search

Azure / ipam

IP Address Management on Azure
https://azure.github.io/ipam
MIT License
282 stars 92 forks source link

Support setting up IPAM at management groups other than the tenant root #261

Closed harsimranmaan closed 4 weeks ago

harsimranmaan commented 5 months ago

Is your feature request related to a problem? Please describe. A clear and concise description of what the problem is. Ex. I'm always frustrated when [...] I am interested in deploying the solution a specific management group instead of the Tenant Root Describe the solution you'd like A clear and concise description of what you want to happen.

It should be possible to restrict the IPAM solution to a specific management group and its children. Multiple IPAM instances can be deployed based on organizational use cases within a tenant.

It should be possible to specify an additional attribute MANAGEMENT_GROUP_ID to the config and use it for looking up networking details. The TENANT_ID would still be needed for auth token verification.

Describe alternatives you've considered A clear and concise description of any alternative solutions or features you've considered. Install IPAM with Reader access to Tenant Root

Additional context Add any other context or screenshots about the feature request here. Grant Reader access at the Tenant Root is not a desired option

DCMattyG commented 5 months ago

Hi @harsimranmaan, this is a fair ask an other have made it too. This is on the near-term roadmap so it should be available in the deployment script soon.

In the meantime you can simply add the IPAM Engine Service Principal as a Reader on the target Management Group, then remove it from the Root Management Group as a workaround.

I'll update this issue and link it to the PR once we've added this option to the deployment script. Thanks so much for reaching out and the great suggestion!

DCMattyG commented 3 months ago

Hey there @harsimranmaan, this option is now available in the latest release (v3.2.0) which came from PR #279. You can find the additional switch in the deployment docs here.

Hope everything is working as you expect, please let me know if you have any issues!

DCMattyG commented 4 weeks ago

Hi @harsimranmaan, I'm going to close this issue as the fix has been available for several months now. If you are still having issues with this, please don't hesitate to re-open this issue or reach out to me directly.

I hope the new functionality is working to your satisfaction!