Page Comparison

...

• If Authentication and Authorization is set to Microsoft Entra ID authentication with Azure RBAC (AAD is enabled)

  

  1. No action is required for a dedicated cluster.

  2. For shared cluster, you must have already created namespace and KyvosMI with Azure Kubernetes Service RBAC Admin on the namespace level.

     1. Download kyvos-compute-worker-disk-class.yaml file and execute the kubectl apply –f kyvos-compute-worker-disk-class.yaml command from the user/MI which has Admin privileges on Kubernetes cluster. This is to create storage class. If required, you can update the tags in the file by passing comma-separated values.

...

1. To configure as a dedicated cluster

   1. Assign Azure Kubernetes Service RBAC Cluster Admin to kyvos MI on Kubernetes .

   2. Assign Virtual Machine Contributor on managed resource group to Kyvos MI.

   3. Storage Blob Data Contributor to Kubernetes Managed Identity on bucket.

2. To configure as a shared Cluster:

   1. Either namespace should be already created or provide Azure Kubernetes Service RBAC Cluster Admin permission to Kyvos Managed Identity on Kubernetes.

   2. Download kyvos-compute-worker-disk-class.yaml file and execute the kubectl apply –f kyvos-compute-worker-disk-class.yaml command from the user/MI which has Admin privileges on Kubernetes cluster. This is to create storage class. If required, you can update the tags in the file by passing comma-separated values.

   3. If namespace is already created, then Kyvos Managed Identity must have Azure Kubernetes Service RBAC Admin on namespace and Azure Kubernetes Service Cluster User Role on Kubernetes .

   4. Assign Reader on managed resource group to Kyvos Managed Identity.

   5. Storage Blob Data Contributor to Kubernetes Managed Identity on bucket.

...