...
Set up a Microsoft Azure account and create a resource manager in Azure public cloud.
Install and set up an Azure command line interface (CLI) as described in the Installing the Azure CLI section. This is required to deploy the vNIOS appliance from the Azure CLI.
Configure an on-prem Infoblox Grid or Grid Master. This is required only if you want to join the vNIOS for Azure instance to the on-prem Grid. For more information, refer to the Infoblox NIOS Documentation.
Create an Azure managed disk from the Azure CLI as described in the Creating an Azure Managed Disk section.
Azure virtual appliances can be deployed with managed disks from NIOS 8.5.3 onwards. From NIOS 9.0.1 onwards, they can be deployed only with managed disks.To deploy vNIOS for Azure instances in an HA (high availability) setup, a capability introduced in NIOS 9.0.4:
In the Microsoft Azure portal, create a user-assigned managed identity with a custom role that is assigned with permissions listed in the Creating an User-Assigned Managed Identity section below.
When configuring HA, you must create three network interfaces for MGMT, LAN1, and HA on each node of the HA pair. Additionally, assign a secondary IP address to the HA interface on one of the nodes, and ensure that the LAN1 and HA interfaces of both nodes and the secondary IP address are assigned to the same subnetwork. For more information, see Deploying the vNIOS Instance with HA.
In NIOS, configure a DNS resolver in the Grid Properties Editor. For more information about DNS resolvers, refer to the Enabling DNS Resolution topic in the Infoblox NIOS Documentation.
...
| Excerpt | ||
|---|---|---|
| ||
Creating an Azure Managed DiskTo create a managed disk, run the following command in the Azure CLI by specifying the mentioned parameters:
|
Creating an User-Assigned Managed Identity
To form an HA pair with vNIOS instances, the permissions defined outlined in this section are a minimum requirement. These The permissions are required for the vNIOS instance allow the instances to manage resources in the Azure cloud.
In Azure, create perform the following:
Create a custom role that is assigned with permissions listed in this section.
Create a user-assigned managed identity with
...
its Azure role assignment Scope as Subscription and assign the custom role that
...
you created.
Defining Subscription as the scope allows the managed identity to access all resources and/or resources groups in the subscription.
Note that the scope that you select displays under Resource Type after the role assignment is saved.Attach the managed identity to the vNIOS instance.
For more information about managed identities and custom roles, refer to Managed identities for Azure resources and Role-based access control respectively.
A sample JSON script is as follows:
{
"id": "/subscriptions/3b9ac093-9baa-421e-8ee2-62f682759ca4/providers/Microsoft.Authorization/roleDefinitions/3fe1ef8a-86f3-452a-99ba-7be482b33e34",
...