microsoft
[MicrosoftDocs] gMSA Documentation
What is your question? From the MicrosoftDocs/Virtualization-Documentation repo, we've seen a number of requests to improve the documentation or correct mistakes. These include:
- gMSA and DNS Server settings
- gMSA on Kubernetes has gone GA
- host/PRINCIPAL to a gMSA MicrosoftDocs/Virtualization-Documentation#1791
- So you effectively replaced a Process ID with a Process ID plus gMSAs? MicrosoftDocs/Virtualization-Documentation-Private#1144
- Update gMSA state MicrosoftDocs/Virtualization-Documentation#1477
- Need to "SetSPN" or servicePrincipalName on gMSA account. MicrosoftDocs/Virtualization-Documentation#1341
- Using secondary gMSAs MicrosoftDocs/Virtualization-Documentation-Private#1355
- Typo in "Check the container", step 4 MicrosoftDocs/Virtualization-Documentation#1414
- Elaborate more on Additional credential spec configuration for non-domain-joined container host use case MicrosoftDocs/Virtualization-Documentation#1680
Can we please also introduce some documentation around User Manager as part of this. It feels like it is some kind of proxy for LSA operations. It also has some unexpected effects that users should be aware of - such as when trying negotiate between processes within same container, ~after having DisableLoopbackCheck disabled~ (edit: does not look like setting DisableLoopbackCheck to 1 is required even if you have two containers in same Pod, sharing the network namespaces), the ticket is actually issued by User Manager and not the actual KDC the container/gMSA may be related to.
I have taken action on most items above. Items still open that I will be following up on:
- https://github.com/MicrosoftDocs/Virtualization-Documentation/issues/1791
- https://github.com/MicrosoftDocs/Virtualization-Documentation/issues/1680
- https://github.com/MicrosoftDocs/Virtualization-Documentation-Private/issues/1355
This issue has been open for 30 days with no updates. @vrapolinario, @riyapatel-ms, please provide an update or close this issue.
![microsoft-github-policy-service[bot] avatar](https://avatars.githubusercontent.com/in/95686?v=4 "Published by a pub.dev verified publisher"){kind=small}
I have updated two of the items, with just this one remaining:
- https://github.com/MicrosoftDocs/Virtualization-Documentation-Private/issues/1355 I'm currently investigating this internally to provide clarity on the issue raised by the customer.
This issue has been open for 30 days with no updates. @vrapolinario, @riyapatel-ms, please provide an update or close this issue.
This issue has been open for 30 days with no updates. @vrapolinario, @riyapatel-ms, please provide an update or close this issue.
This issue has been open for 30 days with no updates. @vrapolinario, @riyapatel-ms, please provide an update or close this issue.
Apologies for not updating this thread. I'm working on updating some documentation and confirming some gMSA scenarios internally, no news for now.