Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-32785

Azure Workload Identity in static PVs did not work for CSI-File

XMLWordPrintable

    • ?
    • Important
    • No
    • False
    • Hide

      None

      Show
      None
    • Hide
      Previously, static Persistent Volumes (PVs) in Azure Workload Identity clusters could not be configured due to a bug in the driver, causing PV mounts to fail. With this release, the driver works and static PVs mount correctly. (link:https://issues.redhat.com/browse/OCPBUGS-32785[*OCPBUGS-32785*])
      Show
      Previously, static Persistent Volumes (PVs) in Azure Workload Identity clusters could not be configured due to a bug in the driver, causing PV mounts to fail. With this release, the driver works and static PVs mount correctly. (link: https://issues.redhat.com/browse/OCPBUGS-32785 [* OCPBUGS-32785 *])
    • Bug Fix
    • Done

      Description of problem:

      The customer uses Azure File CSI driver and without this they cannot make use of the Azure Workload Identity work which was one of the banner features of OCP 4.14. This feature is currently available in 4.16, however it will take the customer 3-6 months to validate 4.16 and start its rollout putting their plans to complete a large migration to Azure by end of 2024 at risk.
Could you please backport either the 1.29.3 feature for Azure Workload Idenity or rebase our Azure File CSI driver in 4.14 and 4.15 to at least 1.29.3 which includes the desired feature.

      Version-Release number of selected component (if applicable):

      azure-file-csi-driver in 4.14 and 4.15
- In 4.14, azure-file-csi-driver is version 1.28.1
- In 4.15, azure-file-csi-driver is version 1.29.2

      How reproducible:

      Always

      Steps to Reproduce:

          1. Install ocp 4.14 with Azure Workload Managed Identity
    2. Try to configure Managed Workload Identiy with Azure CSI file

https://github.com/kubernetes-sigs/azurefile-csi-driver/blob/master/docs/workload-identity-static-pv-mount.md

      Actual results:

      Is not usable

      Expected results:

      Azure Workload Identity should be manage with Azure File CSi as part of the whole feature

      Additional info:

              rbednar@redhat.com Roman Bednar
              rh-support-fgrosjea Franck Grosjean
              Wei Duan Wei Duan
              Shauna Diaz Shauna Diaz
              Votes:
              1 Vote for this issue
              Watchers:
              6 Start watching this issue

                Created:
                Updated:
                Resolved: