Skip to content

Commit 4cdbe87

Browse files
NLB:2234: Remove unnecessary usage of pii
1 parent c62dea8 commit 4cdbe87

File tree

1 file changed

+11
-8
lines changed

1 file changed

+11
-8
lines changed

content/nginxaas-azure/vmss-backend.md

Lines changed: 11 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -138,7 +138,9 @@ nginx-asg-sync uses the Azure API to read the IP addresses of the Virtual Machin
138138

139139
You can assign managed identity permissions using:
140140

141-
- **Azure Portal**: Navigate to **Resource****Identity****Role assignments** in the Azure portal
141+
- **Azure Portal**:
142+
- For system-assigned identity: Navigate to your nginx-asg-sync VM resource → **Identity**
143+
- For role assignment: Navigate to your VMSS resource → **Access control (IAM)****Role assignments**
142144
- **Azure CLI**: Use Azure CLI commands for programmatic assignment
143145

144146
For detailed instructions on managed identities, see the [Azure documentation](https://learn.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overview).
@@ -198,9 +200,6 @@ Create a file called `vmss-network-read-role.json`:
198200
```
199201

200202
```bash
201-
# Set role name
202-
roleName="VMSS-Network-Read-Role"
203-
204203
# Replace subscription ID in the JSON file (if using the template above)
205204

206205
# Create the custom role
@@ -226,6 +225,9 @@ vmssId=$(az vmss show \
226225
Assign the custom role to the VM's system-assigned managed identity:
227226

228227
```bash
228+
# Set role name for assignment
229+
roleName="VMSS-Network-Read-Role"
230+
229231
# Assign the custom role to the VM's managed identity
230232
az role assignment create \
231233
--assignee-object-id $principalId \
@@ -313,7 +315,7 @@ Example output when the container starts successfully:
313315

314316
```
315317
2025/12/31 10:25:30 nginx-asg-sync version v1.0.3
316-
2025/12/31 10:25:30 Updated HTTP servers of backend-one for group naveen-vmss-latest ; Added: [172.19.0.6:80 172.19.0.7:80], Removed: [], Updated: []
318+
2025/12/31 10:25:30 Updated HTTP servers of backend-one for group backend-one-vmss ; Added: [172.19.0.6:80 172.19.0.7:80], Removed: [], Updated: []
317319
```
318320

319321
### Configure nginx-asg-sync agent
@@ -329,10 +331,11 @@ Create `/etc/nginx/config.yaml`:
329331
```yaml
330332
# nginx-asg-sync configuration for NGINXaaS for Azure
331333
cloud_provider: Azure
332-
subscription_id: your_subscription_id
334+
subscription_id: <SUBSCRIPTION_ID>
333335
resource_group_name: your_vmss_resource_group
334336

335337
# NGINXaaS dataplane API endpoint (note the /nplus suffix)
338+
# Example : <DataplaneAPIEndpoint>/nplus
336339
api_endpoint: https://your-nginxaas-endpoint.region.nginxaas.net/nplus
337340
sync_interval: 5s
338341

@@ -399,9 +402,9 @@ Example output when the agent starts successfully:
399402

400403
```
401404
2026/01/08 15:44:12 nginx-asg-sync version 1.0.3
402-
2026/01/08 15:44:13 Updated HTTP servers of backend-one for group naveen-vmss-latest ; Added: [172.19.0.6:80 172.19.0.7:80], Removed: [], Updated: []
405+
2026/01/08 15:44:13 Updated HTTP servers of backend-one for group backend-one-vmss ; Added: [172.19.0.6:80 172.19.0.7:80], Removed: [], Updated: []
403406
404-
2026/01/08 16:08:07 Updated HTTP servers of backend-one for group naveen-vmss-latest ; Added: [172.19.0.8:80], Removed: [], Updated: []
407+
2026/01/08 16:08:07 Updated HTTP servers of backend-one for group backend-one-vmss ; Added: [172.19.0.8:80], Removed: [], Updated: []
405408
406409
407410
```

0 commit comments

Comments
 (0)