Improve Cloud Shell onboarding for advanced scenario with VNET isolation
@mbifeld 已經在處理了。
開始於 2025年12月10日。
評估
這個 Issue 還沒有評估資料。
描述
When onboarding Cloud Shell with VNET isolation the user's experience could be improved by clarifying the documentation for advanced scenario and relaxing some requirements:
- Expand the documentation at https://docs.microsoft.com/en-us/azure/cloud-shell/private-vnet with step by step installation guide, in particular the chapter "Deploy network resources". Currently it references two Quickstart ARM templates, but it takes additional time by investigating what needs to be done if some Azure resources are already in place, e.g. VNET with subnets.
- Clarify a requirement about how many different subnets are required (three according to the Quickstart ARM templates) and what requirements each subnet has if any, e.g. service endpoints, delegations, etc. Are three (3) subnets required, or could Private Endpoints be created within already defined subnets?
- Clarify requirements about RBAC permissions for different resources and service principals.
- Allow the storage account, relay namespace, virtual network and private endpoints be defined in different resource groups. As an example, networking resources could be managed by different teams and stay in different resource groups.
- Clarify best practices adopting Cloud Shell in multi-admin scenario. e.g., could one Storage Account with different File shares and RBAC access permissions be shared in multi-admin scenario? Are Relay namespace and Network profiles required to be created for each Cloud Shell user separately?
You did already a great job! Just an experience in higly governed and secured environment needs improvement.
- 主要語言
- PowerShell
- 星號
- 273
- 分支
- 116
- PR 合併指標
- 30 天內沒有已合併 PR
環境準備
這個專案沒有提供開發容器、Dockerfile 或貢獻指南，環境需要你自己搭建：先看它的 README，通用步驟見我們的新手貢獻指南。
從這裡開始
- 先讀完整個 Issue，再讀專案的貢獻指南。
- 在 Issue 下留言說明你要接手 —— 這能避免兩個人做同樣的事。
- Fork 儲存庫，在一個分支上完成修改。
- 送出 Pull Request，並在描述裡引用這個 Issue 編號。
Azure/CloudShell 的其他 Issue
-
bug Triage-needed
難度 3/5 1-2 天 新手友好度 30/100
Azure/CloudShell#655 ·
-
bug Triage-needed
難度 4/5 3-5 天 新手友好度 38/100
Azure/CloudShell#653 · 1 則留言 ·
-
bug Triage-needed
難度 4/5 3-5 天 新手友好度 22/100
Azure/CloudShell#649 · 2 則留言 ·
-
[BUG] Bash session falls back to ephemeral (“Failed to mount the Azure file share”) after $HOME image is attached; intermittent across 5 file shares, 3 storage accounts, 2 subscriptions可能已有人在做 @priyaananthasankar 於 24 天前認領。 未關閉bug
Azure/CloudShell#648 · 1 則留言 · 已指派 1 人 ·
-
難度 3/5 1-2 天 新手友好度 55/100
Azure/CloudShell#611 · 5 則留言 · 1 個 reaction ·