[JIRA] (JENKINS-55041) Adding a new configuration to the azure-vm-agents-plugin that allows adding a User Assigned Identity to a VM
Title: Message Title Tom Ganor updated JENKINS-55041 Jenkins / JENKINS-55041 Adding a new configuration to the azure-vm-agents-plugin that allows adding a User Assigned Identity to a VM Change By: Tom Ganor Status: Fixed but Unreleased Reopened Add Comment This message was sent by Atlassian Jira (v7.11.2#711002-sha1:fdc329d) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-55041) Adding a new configuration to the azure-vm-agents-plugin that allows adding a User Assigned Identity to a VM
Title: Message Title Tom Ganor updated JENKINS-55041 Jenkins / JENKINS-55041 Adding a new configuration to the azure-vm-agents-plugin that allows adding a User Assigned Identity to a VM Change By: Tom Ganor Status: Reopened Open Add Comment This message was sent by Atlassian Jira (v7.11.2#711002-sha1:fdc329d) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-55041) Adding a new configuration to the azure-vm-agents-plugin that allows adding a User Assigned Identity to a VM
Title: Message Title Tom Ganor closed an issue as Won't Do Jenkins / JENKINS-55041 Adding a new configuration to the azure-vm-agents-plugin that allows adding a User Assigned Identity to a VM Change By: Tom Ganor Status: Open Closed Add Comment This message was sent by Atlassian Jira (v7.11.2#711002-sha1:fdc329d) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-55041) Adding a new configuration to the azure-vm-agents-plugin that allows adding a User Assigned Identity to a VM
Title: Message Title Tom Ganor commented on JENKINS-55041 Re: Adding a new configuration to the azure-vm-agents-plugin that allows adding a User Assigned Identity to a VM Hi Jie Shen, OK I will close this ticket and try and figure out a different solution. Thanks for all of your help anyway. Add Comment This message was sent by Atlassian Jira (v7.11.2#711002-sha1:fdc329d) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-55041) Adding a new configuration to the azure-vm-agents-plugin that allows adding a User Assigned Identity to a VM
Title: Message Title Tom Ganor updated JENKINS-55041 Jenkins / JENKINS-55041 Adding a new configuration to the azure-vm-agents-plugin that allows adding a User Assigned Identity to a VM Change By: Tom Ganor Status: Open Fixed but Unreleased Resolution: Won't Do Add Comment This message was sent by Atlassian Jira (v7.11.2#711002-sha1:fdc329d) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-55041) Adding a new configuration to the azure-vm-agents-plugin that allows adding a User Assigned Identity to a VM
Title: Message Title Tom Ganor stopped work on JENKINS-55041 Change By: Tom Ganor Status: In Progress Open Add Comment This message was sent by Atlassian Jira (v7.11.2#711002-sha1:fdc329d) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-55041) Adding a new configuration to the azure-vm-agents-plugin that allows adding a User Assigned Identity to a VM
Title: Message Title Tom Ganor commented on JENKINS-55041 Re: Adding a new configuration to the azure-vm-agents-plugin that allows adding a User Assigned Identity to a VM Hi Jie Shen, what do you mean by " Portal now only support system managed identity"? As for now, the ability to add a user-assigned managed identity to a VM does exist. Am I missing something? Add Comment This message was sent by Atlassian Jira (v7.11.2#711002-sha1:fdc329d) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-55041) Adding a new configuration to the azure-vm-agents-plugin that allows adding a User Assigned Identity to a VM
Title: Message Title Tom Ganor commented on JENKINS-55041 Re: Adding a new configuration to the azure-vm-agents-plugin that allows adding a User Assigned Identity to a VM Hi Jie Shen! Is there an estimated due date for this? Thanks! Add Comment This message was sent by Atlassian Jira (v7.11.2#711002-sha1:fdc329d) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-55041) Adding a new configuration to the azure-vm-agents-plugin that allows adding a User Assigned Identity to a VM
