Ability to configure which subscriptions to track

Open
#860 2 comments 0 reactions 1 assignee View on GitHub

@Jefajers is already working on this.

Since Feb 20, 2024.

Assessment

This issue has not been assessed yet.

Description

triage

Describe the solution you'd like

In our Azure tenant, we have different application landing zone subscriptions for production, staging, and testing of our primary product. In accordance with #747, we wish to use separate AzOps repositories to track deployments to each of these environments. At the same time, we make extensive use of Bicep modules from a private container registry, which is placed in a separate platform subscription:

  • root (mg)
    • (mg)
      • platform (mg)
        • management (mg)
          • management (sub)
            • container registry
      • landing zones (mg)
        • online (mg)
          • prod (sub)
          • stage (sub)
          • test (sub)

The service principal we use for deploying resources to prod (sub) has the following permissions:

  • Owner on prod (sub)
  • AcrPull on the container registry in management (sub)

As a result, when running the pull pipeline, AzOps tracks both the subscriptions prod and management. It isn't actually able to list role assignments, policies, resource groups, or anything else inside management (sub), but it does generate a directory along with a microsoft.subscription_subscriptions-<sub-id>.json file.

We would really like to be able to configure which subscription(s) to track via AzOps - something like Core.SubscriptionsToInclude or similar.

Dominant language
PowerShell
Stars
420
Forks
174
Avg merge
16d 18h
Merged PRs (30d)
1

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from Azure/AzOps

All issues in Azure/AzOps

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.