A logistics company runs a batch delivery processing application on an Azure Virtual Machine Scale Set named `vmss-logistics` that is configured with a manual upgrade policy. You need to configure the scale set to execute a setup script stored in a secured Azure Storage blob container. The script must be downloaded and executed securely using a system-assigned managed identity. Which sequence of actions should you perform to configure the scale set and apply the script to the instances?
- 1Enable the system-assigned managed identity on the `vmss-logistics` scale set.
- 2Assign the Storage Blob Data Reader role to the scale set's managed identity on the storage account containing the script.
- 3Add the Custom Script Extension to the scale set model, referencing the script blob URI and the managed identity configuration.
- 4Manually upgrade the existing instances of `vmss-logistics` to the latest model.
Cevap
First, enable the system-assigned managed identity on the scale set. Second, assign the Storage Blob Data Reader role to the scale set's identity. Third, add the Custom Script Extension to the scale set configuration. Finally, manually upgrade the existing instances to apply the updated model.
The correct sequence establishes the identity first, grants the required access permissions, adds the extension configuration to the scale set model, and then forces an upgrade on the existing instances to pull the model update.
Adım Adım Çözüm
Anahtar Kavram
Configuring Virtual Machine Scale Set extensions and managed identities under a manual upgrade policy.