Этот коммит содержится в:
Ihar Hancharenka 2023-08-23 19:22:12 +03:00
родитель eb174f3aff
Коммит c56d5315f5
15 изменённых файлов: 124 добавлений и 2 удалений

25
devops/cloud/azure/managed-identity.txt Обычный файл
Просмотреть файл

@ -0,0 +1,25 @@
https://learn.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/
https://learn.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overview
https://learn.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/services-id-authentication-support
https://learn.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/managed-identities-status
2022
Savill - Microsoft Azure Managed Identity Deep Dive of 48:39
https://www.youtube.com/watch?v=rC1TV0_sIrM
2020
CloudMonk - Azure Managed Identities - explained in plain English in 5 mins with a step by step demo of 7:32
https://www.youtube.com/watch?v=1EoiGnQq14Y
created at AD
system-assigned
(tightly coupled to az-resource like VM)
auto-lifecycle-management,
once created, can use it (identity) to grant access to, example, DB
identity is a special type of service-principal (you don't want to worry about it)
with better lifecycle mgmt (if delete obj, id is also deleted)
at portal - we can go to VM and enable system identity, then - go to DB and assign this id
cannot be shared with multiple resources
user-assigned
created independently on resource, switch tab -> user assigned
+ at IAM -> need to add access to user-assigned identity
manual-lifecycle-management
can be shared with multiple resources

4
devops/cloud/azure/sdk/java/articles.txt Обычный файл
Просмотреть файл

@ -0,0 +1,4 @@
2019
https://spring.io/blog/2019/01/10/bootiful-azure-global-scale-data-access-with-cosmosdb-3-6
https://spring.io/blog/2019/01/07/bootiful-azure-sql-based-data-access-with-microsoft-sql-server-2-6
https://spring.io/blog/2019/01/03/bootiful-azure-taking-your-first-steps-with-microsoft-azure-1-6

Просмотреть файл

@ -1,6 +1,7 @@
https://docs.microsoft.com/en-us/azure/java/?view=azure-java-stable
https://docs.microsoft.com/en-us/azure/java/
https://azure.github.io/azure-sdk-for-java/
https://github.com/Azure/azure-sdk-for-java
https://learn.microsoft.com/en-us/azure/developer/java/migration/
https://github.com/Azure/azure-sdk-for-java/wiki/Custom-HTTP-clients

42
devops/cloud/azure/sdk/java/identity.txt Обычный файл
Просмотреть файл

@ -0,0 +1,42 @@
https://learn.microsoft.com/en-us/java/api/overview/azure/identity-readme
https://learn.microsoft.com/en-us/azure/developer/java/sdk/identity-azure-hosted-auth#default-azure-credential
https://github.com/Azure/azure-sdk-for-java/wiki/Azure-Identity-Examples
CredentialBuilderBase
AadCredentialBuilderBase
InteractiveBrowserCredentialBuilder
ManagedIdentityCredentialBuilder
https://github.com/Azure/azure-sdk-for-java/wiki/Azure-Identity-Examples#authenticating-in-azure-with-managed-identity
OnBehalfOf
https://learn.microsoft.com/en-us/java/api/com.azure.identity.onbehalfofcredential
UsernamePassword
ActiveDirectoryMisc
https://learn.microsoft.com/en-us/sql/connect/jdbc/connecting-using-azure-active-directory-authentication
DefaultAzureCredentialBuilder
private ArrayList<TokenCredential> getCredentialsChain() {
ArrayList<TokenCredential> output = new ArrayList<TokenCredential>(8);
output.add(new EnvironmentCredential(identityClientOptions.clone()));
output.add(getWorkloadIdentityCredential());
output.add(new ManagedIdentityCredential(managedIdentityClientId, managedIdentityResourceId, identityClientOptions.clone()));
output.add(new SharedTokenCacheCredential(null, IdentityConstants.DEVELOPER_SINGLE_SIGN_ON_ID,
tenantId, identityClientOptions.clone()));
output.add(new IntelliJCredential(tenantId, identityClientOptions.clone()));
output.add(new AzureCliCredential(tenantId, identityClientOptions.clone()));
output.add(new AzurePowerShellCredential(tenantId, identityClientOptions.clone()));
output.add(new AzureDeveloperCliCredential(tenantId, identityClientOptions.clone()));
return output;
}
managed ids
https://learn.microsoft.com/en-us/azure/app-service/overview-managed-identity
https://learn.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/
https://learn.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overview
https://learn.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/tutorial-windows-vm-access-sql
reference
https://learn.microsoft.com/en-us/java/api/com.azure.identity
sample
https://learn.microsoft.com/en-us/azure/app-service/tutorial-connect-msi-azure-database

