ARO-9712 fix setSasPolicy correctly

Azure · Oct 18, 2024 · 3eb641a · 3eb641a
1 parent c11d8e3
commit 3eb641a
Showing 1 changed file with 6 additions and 4 deletions.
diff --git a/pkg/cluster/deploybaseresources_additional.go b/pkg/cluster/deploybaseresources_additional.go
@@ -208,11 +208,13 @@ func (m *manager) storageAccount(name, region string, ocpSubnets []string, encry
 	}
 
 	// For Workload Identity Cluster disable shared access keys, only User Delegated SAS are allowed
-	if m.doc.OpenShiftCluster.UsesWorkloadIdentity() && setSasPolicy {
+	if m.doc.OpenShiftCluster.UsesWorkloadIdentity() {
 		sa.AllowSharedKeyAccess = to.BoolPtr(false)
-		sa.SasPolicy = &mgmtstorage.SasPolicy{
-			SasExpirationPeriod: to.StringPtr("0.01:00:00"),
-			ExpirationAction:    to.StringPtr("Log"),
+		if setSasPolicy {
+			sa.SasPolicy = &mgmtstorage.SasPolicy{
+				SasExpirationPeriod: to.StringPtr("0.01:00:00"),
+				ExpirationAction:    to.StringPtr("Log"),
+			}
 		}
 	}