Deployment Unsuccessful without RBAC's Key Vault
See original GitHub issueDescribe the bug Unable to deploy the platform. This is due an issue with the deployment of the KeyVault, for security purposes I require it to have RBAC (Role Based Access Control). Without this the deployment will not run in my organisation. However my team and I are struggling to find the configuration options for this in the cloned repo. Appreciate this may be a simple fix / pointer in the right direction but would be gladly appreciated.
Script ran in powershell:
./deploy.ps1 -aadConfig aad.json -branchName poc/pubsub_binary -type app
To Reproduce Steps to reproduce the behavior:
- Try to deploy on a managed subscription that only allows RBAC key vaults
Expected behavior The deployment to be successful.
Error Message
"properties": { "statusCode": "BadRequest", "serviceRequestId": null, "statusMessage": "{\"error\":{\"code\":\"InvalidTemplateDeployment\",\"message\":\"The template deployment failed because of policy violation. Please see details for more information.\",\"details\":[{\"code\":\"AppendPoliciesUndefinedFields\",\"message\":\"Found policies that refer to an undefined field property for api-version '2016-10-01'. Fields: 'Microsoft.Keyvault/vaults/accessPolicies[*],Microsoft.Keyvault/vaults/accessPolicies[*],Microsoft.Keyvault/vaults/accessPolicies[*],Microsoft.Keyvault/vaults/accessPolicies[*],Microsoft.Keyvault/vaults/accessPolicies[*],Microsoft.Keyvault/vaults/accessPolicies[*],Microsoft.Keyvault/vaults/accessPolicies[*],Microsoft.Keyvault/vaults/accessPolicies[*]'. Policy identifiers: '[{\\\"policyAssignment\\\":{\\\"name\\\":\\\"Policy Initiative to enforce RBAC in KeyVault to meet IRM requirements\\\"
Additional context Add any other context about the problem here.
Issue Analytics
- State:
- Created 3 years ago
- Comments:10 (7 by maintainers)
Top GitHub Comments
@NooraKubati We are investigating and will get back ASAP.
We will continue offline