Skip to content

[ACS] Fix the SPN Insufficient Permission Issue for Virtual Kubelet installed by aks install-connector#5583

Merged
tjprescott merged 4 commits intoAzure:devfrom
robbiezhang:dev
Feb 15, 2018
Merged

[ACS] Fix the SPN Insufficient Permission Issue for Virtual Kubelet installed by aks install-connector#5583
tjprescott merged 4 commits intoAzure:devfrom
robbiezhang:dev

Conversation

@robbiezhang
Copy link
Copy Markdown
Contributor

@robbiezhang robbiezhang commented Feb 14, 2018


This checklist is used to make sure that common guidelines for a pull request are followed.

General Guidelines

  • The PR has modified HISTORY.rst describing any customer-facing, functional changes. Note that this does not include changes only to help content. (see Modifying change log).

Command Guidelines

  • Each command and parameter has a meaningful description.
  • Each new command has a test.

(see Authoring Command Modules)

@promptws
Copy link
Copy Markdown

View a preview at https://prompt.ws/r/Azure/azure-cli/5583
This is an experimental preview for @microsoft users.


2.0.27
++++++
* use the virtual-kubelet-for-aks helm chart for `aks install-connector` by default, and fix the service principal insufficient permission to create ACI container group issue
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Could you separate this into two bullet points?

short-summary: Service principal used for authentication to Azure APIs.
long-summary: If not specified, a new service principal is created and cached at
{sp_cache} to be used by subsequent `az aks` commands.
long-summary: If not specified, use the AKS service principal defined in the file
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Typo: virtual

",env.nodeName=" + node_name + ",env.nodeTaint=" + node_taint + ",env.nodeOsType=" + os_type])
values = "image.tag={},env.nodeName={},env.nodeTaint={},env.nodeOsType={}".format(image_tag, node_name, node_taint, os_type) # pylint: disable=line-too-long

if service_principal is not None:
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Would this be better as just

if not service_principal:

That's the pythonic way, unless we specifically want identity comparison with None here.

Copy link
Copy Markdown
Contributor Author

@robbiezhang robbiezhang Feb 14, 2018

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

do you mean

if service_principal:

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

D'oh yes of course that's what I meant.

@tjprescott tjprescott merged commit 1591695 into Azure:dev Feb 15, 2018
LukaszStem pushed a commit to LukaszStem/azure-cli that referenced this pull request Feb 21, 2018
…nstalled by `aks install-connector` (Azure#5583)

* Fix the SPN Permission Issue for ACI Connector (Virtual-Kubelet)

* Update HISTORY.rst

* Increase the module version for acs

* Incorporate feedbacks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants