зеркало из https://github.com/Azure/ARO-RP.git
drop "ARO v4 Development First Party Managed Resource Group" role definition and use Owner instead
This commit is contained in:
Jim Minter
Родитель
308d6b6b5e
Коммит
e48c9a9d8e
|
|
@ -28,60 +28,6 @@
|
|||
"roleName": "ARO v4 Development First Party Subscription"
|
||||
}
|
||||
},
|
||||
{
|
||||
"name": "c95361b8-cf7c-40a1-ad0a-df9f39a30225",
|
||||
"apiVersion": "2017-09-01",
|
||||
"type": "Microsoft.Authorization/roleDefinitions",
|
||||
"properties": {
|
||||
"assignableScopes": [
|
||||
"[concat('/subscriptions/', subscription().subscriptionId)]"
|
||||
],
|
||||
"permissions": [
|
||||
{
|
||||
"actions": [
|
||||
"Microsoft.Authorization/roleAssignments/write",
|
||||
"Microsoft.Compute/disks/delete",
|
||||
"Microsoft.Compute/images/read",
|
||||
"Microsoft.Compute/images/write",
|
||||
"Microsoft.Compute/virtualMachines/delete",
|
||||
"Microsoft.Compute/virtualMachines/read",
|
||||
"Microsoft.Compute/virtualMachines/write",
|
||||
"Microsoft.Network/loadBalancers/backendAddressPools/join/action",
|
||||
"Microsoft.Network/loadBalancers/read",
|
||||
"Microsoft.Network/loadBalancers/write",
|
||||
"Microsoft.Network/networkInterfaces/delete",
|
||||
"Microsoft.Network/networkInterfaces/join/action",
|
||||
"Microsoft.Network/networkInterfaces/read",
|
||||
"Microsoft.Network/networkInterfaces/write",
|
||||
"Microsoft.Network/networkSecurityGroups/join/action",
|
||||
"Microsoft.Network/networkSecurityGroups/read",
|
||||
"Microsoft.Network/networkSecurityGroups/write",
|
||||
"Microsoft.Network/privateDnsZones/A/write",
|
||||
"Microsoft.Network/privateDnsZones/SRV/write",
|
||||
"Microsoft.Network/privateDnsZones/virtualNetworkLinks/write",
|
||||
"Microsoft.Network/privateDnsZones/write",
|
||||
"Microsoft.Network/privateLinkServices/read",
|
||||
"Microsoft.Network/privateLinkServices/write",
|
||||
"Microsoft.Network/publicIPAddresses/delete",
|
||||
"Microsoft.Network/publicIPAddresses/join/action",
|
||||
"Microsoft.Network/publicIPAddresses/read",
|
||||
"Microsoft.Network/publicIPAddresses/write",
|
||||
"Microsoft.Network/routeTables/read",
|
||||
"Microsoft.Network/routeTables/write",
|
||||
"Microsoft.Resources/deployments/operationStatuses/read",
