Provision Azure Files ReadWriteMany Persistent Volumes on Azure OpenShift: Difference between revisions

From NovaOrdis Knowledge Base
Jump to navigation Jump to search
Line 9: Line 9:


2. Give the OpenShift [[Azure_Security_Concepts#Service_Principal|service principal]] "listKey" permission on the new storage account resource group. Assign the "Contributor" role to achieve this.
2. Give the OpenShift [[Azure_Security_Concepts#Service_Principal|service principal]] "listKey" permission on the new storage account resource group. Assign the "Contributor" role to achieve this.
The OpenShift service principal can be obtained as described here: [[OpenShift_on_Azure#Obtain_the_Service_Principal|Obtain the OpenShift cluster service principal]].

Revision as of 20:34, 25 November 2020

External

Internal

Procedure

1. Create a storage account with its dedicated resource group. Why? Why can't we use the OpenShift cluster resource group?. Use this:

Create Storage Account

2. Give the OpenShift service principal "listKey" permission on the new storage account resource group. Assign the "Contributor" role to achieve this.

The OpenShift service principal can be obtained as described here: Obtain the OpenShift cluster service principal.