Here is a list of new Azure features announced during Ignite 2019, that in my opinion you should learn more. This is not a complete list – just I noticed them, and it is only for Azure. Some of them could be announced before. Virtual Machines: New Sizes Daav4, Eav4, NVv4, NDv2 OS Disk […]
W przypadku uruchamiania rozwiązań typu Infrastructure as a Code bardzo często korzystamy z tzw. Custom Script Extension, w którym piszemy skrypt PowerShell, który się wykonuje przy kreowaniu maszyny wirtualnej. W przypadku maszyn z systemem operacyjnym Windows zazwyczaj potrzebujemy zmodyfikować rejestr, aby ustawić odpowiednie właściwości maszyny wirtualnej. System Windows przyzwyczaił nas do wyklikiwania potrzebnych opcji, które […]
Create a Custom Role definition file e.g.: notepad $env:TMP\PolicyReader.json content: { “Name”: “Policy Reader”, “Id”: “0ab0b1a8-8aac-4efd-b8c2-3ee1fb270be8”, “IsCustom”: true, “Description”: “Policy Reader.”, “Actions”: [ “Microsoft.Authorization/policySetDefinitions/read”, “Microsoft.Authorization/policyDefinitions/read”, “Microsoft.Authorization/policyAssignments/read” ], “NotActions”: [ ], “DataActions”: [ ], “NotDataActions”: [ ], “AssignableScopes”: [ “/subscriptions/28c890b5-46e8-44a2-8f59-30e51cadd7f9” ] } Using PowerShell: Connect-AzAccount Get-AzSubscription Select-AzSubscription -SubscriptionId x-x-x-x-xxx New-AzRoleDefinition -InputFile $env:TMP\PolicyReader.json Get-AzRoleDefinition | ? {$_.IsCustom […]
Sometimes we need to Enable Internal NAT on Windows Especially when we want to share Internet connection from host to Virtual Machine (using Nested Virtualisation in Azure) or using Windows Containers. Issue commands: New-VMSwitch –SwitchName “NAT” –SwitchType Internal New-NetIPAddress –IPAddress 10.0.0.1 -PrefixLength 24 -InterfaceAlias “vEthernet (NAT)” New-NetNat –Name NATnetwork –InternalIPInterfaceAddressPrefix 10.0.0.4/24
Azure Role Based Access Control is great! You can assign Roles to users to give specific access and actions. But not always you can find specific Role, in this case I needed to add access to specific users to modify Azure Kubernetes Service, but not delete and create a new one. In this case, we […]