|
||||
"Microsoft.Resources/deployments/read",
|
||||
"Microsoft.Resources/deployments/write",
|
||||
"Microsoft.Resources/subscriptions/resourceGroups/delete",
|
||||
"Microsoft.Resources/subscriptions/resourceGroups/read",
|
||||
"Microsoft.Storage/storageAccounts/blobServices/containers/write",
|
||||
"Microsoft.Storage/storageAccounts/listAccountSas/action",
|
||||
"Microsoft.Storage/storageAccounts/write"
|
||||
]
|
||||
}
|
||||
],
|
||||
"roleName": "ARO v4 Development First Party Managed Resource Group"
|
||||
}
|
||||
},
|
||||
{
|
||||
"name": "f3fe7bc1-0ef9-4681-a68c-c1fa285d6128",
|
||||
"apiVersion": "2017-09-01",
|
||||
|
|
|
|||
|
|
@ -124,7 +124,7 @@ func envDevelopmentJson() (*asset, error) {
|
|||
return a, nil
|
||||
}
|
||||
|
||||
var _rbacDevelopmentJson = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\xec\x59\xcb\x6e\xdb\x38\x14\xdd\xe7\x2b\x08\xcd\x00\x4e\x00\xcb\x7a\xf8\x21\x3b\x3b\x4f\x83\x0c\x02\x4c\x5a\x23\xee\x74\x31\x81\x17\x57\xe4\x95\xc3\x46\x22\x05\x92\x4a\x91\x0e\xf2\xef\x03\xc9\x6f\xc9\x6e\x63\xc9\x4d\x67\x51\x64\xa1\x48\x22\x8f\xce\xb9\xf7\x5c\xbe\xfc\xef\x19\x21\x84\x58\xbf\x6b\xfa\x80\x09\x58\x97\xc4\x7a\x30\x26\xd5\x97\x8e\xb3\x78\xd2\x49\x40\xc0\x1c\x13\x14\xa6\x03\x5f\x33\x85\x1d\x2a\x93\xe5\x3b\xed\xf8\xae\xd7\xb7\x5d\xcf\x76\x3d\x87\x61\x1a\xcb\xe7\xbc\xdd\x47\x4c\xd2\x18\x0c\x76\x3e\x6b\x29\x7e\xb3\xda\x8b\x2f\x50\x29\x0c\x0a\xf3\x09\x95\xe6\x52\xe4\x1f\xf2\x3a\x6e\xfe\xb7\x6a\x90\x82\x82\x04\x0d\x2a\x6d\x5d\x92\x05\xad\xe2\x39\xa8\x64\x8a\xea\x89\x53\x9c\x28\x2e\x28\x4f\x21\xbe\x61\x3b\x4d\x8a\x66\xe6\x39\xc5\x1c\x55\x1b\xc5\xc5\xdc\x5a\xbf\x7c\x69\x6f\xa0\xa2\xb4\x11\xd2\xd9\x16\x9e\xa5\x50\xcb\x4c\x51\xcc\xd9\xde\xaf\xdb\x94\xa0\x04\x24\x05\x54\x30\x42\xd6\x0b\x7a\x60\x07\xfe\x20\xb0\x7b\x51\x34\xb4\x43\xdf\x1f\xd8\xa3\x81\xd7\x73\x43\x74\x07\x3e\xf8\x56\x7b\xb7\x2f\xa4\x7c\x2b\x58\xbe\xeb\x05\xb6\x3b\xb2\x5d\xaf\xdc\x6e\x45\xf7\x96\x53\x25\xb5\x8c\x4c\x67\x9c\x99\x07\xa9\xf8\x57\x30\x5c\x0a\x47\xc9\x18\xaf\x30\xe2\x82\xe7\xb7\xba\xdc\x3d\x55\x32\x45\x65\x38\xea\x4a\x24\x16\x34\xb4\xe6\x73\x01\x61\x8c\x53\x2a\xd3\x92\xdc\x9d\x96\xf7\x54\x0a\x0a\xe6\xbc\xe5\xe8\x2c\xd4\x54\xf1\xb4\xf8\xa0\xd3\x6a\x93\xed\x07\xe7\x17\x9d\xed\xdb