Merge pull request #8 from charmed-kubernetes/KU-438/repair-azure-rol…

…e-assignment A change in the az CLI has forces this change to assign_role
charmed-kubernetes · Mar 7, 2024 · f3f8d47 · f3f8d47
2 parents 863b056 + 59d9dcc
commit f3f8d47
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 3 deletions.
diff --git a/.github/workflows/tox.yaml b/.github/workflows/tox.yaml
@@ -15,4 +15,4 @@ jobs:
     needs:
       - call-inclusive-naming-check
     with:
-      python: "['3.6', '3.7', '3.8', '3.9', '3.10']"
+      python: "['3.8', '3.9', '3.10', '3.11']"
diff --git a/lib/charms/layer/azure.py b/lib/charms/layer/azure.py
@@ -867,15 +867,18 @@ def _assign_role(request, role, resource_group=None):
     rg = request.resource_group
     if resource_group is not None:
         rg = resource_group
+    sub_id = kv().get("charm.azure.sub-id")
+    scope = f"/subscriptions/{sub_id}/resourceGroups/{rg}"
+
     try:
         _azure(
             "role",
             "assignment",
             "create",
             "--assignee-object-id",
             msi,
-            "--resource-group",
-            rg,
+            "--scope",
+            scope,
             "--role",
             role,
         )