gitea-mirror/hacktricks-cloud
1
0
Fork 0
mirror of https://github.com/HackTricks-wiki/hacktricks-cloud.git synced 2026-01-06 17:53:37 -08:00
Code Issues Packages Projects Releases Wiki Activity

fixes

Browse Source
This commit is contained in:
Carlos Polop
2025-02-15 18:48:56 +01:00
parent 5537bfe63d
commit 9cd2ef8e2f
3 changed files with 78 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

19
src/pentesting-cloud/azure-security/az-services/az-container-instances-apps-jobs.md
View File

@@ -14,16 +14,20 @@ Differences:
### Configurations
Special options for ACI:
- Regarding networking it can also have a **public IP** or be **private endpoints**.
Special options for **ACI**:
- Regarding networking it's possible to select one of these 3 options:
- **Public** (default)
- **Private** (only accessible from the VNet)
- **None** (no network access)
Special options for ACA:
Special options for **ACA**:
- It's possible to **restrict the trafic** to the container to the container app environment or leave it public.
- It’s possible to use an **external identity provider** (Microsoft, Facebook, Google, and Twitter) for authentication
- It's possible to **store App secrets** (in clear text the app or as links to a vault assigning a MI with access over it)
- It’s possible to have **revisions and replicas of the app**
- It's possible to deploy from a specific **source code or artifact** instead of using a container. For the source code, access to Gihub must be given. For artifacts, it's possible to upload it after creating the app.
Special options for jobs:
Special options for **jobs**:
- The trigger type can be **manual, scheduled or event-based** (like a message arriving in a queue).
Common options:
@@ -56,10 +60,10 @@ az container show --name <container-name> --resource-group <res-group>
az container logs --name <container-name> --resource-group <res-group>
## Execute a command in a running container and get the output
az container exec --name <container-name> --resource-group <res-group> --exec-command "ls"
az container exec --name <container-name> --resource-group <res-group> --exec-command "/bin/sh" # Get a shell
## Get yaml configuration of the container group
az container export --name <container-name> --resource-group <res-group>
az container export --name <container-name> --resource-group <res-group> --file </path/local/file.yml>
# ACA
## List all container apps in the subscription
@@ -68,6 +72,9 @@ az containerapp list
## Show detailed information about a specific container app
az containerapp show --name <app-name> --resource-group <res-group>
## List app environments
az containerapp env list --resource-group <res-group>
## Fetch logs from a container app
az containerapp logs show --name <app-name> --resource-group <res-group>