Skip to content

Commit a7dc80b

Browse files
committed
Add line breaks before and after code samples
1 parent 44ab7c3 commit a7dc80b

File tree

1 file changed

+17
-0
lines changed

1 file changed

+17
-0
lines changed

articles/operator-nexus/how-to-credential-manager-key-vault.md

Lines changed: 17 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -35,6 +35,7 @@ These examples describe how to configure a managed identity for a Cluster Manage
3535
--fabric-controller-id "/subscriptions/subscriptionId/resourceGroups/resourceGroupName/providers/Microsoft.ManagedNetworkFabric/networkFabricControllers/fabricControllerName" \
3636
--managed-resource-group-configuration name="my-managed-rg" --tags key1="myvalue1" key2="myvalue2" --resource-group "resourceGroupName" --mi-system-assigned
3737
```
38+
<br/>
3839

3940
- Create or update Cluster Manager with user-assigned identity
4041
```
@@ -44,11 +45,13 @@ These examples describe how to configure a managed identity for a Cluster Manage
4445
--managed-resource-group-configuration name="my-managed-rg" --tags key1="myvalue1" key2="myvalue2" \
4546
--resource-group <Resource Group Name> --mi-user-assigned "/subscriptions/subscriptionId/resourceGroups/resourceGroupName/providers/Microsoft.ManagedIdentity/userAssignedIdentities/myUAI"
4647
```
48+
<br/>
4749

4850
- Add system-assigned identity to Cluster Manager
4951
```
5052
az networkcloud clustermanager update --name <Cluster Manager Name> --resource-group <Resource Group Name> --mi-system-assigned
5153
```
54+
<br/>
5255

5356
- Add user-assigned identity to Cluster Manager
5457
```
@@ -69,6 +72,7 @@ az networkcloud cluster update --ids /subscriptions/<subscription ID>/resourceGr
6972
# Show Customer Key Vault setting (secretArchive) on the Nexus cluster
7073
az networkcloud cluster show --ids /subscriptions/<subscription ID>/resourceGroups/<Resource Group Name>/providers/Microsoft.NetworkCloud/clusters/<Nexus Cluster Name> --query secretArchive
7174
```
75+
<br/>
7276

7377
For more help:
7478

@@ -85,6 +89,7 @@ Example:
8589
```console
8690
az networkcloud clustermanager show --ids /subscriptions/<Subscription ID>/resourceGroups/<Cluster Manager Resource Group Name>/providers/Microsoft.NetworkCloud/clusterManagers/<Cluster Manager Name>
8791
```
92+
<br/>
8893

8994
System-assigned identity example:
9095
```
@@ -94,6 +99,7 @@ System-assigned identity example:
9499
"type": "SystemAssigned"
95100
},
96101
```
102+
<br/>
97103

98104
User-assigned identity example:
99105
```
@@ -107,6 +113,7 @@ User-assigned identity example:
107113
}
108114
},
109115
```
116+
<br/>
110117

111118
Refer to [_Grant Managed Identity Access to a Key Vault for Credential Rotation_](#grant-managed-identity-access-to-a-key-vault-for-credential-rotation) to assign the appropriate role to the Managed Identity Principal ID.
112119

@@ -139,6 +146,7 @@ az networkcloud cluster create --name "<cluster-name>" \
139146
...
140147
--subscription "<subscription>"
141148
```
149+
<br/>
142150

143151
- Create Nexus Cluster with user-assigned identity to access Key Vault for rotated credentials.
144152
```azurecli-interactive
@@ -150,26 +158,30 @@ az networkcloud cluster create --name "<cluster-name>" \
150158
...
151159
--subscription "<subscription>"
152160
```
161+
<br/>
153162

154163
- Update existing Nexus Cluster with system-assigned identity to access Key Vault for rotated credentials.
155164
```azurecli-interactive
156165
az networkcloud cluster update --ids <cluster-resource-id> \
157166
--mi-system-assigned \
158167
--secret-archive-settings identity-type="SystemAssignedIdentity" vault-uri="https://<key vault name>.vault.azure.net/"
159168
```
169+
<br/>
160170

161171
- Update existing Nexus Cluster with user-assigned identity
162172
```azurecli-interactive
163173
az networkcloud cluster update --ids <cluster-resource-id> \
164174
--mi-user-assigned "<user-assigned-identity-resource-id>" \
165175
--secret-archive-settings identity-type="UserAssignedIdentity" identity-resource-id="<user-assigned-identity-resource-id>" vault-uri="https://<key vault name>.vault.azure.net/"
166176
```
177+
<br/>
167178

168179
For more help:
169180

170181
```azurecli-interactive
171182
az networkcloud cluster update --secret-archive-settings '??' --help
172183
```
184+
<br/>
173185

174186
### Get the Principal ID for the Cluster Managed Identity
175187

@@ -180,6 +192,7 @@ Example:
180192
```console
181193
az networkcloud cluster show --ids <cluster-resource-id>
182194
```
195+
<br/>
183196

184197
System-assigned identity example:
185198
```
@@ -189,6 +202,7 @@ System-assigned identity example:
189202
"type": "SystemAssigned"
190203
},
191204
```
205+
<br/>
192206

193207
User-assigned identity example:
194208
```
@@ -202,6 +216,7 @@ User-assigned identity example:
202216
}
203217
},
204218
```
219+
<br/>
205220

206221
Refer to [_Grant Managed Identity Access to a Key Vault for Credential Rotation_](#grant-managed-identity-access-to-a-key-vault-for-credential-rotation) to assign the appropriate role to the Managed Identity Principal ID.
207222

@@ -212,12 +227,14 @@ Refer to [_Grant Managed Identity Access to a Key Vault for Credential Rotation_
212227
| Role Name | Role Definition ID |
213228
|:-------------------------------------------------------|:-------------------------------------|
214229
| Operator Nexus Key Vault Writer Service Role (Preview) | 44f0a1a8-6fea-4b35-980a-8ff50c487c97 |
230+
<br/>
215231

216232
Example:
217233

218234
```console
219235
az role assignment create --assignee <Managed Identity Principal Id> --role 44f0a1a8-6fea-4b35-980a-8ff50c487c97 --scope /subscriptions/<Subscription ID>/resourceGroups/<Resource Group Name>/providers/Microsoft.KeyVault/vaults/<Key Vault Name>
220236
```
237+
<br/>
221238

222239
If using a user-assigned managed identity, proceed to [add permission to user-assigned identity](#add-a-permission-to-user-assigned-identity)
223240

0 commit comments

Comments
 (0)