启用防火墙后，可以从Azure Devops托管代理访问存储帐户 [英] Access to storage account from azure devops hosted agent when firewall is enabled

问题描述

我想知道是否有一种方法可以配置存储帐户防火墙以允许Azure devops服务.有一个绕过选项允许Microsoft服务访问受保护的存储帐户，但似乎Azure devops不包括在 它.

用于此目的的用例是通过具有terraform的azure devops管道创建一个存储帐户.在terraform代码上，我正在使用防火墙规则自行创建存储帐户，以仅允许vnet访问该存储帐户.在相同的 时间，我正在该存储帐户中创建文件共享.问题是，如果我们配置了防火墙，则存储帐户将根据网络规则受到保护，因此我们将拒绝创建文件共享的访问权限.

谢谢.

解决方案

您可以与屏幕截图共享错误代码吗?另外，您能否与terraform共享通过azure devops管道通过azure devops管道创建的存储帐户所要遵循的文档，以帮助更好地解决此问题?

Hi,

I would like to know if there is a way to configure the storage account firewall to allow Azure devops service. There is a bypass option to allow Microsoft services to access a protected storage account but it appears that Azure devops is not included on it. 

The use case for that purpose is to create a storage account through azure devops pipeline with terraform. On terraform code, i'm creating the storage account it self with firewall rule to allow only the vnet to access to this storage account. In the same time, i'm creating a file share in that storage account. Problem is that if we configure the firewall, the storage account become protected according to the network rule so we get an access denied for the file share creation.

Thank you. 

解决方案

Could you share the error code with screenshot ? Also, could you share the document which you are following to create storage account through azure devops pipeline with terraform to help better on this?

这篇关于启用防火墙后，可以从Azure Devops托管代理访问存储帐户的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！