From 68cdb02b3361128313353031849496d101120c0f Mon Sep 17 00:00:00 2001 From: Lucas Saintarbor Date: Fri, 17 Feb 2023 11:13:40 -0800 Subject: [PATCH] Update create-credentials.md In reference to (https://github.com/rancher/rancher-docs/issues/398 and https://github.com/kubernetes-sigs/vsphere-csi-driver/issues/2143), users hit an issue while creating a new role (RabcgerRole) in the vSphere Web Client. The solution is to add the following privilege when creating the new role: Cns.searchable. I added the (Privilege Group, Cns Privileges) and (Operations, Searchable) to the table referencing (https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-C04F1605-D158-4B65-810F-6F5B109BCDEC.html). Note: The screenshot showing the list of privileges when creating a new role in the vSphere Client does not show "Cns Privileges." This privilege was added in vSphere 7.0. Looks like the screenshot is from vSphere 6.0. Connect with someone who provide updated screenshots for "Creating Credentials in the vSphere Console." --- .../vsphere/create-credentials.md | 1 + 1 file changed, 1 insertion(+) diff --git a/docs/how-to-guides/new-user-guides/launch-kubernetes-with-rancher/use-new-nodes-in-an-infra-provider/vsphere/create-credentials.md b/docs/how-to-guides/new-user-guides/launch-kubernetes-with-rancher/use-new-nodes-in-an-infra-provider/vsphere/create-credentials.md index 968b5845050..976f6ddf083 100644 --- a/docs/how-to-guides/new-user-guides/launch-kubernetes-with-rancher/use-new-nodes-in-an-infra-provider/vsphere/create-credentials.md +++ b/docs/how-to-guides/new-user-guides/launch-kubernetes-with-rancher/use-new-nodes-in-an-infra-provider/vsphere/create-credentials.md @@ -12,6 +12,7 @@ The following table lists the permissions required for the vSphere user account: | Global | Set custom attribute | | Network | Assign | | Resource | AssignVMToPool | +| Cns Privileges | Searchable | | Virtual Machine | Config (All)
GuestOperations (All)
Interact (All)
Inventory (All)
Provisioning (All) | | vSphere Tagging | Assign or Unassign vSphere Tag
Assign or Unassign vSphere Tag on Object |