a quick start guide to enable private link feature for AOSM artifact store using AOSM Publisher APIs.
18
18
19
19
### Required permissions
20
-
The operations required to link and manage a private endpoint with a Nexus fabric controller (NFC) requires the following non-default role privileges.
20
+
The operations required to link and manage a private endpoint with a Nexus fabric controller (NFC) requires the following nondefault role privileges.
21
21
22
22
#### Remove private endpoint
23
23
```
@@ -45,13 +45,13 @@ The operations required to link and manage a private endpoint with a Nexus fabri
45
45
> [!NOTE]
46
46
> As new NFC permissions are introduced, the recommended role privileges will be updated.
47
47
48
-
## Use AOSM APIs to setup private link
49
-
Before resources can be uploaded securely, the following sequence of operations establshes a PL connection to the artifact store.
48
+
## Use AOSM APIs to set up private link
49
+
Before resources can be uploaded securely, the following sequence of operations establishes a PL connection to the artifact store.
50
50
51
51
### Create publisher and artifact store
52
-
* Create a new publisher resource with identity type set to 'SystemAssigned'.
52
+
* Create a new publisher resource with identity type set to 'SystemAssigned.'
53
53
- If the publisher was already created without this property, use a reput operation to update.
54
-
* Use the new propery 'backingResourcePublicNetworkAcccess' to disable artifact store public access.
54
+
* Use the new property 'backingResourcePublicNetworkAcccess' to disable artifact store public access.
55
55
- The property is first added in the 2024-04-15 version.
56
56
- If the ArtifactResource was already created without this property, use a reput operation to update.
The following operations enable manual management of an artifact store once the PL is established.
95
95
96
96
### Manage private endpoint access
97
-
By default, when the artifact store is connected to the vnet, the user won't have permissions to the ACR, and the private endpoint will be in the pending state. The following Azure rest commands and payload enable a user to approve, reject and/or list these endpoint.
97
+
By default, when the artifact store is connected to the vnet, the user doesn't have permissions to the ACR, so the private endpoint winds up in a pending state. The following Azure rest commands and payload enable a user to approve, reject and/or list these endpoints.
98
98
99
99
> [!NOTE]
100
100
> In this workflow, the vnet is managed by the customer.
0 commit comments