如何使kubernetes容器/吊舱随着GMSA帐户与SQL Server FileStream Table一起运行
我们在基础架构中具有以下设置:
- 在Windows容器/POD中运行的ASP.NET Core Service在Kubernetes中运行的Window Windows主机(我们已经使用Nano和Server-Core映像进行了测试),
- 遵循K8S上的文档,用于为Windows容器为Windows容器/POD配置GMSA,用于域加入Windows主机
- SQL Server在单独的域加入Windows主机上运行的SQL Server-SQL Service在一个下方运行不同的域帐户
我们已经使用SQL Server和目标数据库配置了GMSA帐户,我们可以使用GMSA帐户登录此数据库,并执行所有操作,除了具有带有FileStream列的一个表格。在该表上,任何尝试通过C#sqlfileStream访问FileStream数据的尝试都会导致System.com.ponentmodel.win32 exception(53):找不到网络路径。
我没有发现该特定用例围绕此特定用例的文档,文章或其他任何内容。那么,有人可以阐明是否得到支持,我需要做什么才能正确设置?
We have the following setup in our infrastructure:
- ASP.NET Core service running in a Windows container/pod running in Kubernetes on a domain-joined Windows host (we have tested with both nano and server-core images)
- Followed the documentation on K8s for configuring gMSA for Windows containers/pods for domain-joined Windows hosts
- SQL Server running on a separate domain-joined Windows host - SQL service is running under a different domain account
We have configured the gMSA account with SQL Server and with the target database and we can use the gMSA account to login into this database and do all operations except with the one DB that has the one table with a FILESTREAM column. On that table, any attempt to access the FILESTREAM data via the C# SqlFileStream results in a System.ComponentModel.Win32Exception (53): The network path was not found.
I have found no documentation or articles or anything else around this specific use case. So can someone shed light on whether this is even supported, and what do I need to do to set this up correctly?
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。

绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论