Commit c6f1319
committed
Add privateEndpointConnections/delete permission for Azure PLS cleanup
The cloud-provider-azure CCM calls safeDeletePLS() when removing a
Private Link Service (e.g. when a LoadBalancer Service with the
azure-pls-create annotation is deleted). This function iterates over
all PrivateEndpointConnections on the PLS and deletes each one before
deleting the PLS itself, because Azure does not allow deleting a PLS
that has active Private Endpoint connections from consumers.
Without this permission, PLS cleanup fails when an external consumer
has connected to the service via a Private Endpoint.1 parent 92657ec commit c6f1319
1 file changed
Lines changed: 1 addition & 0 deletions
Lines changed: 1 addition & 0 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
31 | 31 | | |
32 | 32 | | |
33 | 33 | | |
| 34 | + | |
34 | 35 | | |
35 | 36 | | |
36 | 37 | | |
| |||
0 commit comments