Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Issue with mandatory parameter Platform Management group, information about Security Advisories changes #531

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

tagolovina
Copy link
Contributor

Overview/Summary

Replace this with a brief description of what this Pull Request fixes, changes, etc.

This PR fixes/adds/changes

  1. Fixed issue with mandatory parameter Platform Management group
  2. Added information about Security Advisories changes.

Breaking Changes

  1. No

As part of this Pull Request I have

  • Read the Contribution Guide and ensured this PR is compliant with the guide
  • Checked for duplicate Pull Requests
  • Associated it with relevant GitHub Issues or ADO Work Items (Internal Only)
  • Ensured my code/branch is up-to-date with the latest changes in the main branch
  • Ensured PR tests are passing
  • Updated relevant and associated documentation (e.g. Contribution Guide, Docs etc.)

image
image

@tagolovina tagolovina requested a review from a team as a code owner February 12, 2025 18:13
@tagolovina tagolovina added Area: Accelerator ⚡ Issues / PR's related to Accelerators Pattern: ALZ 🚁 Issues / PR's related to the ALZ Pattern labels Feb 12, 2025
@@ -580,7 +590,7 @@
"allowedValues": "[if(empty(filter(map(steps('Configuration').DescendantManagementGroupAPI.value, (item) => parse(concat('{\"label\":\"', item.properties.displayName, '\",\"description\":\"', item.type, '\",\"value\":\"', item.name, '\"}'))), (item) => not(contains(item.description, '/subscriptions')))), filter(map(steps('Configuration').ManagementGroupAPI.value, (item) => parse(concat('{\"label\":\"', item.properties.displayName, '\",\"description\":\"', item.type, '\",\"value\":\"', item.name, '\"}'))), (item) => contains(item.label, steps('basics').resourceScope.managementGroup.displayName)), filter(map(steps('Configuration').DescendantManagementGroupAPI.value, (item) => parse(concat('{\"label\":\"', item.properties.displayName, '\",\"description\":\"', item.type, '\",\"value\":\"', item.name, '\"}'))), (item) => not(contains(item.description, '/subscriptions'))))]",
"required": true
},
"visible": "[or(equals(steps('Configuration').enableAMBAHybridVM,'Yes'), equals(steps('Configuration').enableAMBAVM,'Yes'))]"
Copy link
Collaborator

@Brunoga-MS Brunoga-MS Feb 12, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@tagolovina I would change this one, I would rather look at the parameter value assignment. I would change line 958 into this:

"platformManagementGroup": "[if(or(equals(steps('Configuration').enableAMBAHybridVM,'No'), equals(steps('Configuration').enableAMBAVM,'No')), 'contoso-platform', steps('Configuration').platformManagementGroup)]",

That should fix the issue. But we also have something with the management MG. We should review all the MG value assignment to be conditional to the various EnableAMBA*

image

And I think this is because of the managed identity for ARG which is now in the management MG ... We should double check on every policySetDefinition containing the ARG in log-search query

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Area: Accelerator ⚡ Issues / PR's related to Accelerators Pattern: ALZ 🚁 Issues / PR's related to the ALZ Pattern
Projects
None yet
3 participants