-
Story
-
Resolution: Unresolved
-
Undefined
-
None
-
None
-
None
-
None
-
2
-
False
-
None
-
False
-
OCPSTRAT-1916 - Azure - Remove not required permissions from the Nodes
-
-
-
Installer Sprint 268
We are creating a user-assigned identity in the installer SDK. Testing shows that this identity is unnecessary (and we have a customer case where they would like to backport this). Removing the creation of this identity will simplify the configuration we need to maintain for the Azure & Azure stack install paths.
Acceptance Criteria:
Description of criteria:
- No longer creating the identity, clusters still install successfully
Engineering Details:
- Originally these identities were used to authenticate the kubelet but now that is handled by credentials requests
- https://github.com/openshift/installer/blob/main/pkg/infrastructure/azure/azure.go#L147
- When that is removed, the machine manifests would also need to be updated to not expect the user assigned identity
This requires/does not require a design proposal.
This requires/does not require a feature gate.
- is depended on by
-
CORS-3272 Provision Azure Stack Infra with CAPI
-
- In Progress
-