Uploaded image for project: 'OpenShift Storage'
  1. OpenShift Storage
  2. STOR-1073

Azure File support for managed identities

XMLWordPrintable

    • Azure File support for managed identities
    • 2
    • False
    • False
    • Green
    • To Do
    • OCPSTRAT-506 - ARO Managed Identity
    • OCPSTRAT-506ARO Managed Identity
    • 100
    • 100% 100%
    • Approved

      Epic Overview

      There is a general effort to support Azure Managed Identities in OCP.

      • Enable customers to create and manage OpenShift clusters using managed identities for Azure resources (a.k.a. Managed Service Identity or MSI) for authentication.
      • A customer using ARO wants to spin up an OpenShift cluster with "az aro create" without needing additional input, i.e. without the need for an AD account or service principal credentials, and the identity used is never visible to the customer and cannot appear in the cluster.

      The epic tracks the work required in Azure File Operator to support Azure Managed Identities.

      Requirements

      • Add support to Azure File Operator for the Installation and Upgrade using both UPI and IPI methods with managed identities for Azure resources / Managed Service Identity (MSI).
      • Support for HyperShift and non-HyperShift clusters.

        1.
        		 Docs Tracker Sub-task Closed Undefined Lisa Pettyjohn
        2.
        		 PX Tracker Sub-task Closed Undefined Michael Hackett
        3.
        		 QE Tracker Sub-task Closed Undefined Wei Duan
        4.
        		 TE Tracker Sub-task Closed Undefined Michael Hackett

            rbednar@redhat.com Roman Bednar
            rh-gs-gcharot Gregory Charot
            Wei Duan Wei Duan
            Votes:
            0 Vote for this issue
            Watchers:
            7 Start watching this issue

              Created:
              Updated:
              Resolved:

                Estimated:
                Original Estimate - 2 weeks
                2w
                Remaining:
                0m
                Logged:
                Time Not Required
                Not Specified