You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: content/nginxaas-azure/vmss-backend.md
+11-8Lines changed: 11 additions & 8 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -138,7 +138,9 @@ nginx-asg-sync uses the Azure API to read the IP addresses of the Virtual Machin
138
138
139
139
You can assign managed identity permissions using:
140
140
141
-
-**Azure Portal**: Navigate to **Resource** → **Identity** → **Role assignments** in the Azure portal
141
+
-**Azure Portal**:
142
+
- For system-assigned identity: Navigate to your nginx-asg-sync VM resource → **Identity**
143
+
- For role assignment: Navigate to your VMSS resource → **Access control (IAM)** → **Role assignments**
142
144
-**Azure CLI**: Use Azure CLI commands for programmatic assignment
143
145
144
146
For detailed instructions on managed identities, see the [Azure documentation](https://learn.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overview).
@@ -198,9 +200,6 @@ Create a file called `vmss-network-read-role.json`:
198
200
```
199
201
200
202
```bash
201
-
# Set role name
202
-
roleName="VMSS-Network-Read-Role"
203
-
204
203
# Replace subscription ID in the JSON file (if using the template above)
205
204
206
205
# Create the custom role
@@ -226,6 +225,9 @@ vmssId=$(az vmss show \
226
225
Assign the custom role to the VM's system-assigned managed identity:
227
226
228
227
```bash
228
+
# Set role name for assignment
229
+
roleName="VMSS-Network-Read-Role"
230
+
229
231
# Assign the custom role to the VM's managed identity
230
232
az role assignment create \
231
233
--assignee-object-id $principalId \
@@ -313,7 +315,7 @@ Example output when the container starts successfully:
313
315
314
316
```
315
317
2025/12/31 10:25:30 nginx-asg-sync version v1.0.3
316
-
2025/12/31 10:25:30 Updated HTTP servers of backend-one for group naveen-vmss-latest ; Added: [172.19.0.6:80 172.19.0.7:80], Removed: [], Updated: []
318
+
2025/12/31 10:25:30 Updated HTTP servers of backend-one for group backend-one-vmss ; Added: [172.19.0.6:80 172.19.0.7:80], Removed: [], Updated: []
0 commit comments