Skip to content

Commit

Permalink
Document the failure cases when in azure mode and the limits of azure.
Browse files Browse the repository at this point in the history
  • Loading branch information
boris-smidt-klarrio committed Dec 4, 2024
1 parent f0927f5 commit fd9cb55
Showing 1 changed file with 12 additions and 1 deletion.
13 changes: 12 additions & 1 deletion README.md
Original file line number Diff line number Diff line change
Expand Up @@ -118,7 +118,18 @@ gcloud iam roles create CustomDiskRole \
```

#### Azure rule
The default role `Tag Contributor` can be used to configure the access rights for the pvc-tagger.
The [default role `Tag Contributor`](https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles/management-and-governance#tag-contributor) can be used to configure the access rights for the pvc-tagger.
At the moment this only supports csi-volumes are supported.
Because the kubernetes tags are richer than what you can set in azure we sanitize the tags for you:

- The invalid characters in key are removed: `<>%&\?/`
This results in `Kubernetes/Cluster` to become `KubernetesCluster`.
- tags longer than to 512 characters are truncated

We generate an error in case there any of these limits are breached:
- tag values are limited to 256 characters
- the tag count is limted to 50 tags
- when a tag after sanitization collides with another tag, `KubernetesCluster` and `Kubernetes/Cluster`

#### Install via helm

Expand Down

0 comments on commit fd9cb55

Please sign in to comment.