kubernetes-sigs / blob-csi-driver

Azure Blob Storage CSI driver
Apache License 2.0
118 stars 77 forks source link

doc: deprecate AzureStorageIdentityObjectID field #1456

Closed andyzhangx closed 2 weeks ago

andyzhangx commented 2 weeks ago

What type of PR is this? /kind documentation

What this PR does / why we need it: doc: deprecate AzureStorageIdentityObjectID field

from blobfuse 2.3.0, AzureStorageIdentityObjectID relies on azure cli installed on the node, pls use AzureStorageIdentityClientID or AzureStorageIdentityResourceID parameter instead.

CX needed to install Azure CLI on worker nodes manually.

With this PR, ObjectID (Managed Identity Authentication) now relies on the azure cli. https://github.com/Azure/azure-storage-fuse/commit/644728f2093e2a45914a294c64febbcdb5ffc866#diff-b7b39483e2bf51ebe17ba7827a1b18cbaf75b74fcfe0796ae7a2d3e667b45289R95

volumeAttributes:.
  AzureStorageAuthType: msi
  AzureStorageIdentityObjectID: XXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX

Every time CX reimages a worker node with nodeOSimage Upgrade, the Azure CLI needs to be installed manually.

To avoid having to install Azure CLI on worker nodes, user should use AzureStorageIdentityClientID or AzureStorageIdentityResourceID instead of AzureStorageIdentityObjectID

Which issue(s) this PR fixes:

Fixes #

Requirements:

Special notes for your reviewer:

Release note:

none
k8s-ci-robot commented 2 weeks ago

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: andyzhangx

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files: - ~~[OWNERS](https://github.com/kubernetes-sigs/blob-csi-driver/blob/master/OWNERS)~~ [andyzhangx] Approvers can indicate their approval by writing `/approve` in a comment Approvers can cancel approval by writing `/approve cancel` in a comment