Offer LoadBalancer & Network Permissions & Options

[Pedro Guimarães]

Using latest azure-integrator, I cannot deploy a LB if I have the following:

k8s VMs on Resource Group A (but NICs connected to net B on resource group B)
LB should goes on net B on Resource Group B.

It fails with several permission missing.
I need the following permissions for both resource groups:
Microsoft.Network/networkInterfaces/write
Microsoft.Network/virtualNetworks/read
Microsoft.Network/virtualNetworks/subnets/read
Microsoft.Network/virtualNetworks/subnets/join/action
Microsoft.Network/loadBalancers/write

[Pedro Guimarães (pguimaraes)]

Raised as field critical since this is blocking an ongoing project.

[Dean Henrichsmeyer (dean)]

Sorry, feature requests can't be field critical. Please review the documentation on SLA. We can see what we can do but this doesn't fall under the SLA.

[Pedro Guimarães (pguimaraes)]

{
  "useInstanceMetadata": true,
  "useManagedIdentityExtension": true,
  "subscriptionId": "",
  "resourceGroup": "",
  "location": "",
  "vnetName": "",
  "vnetResourceGroup": "", <<<-------------
  "subnetName": "", <<<-------------
  "securityGroupName": "", <<<-------------
  "loadBalancerSku": ""
}

I can do it if I manually edit the cloud-config.conf (as seen above) to include my custom vnet, subnet and vnet's resource group.
I can also add the roles to the VMs above and the issue gets fixed.

All the pieces are there on Kubernetes & Azure side. The missing bit is only the charm itself, i.e. (1) copy a value from a config and pass that to the cloud-config; and (2) assign the roles that have been described on this bug.

[Pedro Guimarães (pguimaraes)]

There are 3 places to fix this, here they are:

https://github.com/juju-solutions/charm-azure-integrator/pull/26
https://github.com/juju-solutions/interface-azure-integration/pull/5
https://github.com/charmed-kubernetes/charm-kubernetes-master/pull/123

I am still testing them...

[George Kraft (cynerva)]

This is available in edge with cs:~containers/kubernetes-master-895 and cs:~containers/azure-integrator-50