Invoke-SIJobsOnce
Run every SecurityInsight job once, in pipeline order
Purpose
Runs every Container Apps job of the install once, in pipeline order, and reports each run.
When to run it
After an install or a repair, to prove every job runs.
Who may run it
| Kind | Role | Scope | Why |
|---|---|---|---|
| azureRbac | Container Apps Jobs Operator (or Contributor) | the install's resource group | to start the jobs |
What it changes
| Where | Action | What | Permission / role | Scope | Why | Undo |
|---|---|---|---|---|---|---|
| Container Apps jobs | create | one execution of each job | the install's resource group | run every job once | nothing to undo: the runs are the jobs' normal work |
What it only reads
- the jobs, their executions and run records
Parameters
| Parameter | Required | Default | What it does |
|---|---|---|---|
| -ConfigPath | no | ||
| -ResourceGroup | no | ||
| -SubscriptionId | no | ||
| -Only | no | @() | |
| -Exclude | no | @() | |
| -IncludeUpdater | no | ||
| -PlanOnly | no | ||
| -TimeoutMinutes | no | 120 | |
| -PollSeconds | no | 30 | |
| -SignIn | no | 'Auto' | |
| -PassThru | no |
Preview with -WhatIf
The plan (as -PlanOnly): which jobs would run in which order; no job is started.
Undo
Nothing to undo: each run is the job's normal work.
Network
It connects to: *.blob.core.windows.net, *.queue.core.windows.net, *.table.core.windows.net, *.vault.azure.net, 169.254.169.254, api.loganalytics.io, graph.microsoft.com, invardia.com, login.microsoftonline.com, management.azure.com, monitor.azure.com, storage.azure.com, vault.azure.net
Download and run
Run these lines in PowerShell: the first downloads the script into the current folder, the second runs it.
Invoke-WebRequest https://invardia.com/support/si/Invoke-SIJobsOnce.ps1 -OutFile Invoke-SIJobsOnce.ps1
.\Invoke-SIJobsOnce.ps1To check the download first, compare its SHA-256 with the published one:
SHA-256 11f207f10fd71a93d9923dc2896847a43f3905f98e968a6b4bfed9cef2ca6599
Checksums: SHA256SUMS.txt · Version 3.0.79
Before you run it, compare the file's SHA-256 with its line in SHA256SUMS.txt.
Every parameter: Get-Help .\Invoke-SIJobsOnce.ps1 -Full · Source: Invoke-SIJobsOnce.ps1
Every script, identity and permission for your security review: SecurityInsight