Enable Serial Console Support in Worker Node about gardener-extension-provider-azure HOT 3 CLOSED

Adding @I548745

from gardener-extension-provider-azure.

@YakovKugel please be careful with use of internal IDs in the public github.

Regarding the feature, the main problem is that per https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/serial-console-linux#prerequisites you need to have a password-based user. That has quite a few security implications and most of the images in our landscapes do not support such users.

What this means is that if you want to use this feature to debug actual boot issues with the nodes, you need another mechanism to introduce a way of configuring password-based users and the provider extension is not the place for that (it involves gardener core, the OS teams etc.).

If we were to introduce it without any the other gardener change I mentioned, it would basically "tick" the boxes in the VMs that would allow the serial console and you would need to use some payload mechanism like "custom" daemon sets to create your own password-based user on the nodes to be able to actually use the feature. It also prerequisites tha the node has joined the cluster which makes it useless for debugging boot issues.

from gardener-extension-provider-azure.

Hello @kon-angelo

Just to clear our request.
we don't ask to enable Console login to the instance. we don't want to debug actual boot issue from the console.
what we ask, is to be able to see the boot process in the serial log. the name of serial log in Azure portal is "serial console"

from gardener-extension-provider-azure.