You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/operator-nexus/how-to-credential-manager-key-vault.md
+4-4Lines changed: 4 additions & 4 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -24,9 +24,9 @@ Azure Operator Nexus utilizes secrets and certificates to manage component secur
24
24
25
25
## Configure Managed Identity for Cluster Manager
26
26
27
-
Beginning with the 2024-06-01publicpreview API, managed identities are used in the Cluster Manager for write access to rotated credentials to a key vault. The Cluster Manager identity can be system-assigned or [user-assigned](/entra/identity/managed-identities-azure-resources/how-manage-user-assigned-managed-identities), and can be managed directly via APIs or via CLI.
27
+
Beginning with the 2024-06-01-public-preview API, managed identities are used in the Cluster Manager for write access to rotated credentials to a key vault. The Cluster Manager identity can be system-assigned or [user-assigned](/entra/identity/managed-identities-azure-resources/how-manage-user-assigned-managed-identities), and can be managed directly via APIs or via CLI.
28
28
29
-
The examples below describe how to configure a managed identity for a Cluster Manager if one is not already configured.
29
+
These examples describe how to configure a managed identity for a Cluster Manager.
30
30
31
31
- Create or update Cluster Manager with system-assigned identity
32
32
```
@@ -93,7 +93,7 @@ User-assigned identity example:
93
93
> [!IMPORTANT]
94
94
> Use of App IDs for Customer Key Vault access is deprecated and support will be removed in a future version. It is recommended to use managed identity principals.
95
95
96
-
Instead of managed identities, the following application IDs may be granted access to the Key Vault.
96
+
Instead of managed identities, the following application IDs grant access to the Key Vault.
97
97
98
98
- Ensure that the *Microsoft.NetworkCloud* resource provider is registered with the customer subscription.
## Writing Credential Updates to a Customer Key Vault on Nexus Cluster
112
112
113
-
- Assign the *Operator Nexus Key Vault Writer Service Role*. Ensure that *Azure role-based access control* is selected as the permission model for the key vault on the *Access configuration* view. Then from the *Access control (IAM)* view, select to add a role assignment.
113
+
- Assign the *Operator Nexus Key Vault Writer Service Role*. Ensure that *Azure role-based access control* is selected as the permission model for the key vault on the *Access configuration* view. Then from the *Access Control* view, select to add a role assignment.
0 commit comments