kubernetes
/
kops
mirror of https://github.com/kubernetes/kops.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

azure: Remove permissions for nodes when dns=none

This commit is contained in:
Ciprian Hacman 2023-07-14 13:46:26 +03:00
parent ecbcd7a66c
commit 15b44bad52
1 changed files with 13 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

24
pkg/model/azuremodel/vmscaleset.go
View File

@ -49,17 +49,19 @@ func (b *VMScaleSetModelBuilder) Build(c *fi.CloudupModelBuilderContext) error {
} }
c.AddTask(vmss) c.AddTask(vmss)
// Create tasks for assigning built-in roles to VM Scale Sets. if ig.IsControlPlane() || b.Cluster.UsesLegacyGossip() {
// See https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles // Create tasks for assigning built-in roles to VM Scale Sets.
// for the ID definitions. // See https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles
roleDefIDs := map[string]string{ // for the ID definitions.
// Owner roleDefIDs := map[string]string{
"owner": "8e3af657-a8ff-443c-a75c-2fe8c4bcb635", // Owner
// Storage Blob Data Contributor "owner": "8e3af657-a8ff-443c-a75c-2fe8c4bcb635",
"blob": "ba92f5b4-2d11-453d-a403-e96b0029c9fe", // Storage Blob Data Contributor
} "blob": "ba92f5b4-2d11-453d-a403-e96b0029c9fe",
for k, roleDefID := range roleDefIDs { }
c.AddTask(b.buildRoleAssignmentTask(vmss, k, roleDefID)) for k, roleDefID := range roleDefIDs {
c.AddTask(b.buildRoleAssignmentTask(vmss, k, roleDefID))
}
} }
} }