azure - DeployIfnotexists azure 策略失败并出现错误
问题描述
我是 azure 策略的新手,我正在尝试为存储帐户编写 deployifnotexists 策略,该策略将为 300 天的容器启用时间点还原。它在部署时出错,错误提示 HttpResourceNotFound 和随机 http 请求 url。我想知道该政策是否正确,这是我创建的我正在使用的代码:
{
"properties": {
"displayName": "storage-pointintime",
"policyType": "Custom",
"mode": "All",
"metadata": {
},
"parameters": {
"effect": {
"type": "String",
"metadata": {
"displayName": "Effect",
"description": "Enable or disable the execution of the policy."
},
"allowedValues": [
"DeployIfNotExists",
"Deny",
"Audit"
],
"defaultValue": "DeployIfNotExists"
},
"retentionInDays": {
"type": "String",
"metadata": {
"displayName": "Retention Days",
"description": "Set the number of Retention Days."
},
"defaultValue": "300"
}
},
"policyRule": {
"if": {
"allOf": [
{
"field": "type",
"equals": "Microsoft.Storage/storageAccounts"
}
]
},
"then": {
"effect": "[parameters('effect')]",
"details": {
"type": "Microsoft.Storage/storageAccounts/blobServices/restorePolicy",
"roleDefinitionIds": [
"/providers/Microsoft.Authorization/roleDefinitions/<id>"
],
"existenceCondition": {
"field": "Microsoft.Storage/storageAccounts/blobServices/restorePolicy.days",
"equals": "[parameters('retentionInDays')]"
},
"deployment": {
"properties": {
"mode": "incremental",
"template": {
"$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#",
"contentVersion": "1.0.0.0",
"parameters": {
"storageAccounts": {
"type": "string"
},
"retentionDays": {
"type": "string"
}
},
"resources": [
{
"name": "[concat(parameters('storageAccounts'),'/default')]",
"type": "Microsoft.Storage/storageAccounts/blobServices/restorePolicy",
"apiVersion": "2021-04-01",
"properties": {
"retentionInDays": "[parameters('retentionDays')]"
}
}
]
},
"retentionDays": {
"value": "[parameters('retentionInDays')]"
}
}
}
}
}
}
}
}
解决方案
如果要为容器启用时间点还原,类型应为Microsoft.Storage/storageAccounts/blobServices
. Azure ARM 模板不提供类型Microsoft.Storage/storageAccounts/blobServices/restorePolicy
.
例如
{
"name": "[concat(parameters('storageAccountName'), '/default')]",
"type": "Microsoft.Storage/storageAccounts/blobServices",
"apiVersion": "2019-06-01",
"properties": {
"restorePolicy": {
"enabled": "[parameters('isContainerRestoreEnabled')]",
"days": "[parameters('containerRestorePeriodDays')]"
},
"deleteRetentionPolicy": {
"enabled": "[parameters('isBlobSoftDeleteEnabled')]",
"days": "[parameters('blobSoftDeleteRetentionDays')]"
},
"containerDeleteRetentionPolicy": {
"enabled": "[parameters('isContainerSoftDeleteEnabled')]"
},
"changeFeed": {
"enabled": "[parameters('changeFeed')]"
},
"isVersioningEnabled": "[parameters('isVersioningEnabled')]"
},
"dependsOn": [
"[concat('Microsoft.Storage/storageAccounts/', parameters('storageAccountName'))]"
]
}
推荐阅读
- sql - pgSQL 在 SELECT 查询之前在其函数中显示错误
- php - Symfony 4 形式 - 变量形式不存在
- c# - 是否可以在启动时显示 DisplayAlert (Xamarin.Forms)
- npm - NPM `EACCES` 错误,不能通过更改默认目录来修复
- php - SocialEngine:使用 Zend_Db_Table_Row_Abstract::save() 更新密码
- javascript - 当用户在 React 中单击窗口上的后退按钮时,将道具传递给您来自的组件
- c# - OpenID Connect AAD 用户模拟
- python - List local running services on Windows 10 using Python?
- codeigniter - 来自控制器的 post 变量未在视图页面 codeigniter 的模式中显示
- jquery - 如果不为空,则 Jquery 从一个字段复制到另一个字段