Failed to provision volume: NoPermission about vsphere-csi-driver HOT 4 CLOSED

/assign @divyenpatel

from vsphere-csi-driver.

any update, I am running into the same issue.
is there any documentation about the vsphere permissions required?

from vsphere-csi-driver.

@lamb84

E1127 01:25:38.843413 1 controller.go:908] error syncing claim "a8ced1a8-10b4-11ea-a6f4-00505686f29b": failed to provision volume with StorageClass "topology-aware-standard": rpc error: code = Internal desc = ServerFaultCode: NoPermission

At the same time, on the vSphere datastore level new FCD volumes are created on each attempt to provision a volume, filling up the corresponding vsan folder.

You are missing Read permission on vCenter. This is required to retrieve result from the task created by CSI driver.

When you observe that volumes are getting created on the datastore, but driver getting NoPermission error, we are missing permission to read result from the task.

We will enhance our documentation for Roles and Privileges requirement to make this clear.

from vsphere-csi-driver.

@artazar we have documented roles and privileged with examples in detail here - https://github.com/kubernetes-sigs/vsphere-csi-driver/blob/master/docs/book/driver-deployment/prerequisites.md

closing this issue.

from vsphere-csi-driver.