Skip to content

Reading deployment state file from Azure Blob Storage for Incremental Deployment #434

Description

@d-cegielka

Currently, reading a json file from Azure Blob Storage uses the Get-AzStorageContainer function which requires permission to list containers on storage. In the case of saving changes, the Set-AzStorageBlobContent function is used which refers directly to the file and the permission to list containers is not needed.

Is your feature request related to a problem? Please describe.
The service principal that I have does not have permission to list containers, which is why I get the error

"##[error]This request is not authorized to perform this operation using this permission."

and I have a problem with using the Incremental Deployment functionality.

Describe the solution you'd like
I propose replacing the Get-AzStorageContainer function with the Get-AzStorageBlobContent function (or another one) which would require less permissions - it would read the file directly from the path (container).
DeploymentState.class.ps1

Additional context
In the organization, the permission to list containers is not granted, which is why we have a problem using Incremental Deployment.

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Type

    No type

    Fields

    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions