From 68cdb02b3361128313353031849496d101120c0f Mon Sep 17 00:00:00 2001 From: Lucas Saintarbor Date: Fri, 17 Feb 2023 11:13:40 -0800 Subject: [PATCH 1/3] Update create-credentials.md In reference to (https://github.com/rancher/rancher-docs/issues/398 and https://github.com/kubernetes-sigs/vsphere-csi-driver/issues/2143), users hit an issue while creating a new role (RabcgerRole) in the vSphere Web Client. The solution is to add the following privilege when creating the new role: Cns.searchable. I added the (Privilege Group, Cns Privileges) and (Operations, Searchable) to the table referencing (https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-C04F1605-D158-4B65-810F-6F5B109BCDEC.html). Note: The screenshot showing the list of privileges when creating a new role in the vSphere Client does not show "Cns Privileges." This privilege was added in vSphere 7.0. Looks like the screenshot is from vSphere 6.0. Connect with someone who provide updated screenshots for "Creating Credentials in the vSphere Console." --- .../vsphere/create-credentials.md | 1 + 1 file changed, 1 insertion(+) diff --git a/docs/how-to-guides/new-user-guides/launch-kubernetes-with-rancher/use-new-nodes-in-an-infra-provider/vsphere/create-credentials.md b/docs/how-to-guides/new-user-guides/launch-kubernetes-with-rancher/use-new-nodes-in-an-infra-provider/vsphere/create-credentials.md index 968b5845050..976f6ddf083 100644 --- a/docs/how-to-guides/new-user-guides/launch-kubernetes-with-rancher/use-new-nodes-in-an-infra-provider/vsphere/create-credentials.md +++ b/docs/how-to-guides/new-user-guides/launch-kubernetes-with-rancher/use-new-nodes-in-an-infra-provider/vsphere/create-credentials.md @@ -12,6 +12,7 @@ The following table lists the permissions required for the vSphere user account: | Global | Set custom attribute | | Network | Assign | | Resource | AssignVMToPool | +| Cns Privileges | Searchable | | Virtual Machine | Config (All)
GuestOperations (All)
Interact (All)
Inventory (All)
Provisioning (All) | | vSphere Tagging | Assign or Unassign vSphere Tag
Assign or Unassign vSphere Tag on Object | From aa9c5b35b980c3a81729a7101011164c8c8b3d13 Mon Sep 17 00:00:00 2001 From: Lucas Saintarbor Date: Fri, 17 Feb 2023 15:16:56 -0800 Subject: [PATCH 2/3] Update create-credentials.md --- .../vsphere/create-credentials.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/versioned_docs/version-2.6/how-to-guides/new-user-guides/launch-kubernetes-with-rancher/use-new-nodes-in-an-infra-provider/vsphere/create-credentials.md b/versioned_docs/version-2.6/how-to-guides/new-user-guides/launch-kubernetes-with-rancher/use-new-nodes-in-an-infra-provider/vsphere/create-credentials.md index 968b5845050..28384bac57a 100644 --- a/versioned_docs/version-2.6/how-to-guides/new-user-guides/launch-kubernetes-with-rancher/use-new-nodes-in-an-infra-provider/vsphere/create-credentials.md +++ b/versioned_docs/version-2.6/how-to-guides/new-user-guides/launch-kubernetes-with-rancher/use-new-nodes-in-an-infra-provider/vsphere/create-credentials.md @@ -8,10 +8,12 @@ The following table lists the permissions required for the vSphere user account: | Privilege Group | Operations | |:----------------------|:-----------------------------------------------------------------------| +| Cns Privileges | Searchable | | Datastore | AllocateSpace
Browse
FileManagement (Low level file operations)
UpdateVirtualMachineFiles
UpdateVirtualMachineMetadata | | Global | Set custom attribute | | Network | Assign | | Resource | AssignVMToPool | + | Virtual Machine | Config (All)
GuestOperations (All)
Interact (All)
Inventory (All)
Provisioning (All) | | vSphere Tagging | Assign or Unassign vSphere Tag
Assign or Unassign vSphere Tag on Object | From 53fd0c4cf7a48742f9dd2f7b0cb131a5f2043e79 Mon Sep 17 00:00:00 2001 From: Lucas Saintarbor Date: Fri, 17 Feb 2023 15:17:21 -0800 Subject: [PATCH 3/3] Update create-credentials.md --- .../vsphere/create-credentials.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/how-to-guides/new-user-guides/launch-kubernetes-with-rancher/use-new-nodes-in-an-infra-provider/vsphere/create-credentials.md b/docs/how-to-guides/new-user-guides/launch-kubernetes-with-rancher/use-new-nodes-in-an-infra-provider/vsphere/create-credentials.md index 976f6ddf083..b4e4279c569 100644 --- a/docs/how-to-guides/new-user-guides/launch-kubernetes-with-rancher/use-new-nodes-in-an-infra-provider/vsphere/create-credentials.md +++ b/docs/how-to-guides/new-user-guides/launch-kubernetes-with-rancher/use-new-nodes-in-an-infra-provider/vsphere/create-credentials.md @@ -8,11 +8,11 @@ The following table lists the permissions required for the vSphere user account: | Privilege Group | Operations | |:----------------------|:-----------------------------------------------------------------------| +| Cns Privileges | Searchable | | Datastore | AllocateSpace
Browse
FileManagement (Low level file operations)
UpdateVirtualMachineFiles
UpdateVirtualMachineMetadata | | Global | Set custom attribute | | Network | Assign | | Resource | AssignVMToPool | -| Cns Privileges | Searchable | | Virtual Machine | Config (All)
GuestOperations (All)
Interact (All)
Inventory (All)
Provisioning (All) | | vSphere Tagging | Assign or Unassign vSphere Tag
Assign or Unassign vSphere Tag on Object |