azure - Azure Kubernetes 服务创建问题

Question

我正在使用高级网络选项在 Azure 中创建 kubernetes 服务，其中我为它选择了特定的 vNet 和子网。

我收到如下错误：

{"code":"InvalidTemplateDeployment","message":"The template deployment failed with error: 'Authorization failed for template resource '<vnetid>/<subnetid>/Microsoft.Authorization/xxx' of type 'Microsoft.Network/virtualNetworks/subnets/providers/roleAssignments'. The client '<emailid>' with object id 'xxx' does not have permission to perform action 'Microsoft.Authorization/roleAssignments/write' at scope '/subscriptions/<subid>/resourceGroups/<rgid>/providers/Microsoft.Network/virtualNetworks/<vnetid>/subnets/<subnetid>/providers/Microsoft.Authorization/roleAssignments/xxx'.'."}

我有贡献者角色。

标签： azurekubernetesazure-virtual-networkazure-aks

Answer 1

根据以下文章，您将需要对 vNet 的所有者权限才能更改对它的访问。

https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#built-in-role-descriptions