\x1b\x76\x31\xb3\x2a\x80\xb3\x76\x95\x49\x8a\x2a\xe1\x5a\x17\x22\x0e\x91\xa8\x0a\xd8\x08\xa1\xe6\x9b\x5d\xd7\x0d\x37\x81\xbc\x5b\xe5\xb8\xa4\x68\x95\xfb\x3f\x95\xcc\x52\xed\x7c\x51\xdc\x60\x55\xc3\x5a\xcb\xde\x37\x2f\xaf\xd2\x9c\x27\xef\xfd\xd2\x44\xe3\xbb\x0f\xe4\xa9\x47\xae\xf0\x09\x63\x99\xe6\x95\x46\xae\xb9\xd2\x86\x4c\x40\x99\x67\x32\xdd\xa2\xb8\x4b\xe6\x65\x5f\x31\x1c\x70\x2a\x1d\xf5\xbb\x03\x2f\x1c\xda\x34\x0a\xa8\xdd\x73\xc1\xb3\x81\xb9\x60\xb3\x68\x14\x75\x47\xd0\x75\x7d\xbf\xff\xcb\xa9\xdf\xc9\xda\xdb\x3b\xb5\x1a\xc8\x71\x11\x8d\xdc\x25\x2b\x83\x56\x89\x1e\x00\x7b\x27\x93\x34\x33\xe8\x30\xae\x1f\xb5\xc3\x30\xc6\x3a\xbd\x79\x02\x73\xcc\x6b\x05\x58\xed\xce\x35\x89\x3f\x71\x65\x32\x88\x6f\x81\x3e\x70\x81\xf5\x25\x94\x71\xea\x69\x29\xa3\x1c\x29\xea\x3d\x9a\x2f\x52\x3d\x3a\xb1\x04\xf6\x07\xc4\x20\x28\x2a\xed\x84\x40\x1f\x51\xb0\x31\x63\x0a\xb5\x9e\x48\x19\x6b\xe7\xb3\xe4\xc2\x59\x98\xa7\x29\xfc\x71\x4a\xf7\x63\xd4\xd4\x29\x16\xd7\x1b\x61\x50\x45\x40\x6b\xa4\xef\x30\x52\xa3\x08\x55\xe1\xea\x45\xa9\x8a\xd3\x2c\x52\x53\xa4\x99\xe2\xe6\x79\x39\x1b\x9d\x42\x63\x09\xb2\x91\xce\x12\x56\x4d\xad\xa9\xe2\x4f\x60\xf0\x4a\xe8\x7f\x64\x5e\x44\xe3\x53\x01\x4d\xef\x3e\x9d\x0a\x6a\x59\xe8\xcb\xd7\x7f\x71\xf1\x78\x32\xb9\xcd\x60\x72\x2a\xcb\x95\x6f\xdd\x64\xee\x43\xaa\x4b\x2a\x0b\x63\x4e\x6f\x26\xcb\xb1\xab\x41\x81\x57\x91\x1a\x99\xbf\x0a\x57\x33\x56\x15\x9c\x9a\x91\x52\x32\x33\xf8\x31\x5f\xd1\xd4\xa5\xb2\x8d\x70\x24\x89\xcd\xe2\x77\xb3\xb5\xd3\x4e\xbe\x04\x2b\x16\x19\x53\x03\x26\x3b\x3e\x46\xfb\x51\x4f\x81\x51\x5b\xde\x37\xd7\xf6\xc7\x5a\xf3\x95\xb0\xc7\x09\x9e\x1a\xa9\x60\x8e\x8e\x5e\x5c\xc7\x94\xca\x2c\x97\x1c\xc6\x32\x5c\x57\x63\xbe\xc1\x06\x2e\x6a\xcc\xbc\x87\xe0\x63\xae\xcd\xf2\x66\x0a\xfa\xe8\xb2\x3a\x04\xfb\xff\xd8\x2e\xdd\x16\xe7\x1a\x8c\xac\x12\x46\x8a\xcc\xd4\xdf\x38\x45\xdd\x08\x83\x90\x7a\xb6\x8b\xd1\xc8\xee\x0d\x86\x9e\x0d\x83\x21\xb5\xa9\x17\x81\x3f\xec\xb3\x81\xe7\x0f\x7f\x6d\x9c\xbe\x93\xbf\xb7\xdf\x38\xad\x06\xca\xdd\xb9\xbb\xe1\x44\x52\x06\xab\x37\x76\x97\x51\x74\x16\x0a\x34\x27\xa6\xb6\x02\x3d\x2d\xc5\x9f\x57\xe2\xd3\x82\x01\x79\x27\x85\x51\x3c\xcc\x8c\x54\xf5\x4b\xfa\x7e\x9e\x71\x76\x5e\x32\x36\x67\x6d\xd2\xba\x9e\x10\x87\x2c\xbf\x7e\x3d\xd9\x39\x7a\x69\x5d\xcc\x7e\x64\x99\x6f\x6d\xeb\xcb