Azure / Enterprise-Scale

The Azure Landing Zones (Enterprise-Scale) architecture provides prescriptive guidance coupled with Azure best practices, and it follows design principles across the critical design areas for organizations to define their Azure architecture
https://aka.ms/alz
MIT License
1.72k stars 980 forks source link

Bug Report; Deploy-VMSS-Monitoring policy managed identities lacking 'Managed Identity Operator' role #1817

Closed eehret closed 2 weeks ago

eehret commented 3 weeks ago

Community Note

Versions

terraform: 1.8.5

azure provider: 3.113.0

module: 6.1.0

Description

Describe the bug

Similar to https://github.com/Azure/terraform-azurerm-caf-enterprise-scale/issues/1014, the 'Deploy-VMSS-Monitoring' policy assignment managed identities are missing the 'Managed Identity Operator' role. Interestingly, I do see the role assignment for the 'Deploy-VM-Monitoring' policy assignments that are mentioned in the linked ticket, so maybe that other issue got resolved at some point. It seems unresolved for VMSS though.

See screen shot.

Steps to Reproduce

n/a

Screenshots

Image

Additional context

matt-FFFFFF commented 3 weeks ago

Thanks for reporting - moving upstream to triage! pinging @Springstone

matt-FFFFFF commented 3 weeks ago

This could be because we haven't updated to the October release yet in caf-enterprise-scale

Springstone commented 2 weeks ago

@matt-FFFFFF correct, it is updated in the repo as part of October release. Image

Closing as there is no further upstream action required, should be updated in the TF repo in a week or two.

CC: @eehret