agent-platform release v4.72.2
Fixed
- The capz snapshot-store identity also holds Storage Blob Delegator on the storage account (giantswarm/giantswarm#37705). Substrate 1.1.0’s golden tag copies the golden snapshot’s objects server-side, and s3proxy signs the copy source with a user delegation SAS; the key is an account-level action the container-scoped Data Contributor cannot grant, so on glean every copy failed with
AuthorizationPermissionMismatchand no AgentTemplate reached Ready.