search

rancher / rancher-docs

Rancher Documentation
https://ranchermanager.docs.rancher.com/
Apache License 2.0
60 stars 206 forks source link

Azure cloud-provider requires extra permissions to use AzureFiles #573

Open loganhz opened 6 years ago

loganhz commented 6 years ago

The origin issue is https://github.com/rancher/rancher/issues/13947

Not sure this is truly an issue with Rancher, seems like the cloud-provider should do this for you, but I know our users are going to trip over this.

To dynamically configure AzureFiles volumes, the provider/controller needs permissions to create a secret to store the share credentials in the namespace the pvc was created in.

kubectl create clusterrole system:azure-cloud-provider --verb=get,create --resource=secrets
kubectl create clusterrolebinding system:azure-cloud-provider --clusterrole=system:azure-cloud-provider --serviceaccount=kube-system:persistent-volume-binder

Related issues: https://github.com/kubernetes/kubernetes/issues/59543

Related documentation: The storageClass docs sort of mention that this is required as a side note. https://kubernetes.io/docs/concepts/storage/storage-classes/#azure-file

Rancher versions: rancher/rancher: v2.0.2

btat commented 1 year ago

Transferring to new repo.