Devops_interview_questions/KV.Template.json at master · RNAGENDRABABU/Devops_interview_questions · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
{
	"$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#",
	"contentVersion": "1.0.0.0",
	"parameters": {
		"keyVaultName": {
			"type": "string",
			"metadata": {
				"description": "Specifies the keyvault name."
			}
		},
		"msiPolicies": {
			"type": "array",
			"metadata": {
				"description": "Specifies the MSIs to be granted permissions."
			},
			"defaultValue": []
		},
		"principalPolicies": {
			"type": "array",
			"metadata": {
				"description": "Specifies the principals to be granted permissions."
			},
			"defaultValue": []
		},
		"compoundPolicies": {
			"type": "array",
			"metadata": {
				"description": "Specifies the compound identities to be granted permissions."
			},
			"defaultValue": []
		}
	},
	"variables": {
		"tenantId": "[subscription().tenantId]",
		"location": "[resourceGroup().location]",
		"copy": [
			{
				"name": "msiPoliciesOutput",
				"count": "[length(parameters('msiPolicies'))]",
				"input": {
					"identity": {
						"principalId": "[parameters('msiPolicies')[copyIndex('msiPoliciesOutput')].identity.principalId]",
						"applicationId": null,
						"tenantId": "[parameters('msiPolicies')[copyIndex('msiPoliciesOutput')].identity.tenantId]"
					},
					"certificatePermissions": "[parameters('msiPolicies')[copyIndex('msiPoliciesOutput')].certificatePermissions]",
					"keyPermissions": "[parameters('msiPolicies')[copyIndex('msiPoliciesOutput')].keyPermissions]",
					"secretPermissions": "[parameters('msiPolicies')[copyIndex('msiPoliciesOutput')].secretPermissions]",
					"storagePermissions": "[parameters('msiPolicies')[copyIndex('msiPoliciesOutput')].storagePermissions]"
				}
			}
		],
		"policies": "[union(parameters('principalPolicies'), parameters('compoundPolicies'), variables('msiPoliciesOutput'))]"
	},
	"resources": [
		{
			"name": "[parameters('keyVaultName')]",
			"type": "Microsoft.KeyVault/vaults",
			"apiVersion": "2019-09-01",
			"location": "[variables('location')]",
			"properties": {
				"enabledForDeployment": true,
				"enabledForTemplateDeployment": true,
				"enabledForVolumeEncryption": false,
				"copy": [
					{
						"name": "accessPolicies",
						"count": "[length(variables('policies'))]",
						"mode": "parallel",
						"input": {
							"tenantId": "[variables('policies')[copyIndex('accessPolicies')].identity.tenantId]",
							"applicationId": "[variables('policies')[copyIndex('accessPolicies')].identity.applicationId]",
							"objectId": "[variables('policies')[copyIndex('accessPolicies')].identity.principalId]",
							"permissions": {
								"certificates": "[variables('policies')[copyIndex('accessPolicies')].certificatePermissions]",
								"keys": "[variables('policies')[copyIndex('accessPolicies')].keyPermissions]",
								"secrets": "[variables('policies')[copyIndex('accessPolicies')].secretPermissions]",
								"storage": "[variables('policies')[copyIndex('accessPolicies')].storagePermissions]"
							}
						}
					}
				],
				"tenantId": "[variables('tenantId')]",
				"sku": {
					"name": "Standard",
					"family": "A"
				}
			}
		}
	]
}