APEX PowerScale on Azure failing to make API calls to commit configuration changes post deployment. #1
Description
APEX PowerScale failing to make API calls to Azure because the nodes use "System assigned" identity that does not have the required privileges for cluster deployment. The error we see is -
isi.cloud.api.azure.base[6545]: (base) ERROR: API request failed: 403 Client Error:
isi.cloud.cli.azure[6545]: (azure) ERROR: {'error': {'code': 'AuthorizationFailed'
After creating the "user assigned" identity with the required privileges for cluster deployment and specifying that in the "identity" section in the TF code, the cluster build process completes successfully. But the post build configurations like - SSIP, pools fail because the cluster tries to make API calls to Azure using a "system assigned" identity that does not have the required privileges. This is a bug in the OneFS image in Azure Marketplace that's being used to deploy the cluster.