Configuring Roles for Upgrading Functions in Enhanced Security Clusters
This documentation is for Kyvos 2026.8.x. To view documentation for other Kyvos versions, click here. |
|---|
Overview
This section describes how to configure the required Azure roles and permissions to upgrade Kyvos Functions when clusters are deployed with enhanced security.
If your cluster was deployed with enhanced security, you need to perform the following steps after upgrading to the latest version.
On this page:
Creating a custom role
Log in to the Azure portal.
Navigate to Virtual Network and click Properties on the navigation bar.
Copy the Resource ID and paste it onto a notepad. You will need this for creating the custom role.
Navigate to Resource Group and click Access Control (IAM) on the navigation bar.
Click Add > Add custom role as shown below.
Click the JSON tab, and then click Edit.
Delete the existing JSON text.
Copy the text from the AzureCustomRole_EnhancedSecurity.json file from the Azure Installation Files folder and paste it into the JSON textbox.
Replace the <Virtual Network Resource ID> with the respective Resource IDs that you copied earlier (in step 2).
Click Save. The JSON automatically assigns the required permissions.
Now go to the Basics tab, provide a unique name for your role.
Click on Review + Create. Then click Create.
Attach Role to User Assigned Manager Identity
Once you have created a custom role on Azure, you need to attach the role to the User Assigned Manager Identity.
To attach role to user Assigned Manager Identity, perform the following steps.
Go to the Virtual Networks and click Access Control (IAM).
Click Add > Add role assignment.
On the Role Assignment pane, enter details as:
Role: Search and select the custom role that you created (in the previous steps).
Assign Access To: Select the Managed Identity to which you want to add this role.
Click Review+Assign.