elastic / cloudbeat / 6377772819
76%

DEFAULT BRANCH: main
Ran
Jobs 1
Files 146
Run time 5s
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 75.594%. Remained the same
6377772819

push

github

web-flow 
Azure: ARM: Deploy Role Assignment in subscription level (#1368)

This introduces two nested deployments [1] in our ARM template and
changes the scope of the deployment to subscription level [2].

The `role-assignment-deployment` is responsible for creating resources
inside the Resource Group. This is effectively the old ARM template just
copied into a nested deployment.

I've also disabled the Public IP which is part of #1248, developers can
still manually add a Public IP before ticket #1367 is complete. SSH
hardening still to be handled by #1363. README is deleted as it needs to
be reworked as part of that ticket.

Resource Group name is now a parameter but it is set to a reasonable
time-based default (e.g. `cloudbeat-resource-group-1695818380`), no
extra user action needed.

A nested deployment is also necessary for the Role Assignment. Otherwise, despite the `dependsOn` property, we get:
```
{"code":"ResourceGroupNotFound","message":"Resource group 'my-group-name' could not be found."}
```
We can re-visit this if we find a way to fix this error. The downside
here is only extra complexity, no real functional impact.
For reference, see [3] for the ARM template I used to get this error.

The Role Assignment name is unique and based on subscription, resource
group and deployment name. Deleting the Resource Group also deletes the
role assignment.

[1]: https://learn.microsoft.com/en-us/azure/azure-resource-manager/templates/linked-templates?tabs=azure-cli#nested-template
[2]: https://learn.microsoft.com/en-us/azure/azure-resource-manager/templates/deploy-to-subscription?tabs=azure-cli
[3]:
<details>
  <summary>Failing ARM template</summary>

```json
{
    "$schema": "https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#",
    "contentVersion": "1.0.0.0",
    "parameters": {
        "resourceGroupName": {
            "defaultValue": "my-group-name",
            "type": "Strin... (continued)

5216 of 6900 relevant lines covered (75.59%)

9.58 hits per line

Jobs
ID Job ID Ran Files Coverage
1 6377772819.1 0
75.59
 GitHub Action Run
Source Files on build 6377772819
Detailed source file information is not available for this build.