Update driver-parameters.md

kubernetes-sigs · Jul 18, 2024 · fda1e78 · fda1e78
1 parent 338e1d5
commit fda1e78
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/docs/driver-parameters.md b/docs/driver-parameters.md
@@ -1,10 +1,9 @@
 ## Driver Parameters
  > parameter names are case-insensitive
- > 
- > make sure the identity used by CSI driver has `Storage Blob Data Contributor` on the storage account 
 
 <details><summary>required permissions for CSI driver controller</summary>
 <pre>
+ # assign the "storage account contributor" and "Storage Blob Data Contributor" roles to the CSI driver controller, it will provide permissions for the following actions:
 Microsoft.Storage/storageAccounts/write
 Microsoft.Storage/storageAccounts/read
 Microsoft.Storage/storageAccounts/listKeys/action
@@ -13,6 +12,7 @@ Microsoft.Storage/storageAccounts/blobServices/containers/write
 Microsoft.Storage/storageAccounts/blobServices/containers/read
 Microsoft.Storage/storageAccounts/blobServices/containers/delete
 Microsoft.Storage/operations/read
+# this is only necessary if the driver creates the storage account with a private endpoint:
 Microsoft.Network/virtualNetworks/subnets/write
 Microsoft.Network/virtualNetworks/subnets/read
 Microsoft.Network/privateEndpoints/write