search

vmware / cloud-director-named-disk-csi-driver

Container Storage Interface (CSI) driver for VMware Cloud Director
Other
27 stars 31 forks source link

Documentation of necessary Role Rights #215

Closed Vivida1 closed 1 year ago

Vivida1 commented 1 year ago

Is your feature request related to a problem? Please describe.

The documentation states, that it requires a user with permissions based on the vApp Author Role with additional rights from CSE. Since we did not use CSE to create the cluster we assumed, having a user with the vApp Author Role would be enough. Unfortunately the vApp Author user results in the following error in K8s:

Warning FailedAttachVolume 2s (x7 over 37s) attachdetach-controller AttachVolume.Attach failed for volume "pvc-25afded9-68ef-44d9-9ab2-7c461629e170" : rpc error: code = Unknown desc = unable to find VM for node [rosed-k8s-0001]: [unable to find vApp [RosedDev] by name: [[ENF] entity not found]]

The named disk gets created fine but it is unable to find the vApp/VM. When changing the user Role to Organization Administrator, this process works fine.

Describe the solution you'd like

Documentation of the necessary rights a role needs to use the CSI in a K8s cluster which was not created using VMware tools.

Describe alternatives you've considered

No response

Additional context

No response

Vivida1 commented 1 year ago

It seems using vApp Author Role + assigning that user to the vApp (vApp -> Share -> give user Full Control) seems to be working.