Skip to content

Commit 0bbf9f3

Browse files
authored
doc: Update role requirements for Azure storage access
1 parent 9ede365 commit 0bbf9f3

File tree

1 file changed

+4
-2
lines changed

1 file changed

+4
-2
lines changed

deploy/example/blobfuse-mi/README.md

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -20,8 +20,10 @@ AzureStorageIdentityClientID=`az identity list -g "$resourcegroup" --query "[?na
2020
```
2121

2222
## Dynamic Provisioning
23-
- Ensure that the system-assigned identity of your cluster control plane has been assigned the `Storage Blob Data Contributor` role for the storage account.
24-
> if the storage account is created by the driver, then you need to grant `Storage Blob Data Contributor` role on the resource group where the storage account is located
23+
- Ensure that the identity of your cluster control plane has been assigned the `Storage Account Contributor` role for the storage account.
24+
> if the storage account is created by the driver, then you need to grant `Storage Account Contributor` role on the resource group where the storage account is located
25+
26+
> AKS cluster control plane identity has assigned the `Contributor` role on the node resource group by default.
2527
2628
1. Create a storage class
2729
```yml

0 commit comments

Comments
 (0)