无法从私有github存储库URI下载部署内容

Question

我创建了新的GitHub私有存储库，在其中添加了Azure密钥库的ARM模板。之后，我尝试使用PowerShell工具从本地计算机部署ARM模板。

这是我用于将ARM模板部署到Azure中的PowerShell脚本。

#Login-AzureRmAccount

#region Parameters
$resourceGroupName='KZEU-ARMTMP-SB-DEV-RGP-01'
$location='eastus'
$parametersUri='E:\Kishore\Kishore GitHub\ARMTemplates\Parameters\StorageAccount.parameters.json'
$templateUri='https://raw.githubusercontent.com/xxxxxxx/ARMTemplates/master/Templates/StorageAccount.json?access_token=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'
$clientID = "xxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
$key = "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx="
#endregion

#region Login into Azure
 $SecurePassword = $key | ConvertTo-SecureString -AsPlainText -Force
 $cred = new-object -typename System.Management.Automation.PSCredential `
 -argumentlist $clientID, $SecurePassword

 Add-AzureRmAccount -Credential $cred -Tenant "xxxxxxxxxxxxxxxxxxxxxx" -  ServicePrincipal

 Set-AzureRmContext -SubscriptionID 'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'
 #endregion

 #region Check or Create Resource Group
 Get-AzureRmResourceGroup -Name $resourceGroupName -ev notPresent -ea 0
 if($notPresent){ 
 Write-Host "Failover RG '$resourceGroupName' doesn't exist. Creating a new in $location...." -ForegroundColor Yellow
 New-AzureRmResourceGroup -Name $resourceGroupName -Location $location
 }else{
Write-Host "Using existing resource group '$resourceGroupName'" -ForegroundColor Yellow;
 }

#endregion

#region Validate & Deploy ARM Templates
try{
  $templateValidationResult= Test-AzureRmResourceGroupDeployment -ResourceGroupName $resourceGroupName -TemplateFile $templateUri -TemplateParameterFile $parametersUri -Verbose
if($templateValidationResult[0].Code-eq"InvalidTemplateDeployment"){
    Write-Host "Failed to validate ARM template"
    exit 1
}else{
    Write-Host "Successfully completed to validate ARM template"
    $deploymentResult= New-AzureRmResourceGroupDeployment -Name StorageAccount-Deployment -ResourceGroupName $resourceGroupName -TemplateFile $templateUri -TemplateParameterFile $parametersUri -Verbose
    if($deploymentResult.ProvisioningState-eq"Succeeded"){
        Write-Host "Successfully completed to deploy ARM template"
    }else{              
        Write-Host "Failed to deploy ARM template"
        exit 1
    }       
}
 }
 catch{
  $ex = $_.Exception | Format-List -Force
  Write-Host $ex
  }

 #endregion

运行上面的PowerShell脚本时，出现了

之类的错误。

  

无法从“ https://raw.githubusercontent.com/xxxx/demo-in/master/xxxx/keyVault.json”下载部署内容

那么，有人可以建议我如何解决上述问题吗？

Answer 1

您的问题是您不能从私有存储库（see doc）进行部署。您正在尝试做的是传递模板URI以供Azure读取，并且它无权读取您的私有存储库。您有两种选择：

1. 按照文档所述执行操作，然后将deploy.json保存到Azure Storage 并使用SAS令牌对其进行保护。
2. 您可以在本地克隆存储库，然后 从本地文件部署。