Skip to content

Commit cd166d6

Browse files
ibruyninDelyan Raychev
authored andcommitted
Added note about rbac.enabled in helm.config (#661)
Fixed layout for helm.config variables
1 parent bb1360b commit cd166d6

File tree

1 file changed

+17
-16
lines changed

1 file changed

+17
-16
lines changed

docs/setup/install-new.md

Lines changed: 17 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -199,12 +199,12 @@ Kubernetes. We will leverage it to install the `application-gateway-kubernetes-i
199199
identityClientId=$(jq -r ".identityClientId.value" deployment-outputs.json)
200200
identityResourceId=$(jq -r ".identityResourceId.value" deployment-outputs.json)
201201
```
202-
1. Download [helm-config.yaml](../examples/sample-helm-config.yaml), which will configure AGIC:
202+
2. Download [helm-config.yaml](../examples/sample-helm-config.yaml), which will configure AGIC:
203203
```bash
204204
wget https://raw.githubusercontent.com/Azure/application-gateway-kubernetes-ingress/master/docs/examples/sample-helm-config.yaml -O helm-config.yaml
205205
```
206206
207-
1. Edit the newly downloaded [helm-config.yaml](../examples/sample-helm-config.yaml) and fill out the sections `appgw` and `armAuth`.
207+
3. Edit the newly downloaded [helm-config.yaml](../examples/sample-helm-config.yaml) and fill out the sections `appgw` and `armAuth`.
208208
```bash
209209
sed -i "s|<subscriptionId>|${subscriptionId}|g" helm-config.yaml
210210
sed -i "s|<resourceGroupName>|${resourceGroupName}|g" helm-config.yaml
@@ -216,29 +216,30 @@ Kubernetes. We will leverage it to install the `application-gateway-kubernetes-i
216216
nano helm-config.yaml
217217
```
218218
219-
Values:
220-
- `verbosityLevel`: Sets the verbosity level of the AGIC logging infrastructure. See [Logging Levels](https://github.com/Azure/application-gateway-kubernetes-ingress/blob/463a87213bbc3106af6fce0f4023477216d2ad78/docs/troubleshooting.md#logging-levels) for possible values.
221-
- `appgw.subscriptionId`: The Azure Subscription ID in which App Gateway resides. Example: `a123b234-a3b4-557d-b2df-a0bc12de1234`
222-
- `appgw.resourceGroup`: Name of the Azure Resource Group in which App Gateway was created. Example: `app-gw-resource-group`
223-
- `appgw.name`: Name of the Application Gateway. Example: `applicationgatewayd0f0`
224-
- `appgw.shared`: This boolean flag should be defaulted to `false`. Set to `true` should you need a [Shared App Gateway](https://github.com/Azure/application-gateway-kubernetes-ingress/blob/072626cb4e37f7b7a1b0c4578c38d1eadc3e8701/docs/setup/install-existing.md#multi-cluster--shared-app-gateway).
225-
- `kubernetes.watchNamespace`: Specify the name space, which AGIC should watch. This could be a single string value, or a comma-separated list of namespaces.
226-
- `armAuth.type`: could be `aadPodIdentity` or `servicePrincipal`
227-
- `armAuth.identityResourceID`: Resource ID of the Azure Managed Identity
228-
- `armAuth.identityClientId`: The Client ID of the Identity. See below for more information on Identity
229-
- `armAuth.secretJSON`: Only needed when Service Principal Secret type is chosen (when `armAuth.type` has been set to `servicePrincipal`)
230-
219+
Values:
220+
- `verbosityLevel`: Sets the verbosity level of the AGIC logging infrastructure. See [Logging Levels](https://github.com/Azure/application-gateway-kubernetes-ingress/blob/463a87213bbc3106af6fce0f4023477216d2ad78/docs/troubleshooting.md#logging-levels) for possible values.
221+
- `appgw.subscriptionId`: The Azure Subscription ID in which App Gateway resides. Example: `a123b234-a3b4-557d-b2df-a0bc12de1234`
222+
- `appgw.resourceGroup`: Name of the Azure Resource Group in which App Gateway was created. Example: `app-gw-resource-group`
223+
- `appgw.name`: Name of the Application Gateway. Example: `applicationgatewayd0f0`
224+
- `appgw.shared`: This boolean flag should be defaulted to `false`. Set to `true` should you need a [Shared App Gateway](https://github.com/Azure/application-gateway-kubernetes-ingress/blob/072626cb4e37f7b7a1b0c4578c38d1eadc3e8701/docs/setup/install-existing.md#multi-cluster--shared-app-gateway).
225+
- `kubernetes.watchNamespace`: Specify the name space, which AGIC should watch. This could be a single string value, or a comma-separated list of namespaces.
226+
- `armAuth.type`: could be `aadPodIdentity` or `servicePrincipal`
227+
- `armAuth.identityResourceID`: Resource ID of the Azure Managed Identity
228+
- `armAuth.identityClientId`: The Client ID of the Identity. See below for more information on Identity
229+
- `armAuth.secretJSON`: Only needed when Service Principal Secret type is chosen (when `armAuth.type` has been set to `servicePrincipal`)
230+
- `rbac.enabled`: Make sure to set this to true if you have a AKS cluster that is RBAC enabled.
231231
232232
Note on Identity: The `identityResourceID` and `identityClientID` are values that were created
233233
during the [Create an Identity](https://github.com/Azure/application-gateway-kubernetes-ingress/blob/072626cb4e37f7b7a1b0c4578c38d1eadc3e8701/docs/setup/install-new.md#create-an-identity)
234234
steps, and could be obtained again using the following command:
235235
```bash
236236
az identity show -g <resource-group> -n <identity-name>
237237
```
238-
`<resource-group>` in the command above is the resource group of your App Gateway. `<identity-name>` is the name of the created identity. All identities for a given subscription can be listed using: `az identity list`
238+
- `<resource-group>` in the command above is the resource group of your App Gateway.
239+
- `<identity-name>` is the name of the created identity. All identities for a given subscription can be listed using: `az identity list`
239240
240241
241-
1. Install the Application Gateway ingress controller package:
242+
4. Install the Application Gateway ingress controller package:
242243
243244
```bash
244245
helm install -f helm-config.yaml application-gateway-kubernetes-ingress/ingress-azure

0 commit comments

Comments
 (0)