[AKS] Support update kubelet identity#4740
Conversation
|
AKS |
src/aks-preview/HISTORY.md
Outdated
| ++++++ | ||
|
|
||
| * Add support for updating kubelet identity. Command is | ||
| * `az aks create --cluster-snapshot-id <snapshot-id>` |
There was a problem hiding this comment.
Are we sure this is the right command?
| * Add support for updating kubelet identity. Command is | ||
| * `az aks update --assign-kubelet-identity <kubelelt-identity-resource-id>` |
There was a problem hiding this comment.
May I ask what's the difference between kubelet identity and managed identity?
There was a problem hiding this comment.
kubelet identity is used by kubelet in agent node, its main purpose is authenticating to ACR to pull image from ACR;
--enable-managed-identity or --assign-identity refers to control plane identity, which is used by AKS managed master components such as kube-controller-manager, its main purpose is to authenticating to Azure to manage Azure resource, for example, when kube-controller-manager find it needs to update load balancer, it will authenticate using control plane identity to do the operation.
There was a problem hiding this comment.
As far as I know, there is a (managed or user assigned) identity used by the control plane (i.e., managed cluster) and another one (this kubelet identity) used by the nodes (mainly used for authentication when pulling image from acr).
Co-authored-by: Xing Zhou <Zhou.Xing@microsoft.com>
|
The live test failed because RP change is not rolled out to all regions |
|
Updated live test region to centraluseuap. Previous live test is done in westus2 staging env, prod env westus2 does not have this change yet. |
This checklist is used to make sure that common guidelines for a pull request are followed.
General Guidelines
azdev style <YOUR_EXT>locally? (pip install azdevrequired)python scripts/ci/test_index.py -qlocally?For new extensions:
About Extension Publish
There is a pipeline to automatically build, upload and publish extension wheels.
Once your PR is merged into master branch, a new PR will be created to update
src/index.jsonautomatically.The precondition is to put your code inside this repo and upgrade the version in the PR but do not modify
src/index.json.