Title: Message Title Tom Ganor created an issue Jenkins / JENKINS-55041 Adding a new configuration to the azure-vm-agents-plugin that allows adding a User Assigned Identity to a VM Issue Type: New Feature Assignee: Azure DevOps Attachments: MSI user identity.png Components: azure-vm-agents-plugin Created: 2018-12-05 18:15 Labels: jenkins slave msi plug-in configuration Priority: Major Reporter: Tom Ganor Adding a new configuration to the azure-vm-agents-plugin that can be modified when a VM is deployed. The new configuration should provide us the ability to add a User-Assigned-Managed-Identity to a VM (in azure portal it is under "settings" -> "Identity " -> "User assigned (Preview)") - a screenshot is attached. This is necessary because of the key vault's access policies limit of 16 access policies only. Add
[JIRA] (JENKINS-54935) Adding a new configuration to the azure-vm-agents-plugin to add VM to AAD security group
Title: Message Title Tom Ganor updated JENKINS-54935 Jenkins / JENKINS-54935 Adding a new configuration to the azure-vm-agents-plugin to add VM to AAD security group Change By: Tom Ganor Status: Fixed but Unreleased Closed Add Comment This message was sent by Atlassian Jira (v7.11.2#711002-sha1:fdc329d) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-54935) Adding a new configuration to the azure-vm-agents-plugin to add VM to AAD security group
Title: Message Title Tom Ganor updated JENKINS-54935 This issue will be replaced with a new one. Jenkins / JENKINS-54935 Adding a new configuration to the azure-vm-agents-plugin to add VM to AAD security group Change By: Tom Ganor Status: Open Fixed but Unreleased Resolution: Won't Do Add Comment This message was sent by Atlassian Jira (v7.11.2#711002-sha1:fdc329d) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-54935) Adding a new configuration to the azure-vm-agents-plugin to add VM to AAD security group
Title: Message Title Tom Ganor stopped work on JENKINS-54935 Change By: Tom Ganor Status: In Progress Open Add Comment This message was sent by Atlassian Jira (v7.11.2#711002-sha1:fdc329d) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-54935) Adding a new configuration to the azure-vm-agents-plugin to add VM to AAD security group
Title: Message Title Tom Ganor commented on JENKINS-54935 Re: Adding a new configuration to the azure-vm-agents-plugin to add VM to AAD security group Hi Jie Shen, thanks for the input. I found an alternative way to solve this problem using User Assigned Managed Identities. Therefore, the new configuration that is needed is adding a user assigned identity to a VM (which is possible through the azure portal). Should I open a new ticket for this? Add Comment This message was sent by Atlassian Jira (v7.11.2#711002-sha1:fdc329d) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-54935) Adding a new configuration to the azure-vm-agents-plugin to add VM to AAD security group
Title: Message Title Tom Ganor edited a comment on JENKINS-54935 Re: Adding a new configuration to the azure-vm-agents-plugin to add VM to AAD security group Hi [~jieshe], to the best of my knowledge, there are two ways to do this manually:1. In the Azure portal you go to Azure Active Directory -> choose an existing security group -> members -> Add members (An example is attached)2. In Jenkins, in the "VM First Startup Configuration" -> "Initialization Script", it is possible to add a VM to a specific security group in AAD using the following: Add-AzureADGroupMember -ObjectId $group_id -RefObjectId $vm.Identity.PrincipalIdwhere $group_id specifies the ID of a group in Azure Active Directory, and $vm.Identity.PrincipalId specifies the ID of the Active Directory object that will be assigned as owner/manager/member (VM in our case). !image-2018-12-04-10-19-54-470.png! Add Comment This message was sent by Atlassian Jira (v7.11.2#711002-sha1:fdc329d) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-54935) Adding a new configuration to the azure-vm-agents-plugin to add VM to AAD security group
