Latest Contributions by ChristopherPawlyszyn

Hi Vaibhav, From the research I've done on Azure Files, it is using a CIFS mount to access the underlying share. Once mounted, CIFS filesystem permissions cannot be changed from the Linux client. With that in mind, the PostgreSQL initdb process executed when the container spins-up attempts to modify the permissions on the PGDATA location, which is not an allowed operation with Azure Files. With that being the case, there is no Azure Files-based storage class that would allow for PostgreSQL to initialize successfully. Azure Files is listed as a supported storage type, but we do specifically recommend the use of block storage in our documentation: "It is recommended to use block storage devices which provide low latency such as EBS volumes, Azure Disks, vSphereVolume, etc." From https://enterprise-k8s.arcgis.com/en/10.9/deploy/system-requirements.htm#ESRI_SECTION1_71FE341CD85F490EB15FBD48A924B3E8 ... View more

Is there any specific motivation to use Azure Files for the relational store persistent volume instead of Azure Disks? Typically it is not recommended to run a PostgreSQL database on an NFS mount, as latency and client-side caching may affect the performance and/or integrity of the running database. Even though the container would technically be mounting a share from the underlying host when using a PV on an Azure Disk, that is the preferred deployment method for those stateful sets. ... View more

@DiegoLlamasOlivares the ArcGIS Enterprise functionality shouldn't have any dependency on the jumpbox being available so turning it off is fine. There is a separate checkbox you can select during deployment if you would prefer to not provision that separate VM.   ... View more

Did you have your CNAME record set prior to starting the deployment, so that gis.gmtgis.net pointed to mapsasgmtgis.eastus.cloudapp.azure.com? The deployed application gateway is configured with a single hostname, so wouldn't accept traffic from requests using the cloudapp.azure.com alias and would require clients to access the site using the correct DNS entry (gis.gmtgis.net). ... View more

Another qualitative test would be to try with Internet Explorer to see if it's an issue with Chrome specifically. ... View more

Keep in mind this is a client-side setting, the setting on the Portal machine would only apply if you were using a browser on that machine. Another factor to consider is whether you are prompted from other machines or just from the Portal for ArcGIS machine, since that could lead to a different conclusion about what is causing the behavior. ... View more

If you are running PostgreSQL as a pod within your cluster, you should be able to build a custom image that includes the st_geometry.so library in the correct location on the image. It may take some dockerfile knowledge to achieve that goal. Alternately on a truly cloud-managed PostgreSQL offering, this may not be an option depending on whether you have access to the underlying instance running the DBMS. ... View more

A (sanitized) screenshot of what the login prompt looks like may be helpful to narrow down the behavior. If it's a browser challenge, I would recommend making sure that the FQDN (or DNS alias) is added to your Trusted sites (in Internet Options -> Security) and you have your 'User Authentication' for that zone set to 'Automatic logon with current username and password'. If you find these settings are not configured properly, your IT team should be able to push them via group policy instead of having to manually update for your entire organization.   ... View more

I don't think that same methodology has applied since the V2 sites were introduced at version 10.8. Since choosing the self-signed certificate option will build the federation using the <prefix>.<region>.cloudapp.azure.com URL, you'd have to manually break the federation to use a new URL. As an alternative, you should create your own self-signed certificate (for your intended subdomain) and use that during the deployment process with the correct DNS alias defined, then update the certificate within the Microsoft Azure console for the Azure Application Gateway when it is available. Renew an Azure Application Gateway certificate | Microsoft Docs https://docs.microsoft.com/en-us/azure/application-gateway/renew-certificates ... View more

To be fair the restriction exists in modern browsers, so no web application wouldn't be able to bypass the restrictions imposed by Chrome/Edge/Firefox/etc. If you want to display the photograph in the page, I would consider hosting the UNC path as a virtual directory using a web server, that way you would be able to embed the content using the web-based URL.   Another alternative that I would not recommend would be the number of extensions for Chrome that bypass this restriction. You'd have to work with your IT/Security team to vet those applications and determine if they are acceptable for your organization. ... View more

Is the EC2 instance created as a resource? Typically you'd want to disable rollback on failure so you could look at the Chef logs on the instance (if it's able to be created). If the instance isn't created, I'd have to assume there's an issue with the change made to the template as well. Could you post a sanitized version of the template here for review?   This documentation is fairly generic, but I wanted to link it just in case you hadn't referenced it already. Troubleshoot ArcGIS deployments on AWS—ArcGIS Enterprise in the cloud | Documentation for ArcGIS Enterprise ... View more

We've definitely seen customers use the lift-and-shift approach to migration and experience success with doing so. The biggest issues I've seen were changing of FQDNs during the process or loss of access to underlying registered data sources. Keep in mind that even if you have a VPN tunnel to your VPC, you won't want to route your DBMS traffic across that connection due to the increase in latency. Migration via WebGISDR is convenient because it allows you to keep the production system up-and-running while making any configuration changes on the duplicated deployment, so that may be worthwhile to look further into as well. If you can tolerate an outage window for the lift-and-shift approach and have a rollback strategy in place, then that may be the path of least resistance for your organization. ... View more