Skip to content

Commit c18e5af

Browse files
author
root
committed
Ensuring updates were captured.
1 parent 44cb77e commit c18e5af

File tree

1 file changed

+10
-11
lines changed

1 file changed

+10
-11
lines changed

articles/operator-nexus/howto-cluster-managed-identity-user-provided-resources.md

Lines changed: 10 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -29,21 +29,20 @@ For information on using the API to update Cluster managed identities, see [Upda
2929

3030
- [Install Azure CLI](https://aka.ms/azcli).
3131
- Install the latest version of the [appropriate Azure CLI extensions](./howto-install-cli-extensions.md).
32-
33-
> [!NOTE]
34-
> The managed identity functionality for Log Analytics Workspace (LAW) and Key Vault exists with the 2024-10-01-preview API and will be available with the 2025-02-01 GA API.
32+
- Storage Account managed identity support requires the 2024-07-01 or later version of the NetworkCloud API.
33+
- Key Vault and Log Analytics Workspace managed identity support requires the 2025-02-01 or later version of the NetworkCloud API.
3534

3635
## Operator Nexus Clusters with User Assigned Managed Identities (UAMI)
3736

3837
It's a best practice to first define all of the user provided resources (Storage Account, LAW, and Key Vault), the managed identities associated with those resources and then assign the managed identity the appropriate access to the resource. If these steps aren't done before Cluster creation, the steps need to be completed before Cluster deployment.
3938

4039
The impacts of not configuring these resources for a new Cluster are as follows:
4140

42-
- _Storage Account:_ Cluster creation fails as there is a check to ensure that `commandOutputSettings` exists on the Cluster input.
41+
- _Storage Account:_ Cluster creation fails as there's a check to ensure that `commandOutputSettings` exists on the Cluster input.
4342
- _LAW:_ Cluster deployment fails as the LAW (Log Analytics Workplace) is required to install software extensions during deployment.
4443
- _Key Vault:_ Credential rotations fail as there's a check to ensure write access to the user provided Key Vault before performing credential rotation.
4544

46-
Updating the Cluster can be done at any time. Changing the LAW settings will cause a brief disruption in sending metrics to the LAW as the extensions which use the LAW will need to be reinstalled.
45+
Updating the Cluster can be done at any time. Changing the LAW settings causes a brief disruption in sending metrics to the LAW as the extensions which use the LAW needs to be reinstalled.
4746

4847
The following steps should be followed for using UAMIs with Nexus Clusters and associated resources.
4948

@@ -235,18 +234,18 @@ Using a System Assigned Managed Identity (SAMI) follows a slightly different pat
235234

236235
For a new Cluster, these steps need to be completed before Cluster deployment. The impacts of not configuring these resources by deployment time for a new Cluster are as follows:
237236

238-
- _Storage Account:_ Cluster creation fails as there is a check to ensure that `commandOutputSettings` exists on the Cluster input.
237+
- _Storage Account:_ Cluster creation fails as there's a check to ensure that `commandOutputSettings` exists on the Cluster input.
239238
- _LAW:_ Cluster deployment fails as the LAW is required to install software extensions during deployment.
240239
- _Key Vault:_ Credential rotations fail as there's a check to ensure write access to the user provided Key Vault before performing credential rotation.
241240

242-
Updating the Cluster can be done at any time. Changing the LAW settings will cause a brief disruption in sending metrics to the LAW as the extensions which use the LAW need to be reinstalled.
241+
Updating the Cluster can be done at any time. Changing the LAW settings causes a brief disruption in sending metrics to the LAW as the extensions which use the LAW need to be reinstalled.
243242

244243
The following steps should be followed for using UAMIs with Nexus Clusters and associated resources.
245244

246245
_Cluster Creation_
247246

248247
1. [Create the user provided resources](#create-the-user-provided-resources)
249-
1. [Create the Cluster with a SAMI and specify the resources that will use the SAMI](#create-the-cluster-with-a-sami)
248+
1. [Create the Cluster with a SAMI and specify the resources that use the SAMI](#create-the-cluster-with-a-sami)
250249
1. [Query the Cluster to get the SAMI](#query-the-cluster-to-get-the-sami)
251250
1. [Update the resources and assign the SAMI to the resources](#update-the-resources-and-assign-the-sami-to-the-resources)
252251
1. Deploy the Cluster
@@ -261,7 +260,7 @@ _Cluster Update_
261260

262261
### Create the user provided resources
263262

264-
This section covers the user provided resource setup prior to Cluster creation.
263+
This section provides external links for the user resource setup that needs to occur before Cluster creation.
265264

266265
#### Storage Accounts setup
267266

@@ -396,7 +395,7 @@ These updates are applicable post Cluster creation or update to ensure that the
396395

397396
### Update the Cluster with the user provided resources information
398397

399-
This step is only required after updating a Cluster to add a SAMI and should be performed after updating the resources to assign the SAMI the appropriate role(s).
398+
This step is only required after updating a Cluster to add a SAMI and should be performed after updating the resources to assign the SAMI the appropriate role or roles.
400399

401400
#### Storage Account settings
402401

@@ -574,7 +573,7 @@ secret-archive-settings:
574573
identity-resource-id
575574
```
576575

577-
_**Notes:**_ `vault-uri` in `secret-archive-settings` is the URI for the Key Vault being specified versus the ARM resource ID that is specified for `key-vault-id`. The same managed identity that was specified for the Cluster Manager can be used on the Cluster.
576+
_**Notes:**_ `vault-uri` in `secret-archive-settings` is the URI for the Key Vault being specified versus the Azure Resource Manager (ARM) resource ID that is specified for `key-vault-id`. The same managed identity that was specified for the Cluster Manager can be used on the Cluster.
578577

579578
### Log Analytics Workspace
580579

0 commit comments

Comments
 (0)