3
devops/cloud/azure/sdk/java/servicebus.txt Обычный файл
Просмотреть файл

@ -0,0 +1,3 @@
2020
Long - How to use the Spring framework to access Azure Service Bus of 19:09
https://www.youtube.com/watch?v=3zoDqgjjT6E

4
devops/cloud/azure/sdk/java/sql.txt Обычный файл
Просмотреть файл

@ -0,0 +1,4 @@
2020
Long - How to leverage the Spring framework with Azure SQL Database of 22:54
https://www.youtube.com/watch?v=RG6UqPJdqIs
! az sql ... cli stuff, including firewall rules

3
devops/cloud/azure/sdk/java/storage.txt Обычный файл
Просмотреть файл

@ -0,0 +1,3 @@
2020
Long - How to use the Spring framework to access Azure Storage of 7:37
https://www.youtube.com/watch?v=d4SfosPWz8s

18
devops/cloud/azure/sdk/js/az-identity.txt Обычный файл
Просмотреть файл

@ -0,0 +1,18 @@
https://www.npmjs.com/package/@azure/identity
https://www.npmjs.com/package/@azure/identity#environment-variables
https://learn.microsoft.com/en-us/azure/developer/javascript/sdk/authentication/overview
https://github.com/Azure/azure-sdk-for-js/blob/main/sdk/servicebus/service-bus/README.md#using-an-azure-active-directory-credential
https://stackoverflow.com/questions/67598663/trying-to-use-managed-identity-with-azure-service-bus?rq=2
DefaultAzureCredential // used by cust
Tries EnvironmentCredential, ManagedIdentityCredential, AzureCliCredential, AzurePowerShellCredential,
and other credentials sequentially until one of them succeeds.
AzureCliCredential
ManagedIdentityCredential
https://learn.microsoft.com/en-us/javascript/api/@azure/identity/managedidentitycredential
? with vault
samples
https://github.com/Azure/azure-sdk-for-js/blob/main/sdk/identity/identity/samples/AzureIdentityExamples.md
! complex auth-s

Просмотреть файл

@ -0,0 +1,6 @@
https://www.npmjs.com/package/@azure/service-bus
https://learn.microsoft.com/en-us/javascript/api/%40azure/service-bus/
https://learn.microsoft.com/en-us/javascript/api/overview/azure/service-bus
https://learn.microsoft.com/en-us/javascript/api/overview/azure/service-bus-readme
https://github.com/Azure/azure-sdk-for-js/blob/main/sdk/servicebus/service-bus/TROUBLESHOOTING.md
https://github.com/Azure/azure-sdk-for-js/tree/main/sdk/servicebus/service-bus/samples

Просмотреть файл

@ -0,0 +1,5 @@
https://github.com/Azure/azure-sdk-for-js
https://github.com/Azure/azure-sdk-for-js/blob/main/documentation/
https://www.npmjs.com/~azure-sdk
https://learn.microsoft.com/en-us/azure/developer/javascript/
https://learn.microsoft.com/en-us/javascript/api/overview/azure/

Просмотреть файл

@ -54,6 +54,10 @@ C-G
C-F12
Navigate|File Structure
Build
C-F2
Stop Build
Debugging
F8

Просмотреть файл

@ -0,0 +1,5 @@
https://github.com/microsoft/azure-spring-apps-training/blob/master/06-build-a-reactive-spring-boot-microservice-using-cosmosdb
2020
Long - How to use Spring and Initializr with Maven and Azure Cosmos DB of 9:53
https://www.youtube.com/watch?v=IWQboyBohEI

Просмотреть файл

@ -1,5 +1,7 @@
https://azure.microsoft.com/en-us/blog/product/azure-spring-cloud/
https://github.com/microsoft/azure-spring-apps-training
2021
https://spring.io/blog/2021/05/13/automate-spring-boot-application-deployments-to-azure
2020
https://spring.io/blog/2020/09/02/hello-azure-spring-cloud
https://azure.microsoft.com/en-us/blog/azure-spring-cloud-a-fully-managed-service-for-spring-boot-apps-is-now-generally-available/