\xdd\x19\xa6\x28\x98\xfe\x20\xf6\xfa\xdf\xba\xdf\x16\xb2\x1a\xf5\x6e\xd8\x79\xeb\x95\xa3\x4a\xab\x4d\x5a\xaf\x39\xc7\x6c\x95\x8b\x7d\x76\xe4\x70\x94\xee\x1c\xce\x5a\xf7\x9b\x83\xe1\xf3\xd6\xbe\x13\xdc\x6a\xc4\xd7\x46\xd9\xd0\x5f\x62\xbd\x61\x0c\xf6\x50\xd2\xf9\xf0\x5a\xe1\x51\x98\x6a\xf6\x23\x6c\x3a\xbe\xbb\x25\x0e\xf9\x5b\xa3\x22\x63\x4a\x51\x6b\x32\x66\x09\x17\x5c\x1b\x05\x46\xaa\x9f\x67\xd5\x26\x16\xd8\xfb\x7b\xc0\x1b\x7b\xc0\x1b\xb2\x80\x0d\x87\xcc\x66\xdd\x3e\xda\xbd\x28\xec\xdb\xd0\xa7\x5d\x3b\x08\x82\x2e\xf5\x5d\x08\x7c\x36\x3a\xa5\x07\x8a\xff\x66\x67\x2f\x67\xff\x05\x00\x00\xff\xff\x12\x84\x83\xf1\xaf\x19\x00\x00")
|
||||
var _rbacDevelopmentJson = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\xec\x56\xcb\x6e\xdb\x3a\x10\xdd\xfb\x2b\x08\xdd\x0b\xc8\x01\x4c\xeb\xe1\x87\xe4\xec\x8c\x1b\xe4\x22\x8b\x24\x46\xdc\x76\x63\x78\x41\x91\x23\x87\xa9\x45\x12\x24\xe5\x20\x29\xfc\xef\x85\xe4\xb7\xe4\xb4\x49\xf3\xda\x14\xde\x98\xe4\xf0\xf0\x9c\xe1\x99\x11\x7f\x34\x10\x42\xc8\xf9\xd7\xd0\x5b\xc8\x88\x73\x8a\x9c\x5b\x6b\x95\x39\xf5\xbc\xd5\x4c\x3b\x23\x82\xcc\x20\x03\x61\xdb\xe4\x31\xd7\xd0\xa6\x32\x5b\xaf\x19\x2f\xf4\x83\x1e\xf6\x03\xec\x07\x1e\x03\x35\x97\x0f\x45\xdc\x17\xc8\xd4\x9c\x58\x68\xdf\x19\x29\xfe\x71\x5a\xab\x13\xa8\x14\x16\x84\xfd\x06\xda\x70\x29\x8a\x83\x82\xb6\x5f\xfc\x36\x01\x8a\x68\x92\x81\x05\x6d\x9c\x53\xb4\xa2\x55\xce\x13\x9d\x8d\x41\x2f\x38\x85\x91\xe6\x82\x72\x45\xe6\x17\xec\x20\xa4\x0c\xb3\x0f\x0a\x0a\x54\x63\x35\x17\x33\x67\xbb\xb8\x6c\xed\xa0\x52\xf5\x2a\xa4\xc6\x1e\x9e\xa3\xc1\xc8\x5c\x53\x28\xd8\x4e\xb6\x31\x15\x28\x41\xb2\x12\x2a\x1a\x00\xeb\x46\x5d\x82\xa3\xb0\x1f\xe1\x6e\x9a\xc6\x38\x09\xc3\x3e\x1e\xf4\x83\xae\x9f\x80\xdf\x0f\x49\xe8\xb4\x0e\xf7\x12\xc5\xf7\x92\x15\xfa\x41\x84\xfd\x01\xf6\x83\x6a\xdc\x86\xee\x25\xa7\x5a\x1a\x99\xda\xf6\x30\xb7\xb7\x52\xf3\x47\x62\xb9\x14\x9e\x96\x73\x38\x83\x94\x0b\x5e\x0c\x4d\x75\xbb\xd2\x52\x81\xb6\x1c\x4c\x2d\x13\x2b\x1a\xc6\xf0\x99\x20\xc9\x1c\xc6\x54\xaa\x8a\xdc\x83\xc8\x09\x95\x82\x12\xdb\x74\x3d\x93\x27\x86\x6a\xae\xca\x03\x3d\xb7\x85\xf6\x27\x9a\x27\xed\xfd\xe1\x05\x3b\x99\x3a\x35\xc0\x69\xab\xce\x44\x81\xce\xb8\x31\xa5\x88\xa7\x48\xd4\x05\xec\x84\x50\xfb\xcb\xad\xdb\xc0\x5d\x22\x6f\x36\x77\x5c\x51\xb4\xb9\xfb\xff\xb5\xcc\x95\xf1