It appears the solution was just to sign into the assigned access account (without assigned access turned on) and put it in tablet mode. Turned AA back on and it came up fine. For good measure I also went into Tablet Mode Settings and set everything to be always tablet-only. We will see if this works out in the long run.
I have added a user in the local group "Windows Admin Center Administrators"
When I connect through the gateway to this server I get following error:
"Couldn't get the PowerShell language mode of this computer."
It appears that the issue might be related to insufficient permissions that the user in the local group "Windows Admin Center Administrators" has. Even though the user is part of the local group, they may not have the necessary permissions to perform certain operations that require elevated privileges, such as accessing PowerShell on the remote server.
You need to confirm that the user in question has the necessary permissions within Active Directory and the role-based access control (RBAC) settings in Windows Admin Center. Secondly, check the PowerShell execution policy and Group Policy settings to ensure they don't restrict the user's access (Get-ExecutionPolicy). Lastly, attempt a manual execution of a PowerShell command on the remote server to investigate if the issue is specific to Windows Admin Center or a broader problem with PowerShell remoting.
Managing storage is a distinct problem from managing compute instances.The PersistentVolume subsystem provides an API for users and administratorsthat abstracts details of how storage is provided from how it is consumed.To do this, we introduce two new API resources: PersistentVolume and PersistentVolumeClaim.
A PersistentVolume (PV) is a piece of storage in the cluster that has beenprovisioned by an administrator or dynamically provisioned usingStorage Classes. It is a resource inthe cluster just like a node is a cluster resource. PVs are volume plugins likeVolumes, but have a lifecycle independent of any individual Pod that uses the PV.This API object captures the details of the implementation of the storage, be thatNFS, iSCSI, or a cloud-provider-specific storage system.
A PersistentVolumeClaim (PVC) is a request for storage by a user. It is similarto a Pod. Pods consume node resources and PVCs consume PV resources. Pods canrequest specific levels of resources (CPU and Memory). Claims can request specificsize and access modes (e.g., they can be mounted ReadWriteOnce, ReadOnlyMany,ReadWriteMany, or ReadWriteOncePod, see AccessModes).
While PersistentVolumeClaims allow a user to consume abstract storage resources,it is common that users need PersistentVolumes with varying properties, such asperformance, for different problems. Cluster administrators need to be able tooffer a variety of PersistentVolumes that differ in more ways than size and accessmodes, without exposing users to the details of how those volumes are implemented.For these needs, there is the StorageClass resource.
A cluster administrator creates a number of PVs. They carry the details of thereal storage, which is available for use by cluster users. They exist in theKubernetes API and are available for consumption.
When none of the static PVs the administrator created match a user's PersistentVolumeClaim,the cluster may try to dynamically provision a volume specially for the PVC.This provisioning is based on StorageClasses: the PVC must request astorage class andthe administrator must have created and configured that class for dynamicprovisioning to occur. Claims that request the class "" effectively disabledynamic provisioning for themselves.
To enable dynamic storage provisioning based on storage class, the cluster administratorneeds to enable the DefaultStorageClassadmission controlleron the API server. This can be done, for example, by ensuring that DefaultStorageClass isamong the comma-delimited, ordered list of values for the --enable-admission-plugins flag ofthe API server component. For more information on API server command-line flags,check kube-apiserver documentation.
A user creates, or in the case of dynamic provisioning, has already created,a PersistentVolumeClaim with a specific amount of storage requested and withcertain access modes. A control loop in the control plane watches for new PVCs, findsa matching PV (if possible), and binds them together. If a PV was dynamicallyprovisioned for a new PVC, the loop will always bind that PV to the PVC. Otherwise,the user will always get at least what they asked for, but the volume may be inexcess of what was requested. Once bound, PersistentVolumeClaim binds are exclusive,regardless of how they were bound. A PVC to PV binding is a one-to-one mapping,using a ClaimRef which is a bi-directional binding between the PersistentVolumeand the PersistentVolumeClaim.
Claims will remain unbound indefinitely if a matching volume does not exist.Claims will be bound as matching volumes become available. For example, acluster provisioned with many 50Gi PVs would not match a PVC requesting 100Gi.The PVC can be bound when a 100Gi PV is added to the cluster.
