W przypadku uruchamiania rozwiązań typu Infrastructure as a Code bardzo często korzystamy z tzw. Custom Script Extension, w którym piszemy skrypt PowerShell, który się wykonuje przy kreowaniu maszyny wirtualnej. W przypadku maszyn z systemem operacyjnym Windows zazwyczaj potrzebujemy zmodyfikować rejestr, aby ustawić odpowiednie właściwości maszyny wirtualnej. System Windows przyzwyczaił nas do wyklikiwania potrzebnych opcji, które […]

Czytaj dalej

Create a Custom Role definition file e.g.: notepad $env:TMP\PolicyReader.json content: { “Name”: “Policy Reader”, “Id”: “0ab0b1a8-8aac-4efd-b8c2-3ee1fb270be8”, “IsCustom”: true, “Description”: “Policy Reader.”, “Actions”: [ “Microsoft.Authorization/policySetDefinitions/read”, “Microsoft.Authorization/policyDefinitions/read”, “Microsoft.Authorization/policyAssignments/read” ], “NotActions”: [ ], “DataActions”: [ ], “NotDataActions”: [ ], “AssignableScopes”: [ “/subscriptions/28c890b5-46e8-44a2-8f59-30e51cadd7f9” ] } Using PowerShell: Connect-AzAccount Get-AzSubscription Select-AzSubscription -SubscriptionId x-x-x-x-xxx New-AzRoleDefinition -InputFile $env:TMP\PolicyReader.json Get-AzRoleDefinition | ? {$_.IsCustom […]

Czytaj dalej

Sometimes we need to Enable Internal NAT on Windows Especially when we want to share Internet connection from host to Virtual Machine (using Nested Virtualisation in Azure) or using Windows Containers. Issue commands: New-VMSwitch –SwitchName “NAT” –SwitchType Internal New-NetIPAddress –IPAddress 10.0.0.1 -PrefixLength 24 -InterfaceAlias “vEthernet (NAT)” New-NetNat –Name NATnetwork –InternalIPInterfaceAddressPrefix 10.0.0.4/24

Czytaj dalej

Azure Role Based Access Control is great! You can assign Roles to users to give specific access and actions. But not always you can find specific Role, in this case I needed to add access to specific users to modify Azure Kubernetes Service, but not delete and create a new one. In this case, we […]

Czytaj dalej

To setup Azure Sphere Device you need to create Azure Sphere tenant. To do it you need to create it using this command: azsphere tenant create -n “spheretenantname”   But, you can see: error: The device is not responding. The device may be unresponsive if it is applying an Azure Sphere operating system update; please […]

Czytaj dalej