Skip to content

Conversation

ManikaDhiman
Copy link
Contributor

No description provided.

Copy link
Contributor

@ManikaDhiman : Thanks for your contribution! The author(s) and reviewer(s) have been notified to review your proposed change.

Copy link
Contributor

PRMerger Results

Issue Description
Added File(s) This PR contains added files. New files require human review.
File Change Percent This PR contains file(s) with more than 30% file change.
Image File This PR added or updated an image file(s).

@v-dirichards v-dirichards requested a review from Copilot October 10, 2025 14:24
Copy link
Contributor

@Copilot Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR updates the documentation for deploying Azure Local, version 23H2 using local identity with Azure Key Vault. The revisions include expanded explanations, updated procedures, and new troubleshooting content.

Key changes:

  • Enhanced overview and benefits sections with clearer explanations of Local Identity deployment
  • Added new sections for Key Vault extension alerts, tool compatibility, and FAQ
  • Updated deployment procedures with more detailed steps and clarifications

Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.

## Overview

Previously known as AD-less deployment, the method of using local identity with Key Vault allows Azure Local to securely manage and store secrets, such as BitLocker keys, node passwords, and other sensitive information, without relying on Active Directory (AD). By integrating with Key Vault and using certificate-based authentication, you can enhance your security posture and ensure the continuity of operations.
In addition to Active Directory (AD) based deployment, Azure Local supports deployment through Local Identity with Azure Key Vault, previosuly known as AD-less deployment.
Copy link

Copilot AI Oct 10, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Corrected spelling of 'previosuly' to 'previously'.

Suggested change
In addition to Active Directory (AD) based deployment, Azure Local supports deployment through Local Identity with Azure Key Vault, previosuly known as AD-less deployment.
In addition to Active Directory (AD) based deployment, Azure Local supports deployment through Local Identity with Azure Key Vault, previously known as AD-less deployment.

Copilot uses AI. Check for mistakes.

Azure Local uses the Key Vault extension to securely store and manage secrets. To ensure reliability and security, the system continuously monitors the health of the Key Vault integration. If any issues are detected, alerts are automatically generated and surfaced through Azure Monitor for visibility and response.
Alerts are sent through the Azure Alerts gateway and can be viewed in the Azure portal under **Monitor** > **Alerts**. You can configure action groups to receive notifications via email, SMS, or webhook. For more information, see [What are Azure Monitor alerts?](/azure/azure-monitor/alerts/alerts-overview)
Copy link

Copilot AI Oct 10, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Missing closing period at the end of the sentence.

Suggested change
Alerts are sent through the Azure Alerts gateway and can be viewed in the Azure portal under **Monitor** > **Alerts**. You can configure action groups to receive notifications via email, SMS, or webhook. For more information, see [What are Azure Monitor alerts?](/azure/azure-monitor/alerts/alerts-overview)
Alerts are sent through the Azure Alerts gateway and can be viewed in the Azure portal under **Monitor** > **Alerts**. You can configure action groups to receive notifications via email, SMS, or webhook. For more information, see [What are Azure Monitor alerts?](/azure/azure-monitor/alerts/alerts-overview).

Copilot uses AI. Check for mistakes.

This extension requires specific configurations that are only applied by the Azure Local Resource Provider (*Microsoft.AzureStackHCI Resource Provider*). To restore the extension, trigger a synchronization from the cluster by running the following command:
<!--Add command here-->
Copy link

Copilot AI Oct 10, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The command placeholder needs to be replaced with the actual command for triggering synchronization from the cluster. This is critical information for users troubleshooting the deleted extension scenario.

Suggested change
<!--Add command here-->
```powershell
Invoke-AzStackHciClusterSync
```

Copilot uses AI. Check for mistakes.

If the extension wasn't installed during deployment, you can manually install it on Arc-enabled servers by following these steps:
1. Create a new Azure Key Vault if you don’t already have one. For instructions, see [Quickstart: Create a key vault using the Azure portal](/key-vault/general/quick-create-portal).
Copy link

Copilot AI Oct 10, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The link path appears to be missing the Azure documentation domain. It should be /azure/key-vault/general/quick-create-portal to match the standard Azure documentation URL format used elsewhere in the document.

Suggested change
1. Create a new Azure Key Vault if you don’t already have one. For instructions, see [Quickstart: Create a key vault using the Azure portal](/key-vault/general/quick-create-portal).
1. Create a new Azure Key Vault if you don’t already have one. For instructions, see [Quickstart: Create a key vault using the Azure portal](/azure/key-vault/general/quick-create-portal).

Copilot uses AI. Check for mistakes.

@v-dirichards
Copy link
Contributor

v-dirichards commented Oct 10, 2025

@alkohli Can you review the proposed changes?

Note the following blocker needs to be resolved before this PR is eventually merged:

azure-local/deploy/media/deployment-local-identity-with-key-vault/key-vault-secret-extension-install-6.png

  • The listed image contains PII (the email address in the upper right corner), which is a blocking issue. See How to remove personal information in a website for details and examples. (Note that agnostic or fictitious values are preferred.)

If you approve the new content in this PR, the commits must be moved to the private repository for automated checks and publishing. After you move the commits, close this PR (#please-close). If you need help moving the commits, contact the publicprs alias.

Important: When the changes are ready for publication, adding a #sign-off comment is the best way to signal that the PR is ready for the review team to merge.

#label:"aq-pr-triaged"
@MicrosoftDocs/public-repo-pr-review-team

@prmerger-automator prmerger-automator bot added the aq-pr-triaged Tracking label for the PR review team label Oct 10, 2025
Copy link
Contributor

PRMerger Results

Issue Description
Added File(s) This PR contains added files. New files require human review.
File Change Percent This PR contains file(s) with more than 30% file change.
Image File This PR added or updated an image file(s).

Copy link
Contributor

Learn Build status updates of commit fe244af:

✅ Validation status: passed

File Status Preview URL Details
azure-local/deploy/deployment-local-identity-with-key-vault.md ✅Succeeded
azure-local/deploy/media/deployment-local-identity-with-key-vault/provide-dns-server.png ✅Succeeded

For more details, please refer to the build report.

Copy link
Contributor

PRMerger Results

Issue Description
File Change Percent This PR contains file(s) with more than 30% file change.
Image File This PR added or updated an image file(s).

Copy link
Contributor

Learn Build status updates of commit 32f5a75:

✅ Validation status: passed

File Status Preview URL Details
azure-local/deploy/deployment-local-identity-with-key-vault.md ✅Succeeded
azure-local/deploy/media/deployment-local-identity-with-key-vault/provide-dns-server.png ✅Succeeded

For more details, please refer to the build report.

Copy link
Contributor

PRMerger Results

Issue Description
File Change Percent This PR contains file(s) with more than 30% file change.
Image File This PR added or updated an image file(s).

Copy link
Contributor

Learn Build status updates of commit 2238c82:

✅ Validation status: passed

File Status Preview URL Details
azure-local/deploy/deployment-local-identity-with-key-vault.md ✅Succeeded
azure-local/deploy/media/deployment-local-identity-with-key-vault/provide-dns-server.png ✅Succeeded

For more details, please refer to the build report.

Copy link
Contributor

PRMerger Results

Issue Description
File Change Percent This PR contains file(s) with more than 30% file change.
Image File This PR added or updated an image file(s).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants