Skip to content

Commit f18db5b

Browse files
committed
manifests: specify service account names on azure cred request
also add "Storage Blob Data Contributor" role, otherwise the registry does not have permission to do anything in the container.
1 parent a215edb commit f18db5b

File tree

1 file changed

+4
-0
lines changed

1 file changed

+4
-0
lines changed

manifests/01-registry-credentials-request-azure.yaml

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -10,11 +10,15 @@ metadata:
1010
include.release.openshift.io/self-managed-high-availability: "true"
1111
include.release.openshift.io/single-node-developer: "true"
1212
spec:
13+
serviceAccountNames:
14+
- cluster-image-registry-operator
15+
- registry
1316
secretRef:
1417
name: installer-cloud-credentials
1518
namespace: openshift-image-registry
1619
providerSpec:
1720
apiVersion: cloudcredential.openshift.io/v1
1821
kind: AzureProviderSpec
1922
roleBindings:
23+
- role: Storage Blob Data Contributor
2024
- role: Contributor

0 commit comments

Comments
 (0)