Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Re-enable disabled tests: Test_Storage and Test_PersistentVolume #7853

Open
1 task done
willdavsmith opened this issue Aug 28, 2024 · 2 comments
Open
1 task done

Re-enable disabled tests: Test_Storage and Test_PersistentVolume #7853

willdavsmith opened this issue Aug 28, 2024 · 2 comments
Labels
maintenance Issue is a non-user-facing task like updating tests, improving automation, etc.. triaged This issue has been reviewed and triaged

Comments

@willdavsmith
Copy link
Contributor

willdavsmith commented Aug 28, 2024

Area for Improvement

We will be disabling these tests due to an Azure PolicyViolation. Here's an example error message:

"message": "PUT [https://management.azure.com/subscriptions/***/resourceGroups/radtest-func7dde317215-corerp-cloud/providers/Microsoft.ManagedIdentity/userAssignedIdentities/corerp-resources-volume-azure-keyvault-volume-azkv-ctnr/federatedIdentityCredentials/volume-azkv-ctnr\n--------------------------------------------------------------------------------\nRESPONSE](https://management.azure.com/subscriptions/***/resourceGroups/radtest-func7dde317215-corerp-cloud/providers/Microsoft.ManagedIdentity/userAssignedIdentities/corerp-resources-volume-azure-keyvault-volume-azkv-ctnr/federatedIdentityCredentials/volume-azkv-ctnr/n--------------------------------------------------------------------------------/nRESPONSE) 403: 403 Forbidden\nERROR CODE: RequestDisallowedByPolicy\n--------------------------------------------------------------------------------\n{\n  \"error\": {\n    \"code\": \"RequestDisallowedByPolicy\",\n    \"target\": \"volume-azkv-ctnr\",\n    \"message\": \"Resource 'volume-azkv-ctnr' was disallowed by policy. Reasons: 'If this policy is blocking your service, please read details @ https://aka.ms/msificpolicy. For exemptions, create ICM Incident - https://aka.ms/corp-msi-fic-exception'. See error details for policy resource IDs.\",\n    \"additionalInfo\": [\n      {\n        \"type\": \"PolicyViolation\",\n        \"info\": {\n          \"evaluationDetails\": {\n            \"evaluatedExpressions\": [\n              {\n                \"result\": \"True\",\n                \"expressionKind\": \"Field\",\n                \"expression\": \"type\",\n                \"path\": \"type\",\n                \"expressionValue\": \"Microsoft.ManagedIdentity/userAssignedIdentities/federatedIdentityCredentials\",\n                \"targetValue\": \"Microsoft.ManagedIdentity/userAssignedIdentities/federatedIdentityCredentials\",\n                \"operator\": \"Equals\"\n              },\n              {\n                \"result\": \"True\",\n                \"expressionKind\": \"Value\",\n                \"expression\": \"[if(greaterOrEquals(length(split(field('Microsoft.ManagedIdentity/userAssignedIdentities/federatedIdentityCredentials/issuer'),'/')),3),split(field('Microsoft.ManagedIdentity/userAssignedIdentities/federatedIdentityCredentials/issuer'),'/')[2],'')]\",\n                \"expressionValue\": \"radiusoidc.blob.core.windows.net\",\n                \"targetValue\": \"*.blob.core.windows.net\",\n                \"operator\": \"Like\"\n              },\n              {\n                \"result\": \"False\",\n                \"expressionKind\": \"Count\",\n                \"expression\": \"[parameters('allowedBlobStorageAccounts')]\",\n                \"expressionValue\": 1,\n                \"targetValue\": \"0\",\n                \"operator\": \"Equals\"\n              },\n              {\n                \"result\": \"False\",\n                \"expressionKind\": \"Value\",\n                \"expression\": \"[split(if(greaterOrEquals(length(split(field('Microsoft.ManagedIdentity/userAssignedIdentities/federatedIdentityCredentials/issuer'),'/')),3),split(field('Microsoft.ManagedIdentity/userAssignedIdentities/federatedIdentityCredentials/issuer'),'/')[2],''),'.')[0]]\",\n                \"expressionValue\": \"radiusoidc\",\n                \"targetValue\": [\n                  \"rttest\"\n                ],\n                \"operator\": \"In\"\n              }\n            ],\n            \"reason\": \"If this policy is blocking your service, please read details @ https://aka.ms/msificpolicy. For exemptions, create ICM Incident - [https://aka.ms/corp-msi-fic-exception\](https://aka.ms/corp-msi-fic-exception/)"\n          },\n          \"policyDefinitionId\":

Observed behavior

No response

Desired behavior

Let's re-enable the tests

Proposed Fix

No response

rad Version

edge (8/28/24)

Operating system

No response

Additional context

No response

Would you like to support us?

  • Yes, I would like to support you

AB#13091

@willdavsmith willdavsmith added the maintenance Issue is a non-user-facing task like updating tests, improving automation, etc.. label Aug 28, 2024
@radius-triage-bot
Copy link

👋 @willdavsmith Thanks for filing this issue.

A project maintainer will review this issue and get back to you soon.

We also welcome community contributions! If you would like to pick this item up sooner and submit a pull request, please visit our contribution guidelines and assign this to yourself by commenting "/assign" on this issue.

For more information on our triage process please visit our triage overview

@ytimocin ytimocin added the triaged This issue has been reviewed and triaged label Aug 29, 2024
@radius-triage-bot
Copy link

👍 We've reviewed this issue and have agreed to add it to our backlog. Please subscribe to this issue for notifications, we'll provide updates when we pick it up.

We also welcome community contributions! If you would like to pick this item up sooner and submit a pull request, please visit our contribution guidelines and assign this to yourself by commenting "/assign" on this issue.

For more information on our triage process please visit our triage overview

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
maintenance Issue is a non-user-facing task like updating tests, improving automation, etc.. triaged This issue has been reviewed and triaged
Projects
None yet
Development

No branches or pull requests

2 participants