Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[KeyVault] - Add networkAcls to MHSM ARM template #15830

Merged
merged 3 commits into from
Jun 18, 2021

Conversation

maorleger
Copy link
Member

@maorleger maorleger commented Jun 17, 2021

This PR makes three changes to our deployment template:

  • Add networkAcls to the Managed HSM properties
  • Remove the 60 second sleep after activation
  • Speed up challenge auth tests for KV Keys by using methods that don't require creating and deleting keys.

The first is now needed, and without it deployment will fail.
The second is no longer needed, since it looks like the az cli appropriately waits before coming back.
Finally, the third is something I noticed - there's no reason to create and purge keys which takes a long time in order to test CAE.

@maorleger maorleger requested a review from sadasant as a code owner June 17, 2021 22:06
@ghost ghost added the KeyVault label Jun 17, 2021
@maorleger
Copy link
Member Author

/azp run js - keyvault-admin - tests

@azure-pipelines
Copy link

Azure Pipelines successfully started running 1 pipeline(s).

@maorleger
Copy link
Member Author

/azp run js - keyvault-admin - tests

@azure-pipelines
Copy link

Azure Pipelines successfully started running 1 pipeline(s).

@maorleger
Copy link
Member Author

/azp run js - keyvault-keys - tests

@azure-pipelines
Copy link

Azure Pipelines successfully started running 1 pipeline(s).

Copy link
Contributor

@sadasant sadasant left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good! Make sure CI passes 🌞

@maorleger
Copy link
Member Author

maorleger commented Jun 18, 2021

/check-enforcer override

Explanation: there is a known issue that is being investigated on the service side. But, the changes I made here have been validated to deploy a managed HSM successfully. I'd rather merge this in now and monitor the pipeline since it actually deploys resources correctly.

@maorleger maorleger merged commit bdff63d into Azure:main Jun 18, 2021
@maorleger maorleger deleted the fix-build branch June 18, 2021 22:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants