Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix untagged cost reporting reader role assignment #2951

Conversation

guybartal
Copy link
Collaborator

@guybartal guybartal commented Dec 7, 2022

Resolves #2933

What is being addressed

Fix cost api failure for empty tre environment without any workspaces.
workspaces has currently assigns Virtual Machine Contributor role to api identity which includes reader permissions for getting resource group name and tags, and hides the error, but won't include untagged resource groups in core.

Pending work: explore what it takes to include 3rd party/DataBricks/AKS costs in cost reporting - #2955

How is this addressed

  • Assign reader role to api identity for core and workspaces resource group (although workspace RG has Virtual Machine Contributor role, it might get changed to a narrower access in the future and introduce a potential bug).

@github-actions
Copy link

github-actions bot commented Dec 7, 2022

Unit Test Results

0 tests   0 ✔️  0s ⏱️
0 suites  0 💤
0 files    0

Results for commit 82cd75e.

♻️ This comment has been updated with latest results.

@guybartal guybartal marked this pull request as draft December 7, 2022 15:41
@guybartal guybartal marked this pull request as ready for review December 8, 2022 11:14
@guybartal guybartal requested a review from marrobi December 8, 2022 11:17
Copy link
Member

@marrobi marrobi left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@guybartal
Copy link
Collaborator Author

/test

@guybartal guybartal enabled auto-merge (squash) December 8, 2022 11:20
@guybartal guybartal requested a review from tamirkamara December 8, 2022 11:21
@github-actions
Copy link

github-actions bot commented Dec 8, 2022

🤖 pr-bot 🤖

🏃 Running tests: https://github.com/microsoft/AzureTRE/actions/runs/3647796969 (with refid 49b148f5)

(in response to this comment from @guybartal)

1 similar comment
@github-actions
Copy link

github-actions bot commented Dec 8, 2022

🤖 pr-bot 🤖

🏃 Running tests: https://github.com/microsoft/AzureTRE/actions/runs/3647796969 (with refid 49b148f5)

(in response to this comment from @guybartal)

@guybartal
Copy link
Collaborator Author

/test

@guybartal guybartal removed the request for review from tamirkamara December 8, 2022 15:48
@github-actions
Copy link

github-actions bot commented Dec 8, 2022

🤖 pr-bot 🤖

🏃 Running tests: https://github.com/microsoft/AzureTRE/actions/runs/3649843994 (with refid 49b148f5)

(in response to this comment from @guybartal)

@guybartal guybartal merged commit ca4abf6 into microsoft:main Dec 8, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Cost API returns 500 in a bare new deployed Azure TRE environment
2 participants