NLB-7299: docs - add system-assigned managed identity requirement to …#1659
Open
rnandwal-f5 wants to merge 10 commits intonginx:mainfrom
Open
NLB-7299: docs - add system-assigned managed identity requirement to …#1659rnandwal-f5 wants to merge 10 commits intonginx:mainfrom
rnandwal-f5 wants to merge 10 commits intonginx:mainfrom
Conversation
github-actions
bot
added
documentation
amudukutore
reviewed
Jan 16, 2026
amudukutore
reviewed
Jan 16, 2026
Contributor
amudukutore
left a comment
amudukutore
left a comment
There was a problem hiding this comment.
Looking through the changes here, the call out to add a system assigned MI is repeated across multiple sections which seems a bit excessive. Can we only add it in the section on enabling logs and metrics?
amudukutore
reviewed
Jan 20, 2026
arpith-f5
reviewed
Jan 20, 2026
content/nginxaas-azure/getting-started/managed-identity-portal.md
Outdated
Show resolved
Hide resolved
content/nginxaas-azure/getting-started/managed-identity-portal.md
Outdated
Show resolved
Hide resolved
content/nginxaas-azure/getting-started/managed-identity-portal.md
Outdated
Show resolved
Hide resolved
content/nginxaas-azure/getting-started/managed-identity-portal.md
Outdated
Show resolved
Hide resolved
content/nginxaas-azure/getting-started/managed-identity-portal.md
Outdated
Show resolved
Hide resolved
rnandwal-f5
force-pushed
the
NLB-7299-Make-SystemMI-Required
branch
2 times, most recently
from
b3cf533 to
94fdd4f
Compare
Contributor
|
waiting for the suggestions and questions from @arpith-f5 to be addressed before my review |
arpith-f5
reviewed
Jan 29, 2026
content/nginxaas-azure/getting-started/managed-identity-portal.md
Outdated
Show resolved
Hide resolved
content/nginxaas-azure/getting-started/managed-identity-portal.md
Outdated
Show resolved
Hide resolved
content/nginxaas-azure/getting-started/managed-identity-portal.md
Outdated
Show resolved
Hide resolved
content/nginxaas-azure/getting-started/managed-identity-portal.md
Outdated
Show resolved
Hide resolved
Contributor
|
@rnandwal-f5 lets update the changelog also https://docs.nginx.com/nginxaas/azure/changelog |
arpith-f5
approved these changes
Feb 3, 2026
JTorreG
approved these changes
Feb 4, 2026
…deployment documentation System-assigned MI now required for new deployments Updates all deployment documentation to reflect systemMI requirement: - Portal: Automatically creates systemMI - CLI/Terraform/ARM/SDK: Must set identity.type="SystemAssigned" - SystemMI cannot be removed once created - Legacy deployments continue to work Updated deployment guides, client tools docs, managed identity docs, monitoring prerequisites, and SSL/TLS prerequisites with requirement notes and backward compatibility information.
…ions Removed duplicate references to system-assigned managed identity being required, as this is already clearly stated in the overview section and nginxaas-azure-snippets docs.Streamlined content to avoid repetition while maintaining clarity.
- Remove systemMI requirement from disaster-recovery and add it to terraform. - fix docs and remove duplcate callout in mananged-identity-portal.md
…signed managed identity - Add new section "Checking for deployments without system assigned managed identity" - Include bash script using Azure CLI to list NGINXaaS deployments missing system MI - Add prerequisite note about Azure CLI login and subscription selection
…move required comment for systemMI
…tity requirement Document the new requirement for system-assigned managed identity on all NGINXaaS deployments.
…t for managed identity check Replaced bash script with Resource Graph query that can be run directly in Azure Portal. The query works across all subscriptions and doesn't require Azure CLI installation.
- Consolidate system-assigned identity viewing and management sections - Clarify user-assigned identity removal impacts and move it under remove UAMI section
Co-authored-by: Jon Torre <[email protected]>
…o changelog Add steps to add system MI to deployments which dont have it, along with a call note stating that it can only be used for the deployments which dont have system MI Update changelog to link steps to add system MI.
rnandwal-f5
force-pushed
the
NLB-7299-Make-SystemMI-Required
branch
from
ca5edf3 to
96c6e0c
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
4 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Updates documentation to reflect that system-assigned managed identity (systemMI) is now required for Geneva logging and monitoring in NGINXaaS for Azure.
Changes
Deployment Guides
--identity type="SystemAssigned"requirement to all examplesKey Points
identity.type="SystemAssigned"Note: Existing deployments are not affected by this change.
Checklist
Before sharing this pull request, I completed the following checklist:
Footnotes
Potentially sensitive information includes personally identify information (PII), authentication credentials, and live URLs. Refer to the style guide for guidance about placeholder content. ↩