Skip to content

Assign the feedback table role by hand #216

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
andig merged 1 commit into from
Oct 16, 2026
Merged

Assign the feedback table role by hand #216

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
15 changes: 5 additions & 10 deletions infra/main.bicep
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -54,16 +54,11 @@ resource feedbackTable 'Microsoft.Storage/storageAccounts/tableServices/tables@2
name: 'explanations'
}

// Storage Table Data Contributor for the container app's managed identity
resource feedbackWriter 'Microsoft.Authorization/roleAssignments@2022-04-01' = {
name: guid(feedbackStorage.id, containerApp.id, 'table-data-contributor')
scope: feedbackStorage
properties: {
roleDefinitionId: subscriptionResourceId('Microsoft.Authorization/roleDefinitions', '0a9a7e1f-b9d0-4cc4-a60d-0319b160aebd')
principalId: containerApp.identity.principalId
principalType: 'ServicePrincipal'
}
}
// The container app writes with its managed identity. Its Storage Table Data Contributor role on
// this account is assigned by hand: the deploy principal is Contributor and may not write role
// assignments. Once, after the first deploy that creates the account:
// az role assignment create --role "Storage Table Data Contributor" --scope <feedbackStorage.id> \
// --assignee-object-id <containerApp.identity.principalId> --assignee-principal-type ServicePrincipal

@description('Custom hostname served by the container app')
param customHostname string = 'optimizer.evcc.io'
Expand Down
Loading