\xee\x35\xb7\x50\xd7\xb0\xd5\x72\x74\x65\xf9\x2c\xcd\xc5\xe5\x5d\xad\x4d\x34\xbc\xb9\x46\x8b\x2e\x3a\x83\x05\xcc\xa5\x2a\x2a\x0d\x9d\x73\x6d\x2c\x1a\x11\x6d\x1f\xd0\x78\x8f\xe2\x21\x99\xe5\xb1\x62\x78\xc2\xa9\x69\x27\x85\x28\xa1\x01\xf6\x21\x1d\xe0\x6e\x3f\x0e\x30\xe9\xc7\x14\xd3\x20\x25\x61\xdc\x63\xfd\x20\x8c\xff\x3a\xf5\x37\xb7\xf6\xf1\x4e\xbd\x02\x7b\x2f\xf5\x77\x6f\xc1\xb5\xcd\xc9\x7c\x3d\x34\xde\x9d\xe4\xc2\x5b\xe1\x39\x75\xa2\x2f\x04\xd3\x40\xd8\xeb\x51\x4c\x9e\x08\xb0\x6f\x4c\x6d\x03\xfa\xb6\x14\x3f\xaf\xb0\xc7\x25\x03\xf4\x9f\x14\x56\xf3\x24\xb7\x52\xff\x79\x49\x4f\x66\x39\x67\xcd\x8a\xb1\x39\x6b\x21\xf7\x7c\x84\x3c\xb4\x3e\xfd\x7c\x74\xd0\x41\xdc\x93\xe9\x7b\x96\xf9\xb0\xac\xd5\x42\x6a\xad\xcc\x19\x28\x10\xcc\x5c\x8b\xa3\xfe\x77\x26\xfb\x42\x36\x0d\xfa\x82\x35\xdd\x67\x76\x15\xb7\x85\xdc\xe7\x7c\x8e\xdd\x6a\xb1\x4f\x5f\xd8\x8e\xd4\xc1\x1b\xc3\x99\xec\xde\x37\x4d\xf7\xd8\x43\xa4\x9e\xf1\xad\x51\x76\xf4\xd7\x58\x1f\x98\x83\x23\x94\x4c\xd1\x5e\x6b\x3c\x4a\x53\x4d\xdf\xc3\xa6\xc3\x9b\x4b\xe4\xa1\xaf\x06\x34\x1a\x52\x0a\xc6\xa0\x21\xcb\xb8\xe0\xc6\x6a\x62\xa5\xfe\x3c\xab\xbe\xc6\x02\x47\x9f\xb5\x1f\xec\x81\x20\x66\x11\x8b\x63\x86\x59\xa7\x07\xb8\x9b\x26\x3d\x4c\x7a\xb4\x83\xa3\x28\xea\xd0\xd0\x27\x51\xc8\x06\x6f\xe9\x81\xf2\xdf\xb4\xb1\x6c\xfc\x0c\x00\x00\xff\xff\xea\x5e\x90\x3d\x76\x0c\x00\x00")
|
||||
|
||||
func rbacDevelopmentJsonBytes() ([]byte, error) {
|
||||
return bindataRead(
|
||||
|
|
|
|||
|
|
@ -255,7 +255,7 @@ func (d *dev) CreateARMResourceGroupRoleAssignment(ctx context.Context, fpAuthor
|
|||
|
||||
_, err = d.roleassignments.Create(ctx, "/subscriptions/"+d.SubscriptionID()+"/resourceGroups/"+resourceGroup, uuid.NewV4().String(), mgmtauthorization.RoleAssignmentCreateParameters{
|
||||
Properties: &mgmtauthorization.RoleAssignmentProperties{
|
||||
RoleDefinitionID: to.StringPtr("/subscriptions/" + d.SubscriptionID() + "/providers/Microsoft.Authorization/roleDefinitions/c95361b8-cf7c-40a1-ad0a-df9f39a30225"),
|
||||
RoleDefinitionID: to.StringPtr("/subscriptions/" + d.SubscriptionID() + "/providers/Microsoft.Authorization/roleDefinitions/8e3af657-a8ff-443c-a75c-2fe8c4bcb635"),
|
||||
PrincipalID: res.Value,
|
||||
},
|
||||
})
|
||||
|
|
|
|||
Загрузка…
Ссылка в новой задаче