You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/operator-nexus/howto-cluster-managed-identity-user-provided-resources.md
+18-18Lines changed: 18 additions & 18 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -5,7 +5,7 @@ author: DanCrank
5
5
ms.author: danielcrank
6
6
ms.service: azure-operator-nexus
7
7
ms.topic: how-to
8
-
ms.date: 4/28/2025
8
+
ms.date: 5/23/2025
9
9
ms.custom: template-how-to
10
10
---
11
11
@@ -17,7 +17,7 @@ Managed identities are used with the following user resources provided on Operat
17
17
18
18
- Storage Accounts used for the output of Bare Metal run-\* commands.
19
19
- Key Vaults used for credential rotation.
20
-
- Log Analytics Workspaces used to capture some metrics.
20
+
- Log Analytics Workspaces (LAW) used to capture some metrics.
21
21
22
22
To learn more about managed identities in Azure, see [Managed identities for Azure resources](/entra/identity/managed-identities-azure-resources/overview). Operator Nexus Clusters support multiple User Assigned Managed Identities (UAMI) or one system assigned managed identity (SAMI).
23
23
@@ -31,7 +31,7 @@ Once added, the Identity can only be removed via the API call at this time. For
31
31
- Install the latest version of the [appropriate Azure CLI extensions](./howto-install-cli-extensions.md).
32
32
33
33
> [!NOTE]
34
-
> The managed identity functionality for Log Analytics Workspace and Key Vault exists with the 2024-10-01-preview API and will be available with the 2025-02-01 GA API.
34
+
> The managed identity functionality for Log Analytics Workspace (LAW) and Key Vault exists with the 2024-10-01-preview API and will be available with the 2025-02-01 GA API.
35
35
36
36
## Operator Nexus Clusters with User Assigned Managed Identities (UAMI)
37
37
@@ -40,7 +40,7 @@ It's a best practice to first define all of the user provided resources (Storage
40
40
The impacts of not configuring these resources by deployment time for a new Cluster are as follows:
41
41
42
42
-_Storage Account:_ run-\* command outputs fail to be written to the Storage Account.
43
-
-_LAW:_ Cluster deployment fails as the LAW is required to install software extensions during deployment.
43
+
-_LAW:_ Cluster deployment fails as the LAW (Log Analytics Workplace) is required to install software extensions during deployment.
44
44
-_Key Vault:_ Credential rotations fail as there's a check to ensure write access to the user provided Key Vault before performing credential rotation.
45
45
46
46
Updating the Cluster can be done at any time. Changing the LAW settings might cause a brief disruption in sending metrics to the LAW as the extensions which use the LAW might need to be reinstalled.
_Example 3:_ Update a Cluster that already has a SAMI and add a UAMI. The SAMI is retained. Then assign the UAMI to the log analytics output settings (LAW).
208
208
209
209
> [!CAUTION]
210
-
> Changing the LAW settings might cause a brief disruption in sending metrics to the LAW as the extensions which use the LAW might need to be reinstalled.
210
+
> Changing the LAW settings will cause a brief disruption in sending metrics to the LAW as the extensions which use the LAW might need to be reinstalled.
_Example 2:_ Add or update the log analytics output settings (LAW) for a Cluster.
398
398
399
399
> [!CAUTION]
400
-
> Changing the LAW settings might cause a brief disruption in sending metrics to the LAW as the extensions which use the LAW might need to be reinstalled.
400
+
> Changing the LAW settings will cause a brief disruption in sending metrics to the LAW as the extensions which use the LAW need to be reinstalled.
401
401
402
402
```azurecli-interactive
403
403
az networkcloud cluster update --name "clusterName" --resource-group "resourceGroupName" \
@@ -446,9 +446,9 @@ Note, `<APIVersion>` is the API version 2024-07-01 or newer.
446
446
447
447
```azurecli
448
448
{
449
-
"identity": {
449
+
"identity": {
450
450
"type": "SystemAssigned"
451
-
}
451
+
}
452
452
}
453
453
```
454
454
@@ -462,12 +462,12 @@ Note, `<APIVersion>` is the API version 2024-07-01 or newer.
0 commit comments