Title: Message Title Tom Ganor commented on JENKINS-54935 Re: Adding a new configuration to the azure-vm-agents-plugin to add VM to AAD security group Hi Jie Shen, to the best of my knowledge, there are two ways to do this manually: 1. In the Azure portal you go to Azure Active Directory -> choose an existing security group -> members -> Add members (An example is attached) 2. In Jenkins, in the "VM First Startup Configuration" -> "Initialization Script", it is possible to add a VM to a specific security group in AAD using the following: Add-AzureADGroupMember -ObjectId $group_id -RefObjectId $vm.Identity.PrincipalId where $group_id specifies the ID of a group in Azure Active Directory, and $vm.Identity.PrincipalId specifies the ID of the Active Directory object that will be assigned as owner/manager/member (VM in our case). Add Comment This message was sent by Atlassian Jira (v7.11.2#711002-sha1:fdc329d) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-54935) Adding a new configuration to the azure-vm-agents-plugin to add VM to AAD security group
Title: Message Title Tom Ganor updated an issue Jenkins / JENKINS-54935 Adding a new configuration to the azure-vm-agents-plugin to add VM to AAD security group Change By: Tom Ganor Attachment: MSI- adding VM to security group.png Add Comment This message was sent by Atlassian Jira (v7.11.2#711002-sha1:fdc329d) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-54935) Adding a new configuration to the azure-vm-agents-plugin to add VM to AAD security group
Title: Message Title Tom Ganor updated an issue Jenkins / JENKINS-54935 Adding a new configuration to the azure-vm-agents-plugin to add VM to AAD security group Change By: Tom Ganor Attachment: image-2018-12-04-10-19-54-470.png Add Comment This message was sent by Atlassian Jira (v7.11.2#711002-sha1:fdc329d) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-54935) Adding a new configuration to the azure-vm-agents-plugin to add VM to AAD security group
Title: Message Title Tom Ganor updated an issue Jenkins / JENKINS-54935 Adding a new configuration to the azure-vm-agents-plugin to add VM to AAD security group Change By: Tom Ganor Attachment: image-2018-12-04-10-19-54-470.png Add Comment This message was sent by Atlassian Jira (v7.11.2#711002-sha1:fdc329d) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-54935) Adding a new configuration to the azure-vm-agents-plugin to add VM to AAD security group
Title: Message Title Tom Ganor created an issue Jenkins / JENKINS-54935 Adding a new configuration to the azure-vm-agents-plugin to add VM to AAD security group Issue Type: New Feature Assignee: Azure DevOps Components: azure-vm-agents-plugin Created: 2018-11-29 09:55 Labels: configuration jenkins plug-in slave azure-ad Priority: Major Reporter: Tom Ganor Adding a new configuration to the azure-vm-agents-plugin that can be modified when a VM is deployed. The new configuration should provide us the ability to add a VM to an Azure Active Directory security group. This is necessary because a cloud security group in Azure Active Directory is required to provide a single alias for KV access policies. Add Comment
[JIRA] (JENKINS-53945) Adding a new configuration to the azure-vm-agents-plugin to enable MSI
Title: Message Title Tom Ganor commented on JENKINS-53945 Re: Adding a new configuration to the azure-vm-agents-plugin to enable MSI Hi Jie Shen, as for now, system assigned managed identity should be enough. Add Comment This message was sent by Atlassian Jira (v7.11.2#711002-sha1:fdc329d) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-53945) Adding a new configuration to the azure-vm-agents-plugin to enable MSI
Title: Message Title Tom Ganor created an issue Jenkins / JENKINS-53945 Adding a new configuration to the azure-vm-agents-plugin to enable MSI Issue Type: New Feature Assignee: Azure DevOps Attachments: MSI_config.png Components: azure-vm-agents-plugin Created: 2018-10-08 13:38 Labels: plugin jenkins configuration slave Priority: Critical Reporter: Tom Ganor Adding a new configuration to the azure-vm-agents-plugin that can be modified when a VM is deployed. The new configuration should provide us the ability to enable MSI (in azure portal it is under "settings" -> "Identity (Preview)" -> "status") - a screenshot is attached. Add Comment
