testing rg level removal with role def

Azure · Feb 25, 2022 · 94c583d · 94c583d
1 parent 7e52720
commit 94c583d
Show file tree

Hide file tree

Showing 2 changed files with 27 additions and 2 deletions.
diff --git a/.github/workflows/ms.authorization.roledefinitions.yml b/.github/workflows/ms.authorization.roledefinitions.yml
@@ -81,7 +81,8 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        parameterFilePaths: ['parameters.json', 'min.parameters.json']
+        parameterFilePaths:
+          ['parameters.json', 'min.parameters.json', 'rg.parameters.json']
     steps:
       - name: 'Checkout'
         uses: actions/checkout@v2
@@ -98,7 +99,7 @@ jobs:
       - name: 'Using parameter file [${{ matrix.parameterFilePaths }}]'
         uses: ./.github/actions/templates/validateModuleDeployment
         with:
-          templateFilePath: '${{ env.modulePath }}/.bicep/nested_roleDefinitions_sub.bicep'
+          templateFilePath: '${{ env.modulePath }}/deploy.bicep'
           parameterFilePath: '${{ env.modulePath }}/.parameters/${{ matrix.parameterFilePaths }}'
           location: '${{ env.defaultLocation }}'
           resourceGroupName: '${{ env.resourceGroupName }}'

diff --git a/arm/Microsoft.Authorization/roleDefinitions/.parameters/rg.parameters.json b/arm/Microsoft.Authorization/roleDefinitions/.parameters/rg.parameters.json
@@ -0,0 +1,24 @@
+{
+    "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentParameters.json#",
+    "contentVersion": "1.0.0.0",
+    "parameters": {
+        "roleName": {
+            "value": "<<namePrefix>>-az-testRole-rg-min"
+        },
+        "description": {
+            "value": "Test Custom Role Definition Min RG"
+        },
+        "actions": {
+            "value": [
+                "Microsoft.Compute/galleries/read",
+                "Microsoft.Compute/galleries/images/read"
+            ]
+        },
+        "subscriptionId": {
+            "value": "<<subscriptionId>>"
+        },
+        "resourceGroupName": {
+            "value": "<<resourceGroupName>>"
+        }
+    }
+}