New answers tagged

0 votes

What is the right way to assign Network Contributor Role to an AKS cluster via ARM / Bicep template?

I am not sure why previous answer considered correct. You have used kubelet identity here. This is used to authenticate with azure container registries, but in your case you must use Cluster (Control ...
Alexey Tarasov's user avatar
0 votes
Accepted

Get the list of azure storage accounts that use TLS_1.0

If your question is just to see all the storage accounts with the TLS version not being 1.2 I would advice you to use the Azure Resource Graph Explorer. It is available in the Azure Portal (just ...
GetShifting's user avatar
1 vote

Azure SQL bacpac import job stuck - timeout on it?

I know this is an old post - I just had a similar issue: I was trying to import a bacpac from azure storage via private link. It was stuck at 1% for ages. I then found that I had to authorise the ...
James's user avatar
  • 11
1 vote

How I can add GET query parameters to an Nginx proxy?

There's no reason to do what you're doing. You have to pay twice for bandwidth if you do it this way - once for Azure and once for whatever service you use for hosting nginx. Generally the reason for ...
vidarlo's user avatar
  • 8,992
-1 votes

How I can add GET query parameters to an Nginx proxy?

I found an docker image for a nginx proxy to cloud storage accounts and here is an example config for an azure storage account location / { proxy_set_header Host {{ .Env....
Turdie's user avatar
  • 2,534
0 votes

403 Server failed to authenticate the request. Make sure the value of Authorization header is formed correctly including the signature

I'm not sure if pdf is supported for static content You can serve static content (HTML, CSS, >JavaScript, and image files) directly from a storage container named $web https://learn.microsoft.com/...
Turdie's user avatar
  • 2,534
1 vote
Accepted

Public DNS for a domain on Route 53 and would like to use Azure Private DNS for internal resolution

You would need to setup a self hosted DNS server with conditional forwarders. For example a docker image on Ubuntu who runs unbound where you have a forwarder zone for you internal domain and the rest ...
Turdie's user avatar
  • 2,534
0 votes

Azure managed identity Arc enabled server and operator security

Just an update incase anyone else has this scenario. We put an app service infront of the keyvault, the appservice is locked by IP (using NSG), and uses certificate authentication. The certificate is ...
Tsk's user avatar
  • 3
0 votes
Accepted

Azure Load balancer traffic distribution

Session persistence means that requests from the same source IP to the same destination IP will go to the same server on your backend (if you use the three-tuple option, then it is the same source, ...
Sam Cogan's user avatar
  • 39k
0 votes

Proper way of connecting to third party Outlook calendars

https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/v2-howto-app-gallery-listing See here you can request an app The advice for an account is very bad, an enterprise application is the ...
Turdie's user avatar
  • 2,534
0 votes

Automate VM backup to trigger once every 6 months

Sorry for not completely answer the question but Azure Backup has long term backup. Im sure there is an option to store it 6 months Here is an PowerShell script to configure that # Connect to ...
Turdie's user avatar
  • 2,534
1 vote

Computer can't join AD over point-to-site VPN to domain controller VM in Azure

For a client to reach a domain controller you need a site to site vpn, because the vpn needs to be available before user logon. A P2S vpn is started after a user logs on. For example group policy ...
Turdie's user avatar
  • 2,534
1 vote

Can Azure data centers be considered complaint with Uptime Institute's Tier 3 Classification requirements?

According to Microsoft's document called Standard Response to Request for Information Microsoft Azure Security, Privacy, and Compliance, page 49 onwards, Microsoft intentionally does not have an ...
msiemens's user avatar
  • 111
0 votes

What is the "kind" of a resource in Azure ARM Templates?

Unfortunately, @Alan McBees answer is wrong, the list is refering to App Services (Microsoft.Web/sites) and not App Service Plans (Microsoft.Web/serverfarms), and also is not complete (see linked ...
BloodyMettle's user avatar
0 votes

Computer can't join AD over point-to-site VPN to domain controller VM in Azure

Are you able to resolve DNS name from your client using: nslookup <domain name> If you are able to resolve the domain then you need to check if there already a computer account created with ...
karamkaran's user avatar
0 votes

Automate VM backup to trigger once every 6 months

Veeam Backup Community Edition. It's free for under 10 resources.
LemonFridge's user avatar
1 vote

Unlock all Azure file share locks

I ran into this exact issue recently. You can unlock the file using the Close-AzStorageFileHandle command from the azure cli. After unlocking it you should be able to delete it. You connect to the ...
Diamondrubix's user avatar
-1 votes

Remove a file from a WEB App on Linux in Azure

Connect with ftp or sftp to the web app, and check where the plugin stores it files and delete those. https://winscp.net/eng/docs/guide_microsoft_azure#appservice If that doesn't work try to restart ...
Turdie's user avatar
  • 2,534
0 votes

nginx on azure remote server works with simple index.php but not on project

I found this example config for Lavarel maybe it's helpful server { listen 80; listen [::]:80; server_name example.com; root /srv/example.com/public; add_header X-Frame-Options &...
Turdie's user avatar
  • 2,534
0 votes

Azure Files performance for a remote IPSEC VPN connected site

There seems to be a feature in Preview called metadata caching which might improve performance Metadata caching is an enhancement for SMB Azure premium file shares aimed to reduce metadata latency, ...
Turdie's user avatar
  • 2,534
1 vote
Accepted

Azure Linux App Service won't keep up two nodes

This was the result of me not reading the manual. In short, here's what happened: The health check was being redirected, because I had middleware that would redirect for anything other than the ...
Jeff Putz's user avatar
  • 123
0 votes

Is there any charge to monitor a azure resource using API through Zabbix?

For metrics the First 1,000,000 API calls per month are free.
Turdie's user avatar
  • 2,534
0 votes

Is there any charge to monitor a azure resource using API through Zabbix?

Assuming you are just hitting the Azure Monitor APIs, which it looks like it is, then there is no cost for this. If you started storing log data in log analytics, or created custom metrics then this ...
Sam Cogan's user avatar
  • 39k
0 votes
Accepted

Azure managed identity Arc enabled server and operator security

If the operator has the ability to access the terminal and to install either the Azure CLI or Azure PowerShell (or it is already there), then they can use this to log in to Azure with the managed ...
Sam Cogan's user avatar
  • 39k
0 votes

Azure managed identity Arc enabled server and operator security

If an operator has local access to the machine and sufficient permissions, they could potentially use the managed identity context to run PowerShell commands or other tools to interact with Azure Key ...
Turdie's user avatar
  • 2,534
0 votes

How can I enable Ping on an Azure Linux VM

Old thread, but I found this (and not much else) when I was having an issue with pinging public IP addresses from my Azure VM (Linux in my case). It turns out that Azure NAT Gateway does not support ...
Jonathan Nathanson's user avatar
1 vote

Files in Azure file share can only be opened as read-only on one specific Profile on Windows 10 - (DFS-N with Domain Based Authentication)

We had a On-prem DC at this location, Somehow after we decommission this DC and now the Clients are authenticating directly with the DC in Azure. I re-applied the NTFS permission using the "...
work's user avatar
  • 21

Top 50 recent answers are included