Skip to content

Conversation

@beraldoleal
Copy link
Contributor

On ARO clusters, the VNet and cluster infrastructure are in separate resource groups. The CCO-created service principal has permissions scoped to the infrastructure resource group (resourceGroup), not the VNet resource group (vnetResourceGroup).

On ARO clusters, the VNet and cluster infrastructure are in separate
resource groups. The CCO-created service principal has permissions
scoped to the infrastructure resource group (resourceGroup), not the
VNet resource group (vnetResourceGroup).

Signed-off-by: Beraldo Leal <[email protected]>
@butler54 butler54 self-requested a review December 9, 2025 06:09
Copy link
Contributor

@butler54 butler54 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@butler54 butler54 merged commit e096437 into validatedpatterns:main Dec 10, 2025
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants