Skip to content

Commit 02f7e56

Browse files
committed
admin RBACs
1 parent 29e054f commit 02f7e56

2 files changed

Lines changed: 12 additions & 1 deletion

File tree

src/a2a/status_automation.ps1

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,7 @@ if () {
1111

1212
# Check automation endpoint
1313
try {
14-
= Invoke-RestMethod -Uri "https://zava-8e5461ee-app.azurewebsites.net/a2a/automation/status" -TimeoutSec 5
14+
= Invoke-RestMethod -Uri "https://zava-6a7d57fb-app.azurewebsites.net/a2a/automation/status" -TimeoutSec 5
1515
Write-Host "Automation Status: "
1616
} catch {
1717
Write-Host "Automation endpoint not accessible"

terraform-infrastructure/main.tf

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -283,6 +283,17 @@ resource "azurerm_search_service" "search" {
283283
identity { type = "SystemAssigned" }
284284
}
285285

286+
# Grant the current Terraform principal access to Search *data-plane* operations
287+
# (view/create indexes, query documents). Without this, the Azure Portal may not
288+
# show indexes even if they exist.
289+
resource "azurerm_role_assignment" "search_index_data_contributor_user" {
290+
scope = azurerm_search_service.search.id
291+
role_definition_name = "Search Index Data Contributor"
292+
principal_id = local.principal_id
293+
294+
depends_on = [azurerm_search_service.search]
295+
}
296+
286297
resource "azurerm_log_analytics_workspace" "law" {
287298
name = local.log_analytics_name
288299
location = var.location

0 commit comments

Comments
 (0)