Pods use claims as volumes. The cluster inspects the claim to find the boundvolume and mounts that volume for a Pod. For volumes that support multipleaccess modes, the user specifies which mode is desired when using their claimas a volume in a Pod.
Once a user has a claim and that claim is bound, the bound PV belongs to theuser for as long as they need it. Users schedule Pods and access their claimedPVs by including a persistentVolumeClaim section in a Pod's volumes block.See Claims As Volumes for more details on this.
The purpose of the Storage Object in Use Protection feature is to ensure thatPersistentVolumeClaims (PVCs) in active use by a Pod and PersistentVolume (PVs)that are bound to PVCs are not removed from the system, as this may result in data loss.
If a user deletes a PVC in active use by a Pod, the PVC is not removed immediately.PVC removal is postponed until the PVC is no longer actively used by any Pods. Also,if an admin deletes a PV that is bound to a PVC, the PV is not removed immediately.PV removal is postponed until the PV is no longer bound to a PVC.
When a user is done with their volume, they can delete the PVC objects from theAPI that allows reclamation of the resource. The reclaim policy for a PersistentVolumetells the cluster what to do with the volume after it has been released of its claim.Currently, volumes can either be Retained, Recycled, or Deleted.
The Retain reclaim policy allows for manual reclamation of the resource.When the PersistentVolumeClaim is deleted, the PersistentVolume still existsand the volume is considered "released". But it is not yet available foranother claim because the previous claimant's data remains on the volume.An administrator can manually reclaim the volume with the following steps.
For volume plugins that support the Delete reclaim policy, deletion removesboth the PersistentVolume object from Kubernetes, as well as the associatedstorage asset in the external infrastructure. Volumes that were dynamically provisionedinherit the reclaim policy of their StorageClass, whichdefaults to Delete. The administrator should configure the StorageClassaccording to users' expectations; otherwise, the PV must be edited orpatched after it is created. SeeChange the Reclaim Policy of a PersistentVolume.
However, an administrator can configure a custom recycler Pod template usingthe Kubernetes controller manager command line arguments as described in thereference.The custom recycler Pod template must contain a volumes specification, asshown in the example below:
When the CSIMigrationprovider feature flag is enabled for a specific in-tree volume plugin,the kubernetes.io/pv-controller finalizer is replaced by theexternal-provisioner.volume.kubernetes.io/finalizer finalizer.
By specifying a PersistentVolume in a PersistentVolumeClaim, you declare a bindingbetween that specific PV and PVC. If the PersistentVolume exists and has not reservedPersistentVolumeClaims through its claimRef field, then the PersistentVolume andPersistentVolumeClaim will be bound.
This method does not guarantee any binding privileges to the PersistentVolume.If other PersistentVolumeClaims could use the PV that you specify, you firstneed to reserve that storage volume. Specify the relevant PersistentVolumeClaimin the claimRef field of the PV so that other PVCs can not bind to it.
To request a larger volume for a PVC, edit the PVC object and specify a largersize. This triggers expansion of the volume that backs the underlying PersistentVolume. Anew PersistentVolume is never created to satisfy the claim. Instead, an existing volume is resized.
When a volume contains a file system, the file system is only resized when a new Pod is usingthe PersistentVolumeClaim in ReadWrite mode. File system expansion is either done when a Pod is starting upor when a Pod is running and the underlying file system supports online expansion.
In this case, you don't need to delete and recreate a Pod or deployment that is using an existing PVC.Any in-use PVC automatically becomes available to its Pod as soon as its file system has been expanded.This feature has no effect on PVCs that are not in use by a Pod or deployment. You must create a Pod thatuses the PVC before the expansion can complete.
If a user specifies a new size that is too big to be satisfied by underlyingstorage system, expansion of PVC will be continuously retried until user orcluster administrator takes some action. This can be undesirable and henceKubernetes provides following methods of recovering from such failures.
If expanding underlying storage fails, the cluster administrator can manuallyrecover the Persistent Volume Claim (PVC) state and cancel the resize requests.Otherwise, the resize requests are continuously retried by the controller withoutadministrator intervention.
d3342ee215