Skip to content

Commit 5692eff

Browse files
author
vithumma
committed
RBAC deprecation & fix the issue
1 parent 34ff6f5 commit 5692eff

File tree

3 files changed

+13
-17
lines changed

3 files changed

+13
-17
lines changed

src/connectedk8s/HISTORY.rst

Lines changed: 6 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,11 @@
22
33
Release History
44
===============
5+
1.10.8
6+
+++++
7+
* Removed deprecated '--app-id' and '--app-secret' RBAC parameters from the extension.
8+
* Bug fix for https://github.com/Azure/azure-cli-extensions/issues/8498: resolved error when using the extension with Azure CLI v2.59+.
9+
* Update warning to use the latest kubelogin version which has support for generating PoP token.
510

611
1.10.7
712
++++++
@@ -68,7 +73,7 @@ Release History
6873
++++++
6974
* New api version 2024-07-1-preview added
7075
* Adding functionality for workload identity feature.
71-
* Cluster create and update waits for agent state
76+
* Cluster create and update waits for agent state
7277

7378
1.7.3
7479
++++++

src/connectedk8s/azext_connectedk8s/_params.py

Lines changed: 0 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -440,20 +440,6 @@ def load_arguments(self: Connectedk8sCommandsLoader, _: CLICommand) -> None:
440440
options_list=["--features"],
441441
help="Space-separated list of features you want to enable.",
442442
)
443-
c.argument(
444-
"azrbac_client_id",
445-
options_list=["--app-id"],
446-
arg_group="Azure RBAC",
447-
help="Application ID for enabling Azure RBAC.",
448-
deprecate_info=c.deprecate(hide=True),
449-
)
450-
c.argument(
451-
"azrbac_client_secret",
452-
options_list=["--app-secret"],
453-
arg_group="Azure RBAC",
454-
help="Application secret for enabling Azure RBAC.",
455-
deprecate_info=c.deprecate(hide=True),
456-
)
457443
c.argument(
458444
"azrbac_skip_authz_check",
459445
options_list=["--skip-azure-rbac-list"],

src/connectedk8s/azext_connectedk8s/custom.py

Lines changed: 7 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -2865,6 +2865,10 @@ def enable_features(
28652865
utils.check_features_to_update(features)
28662866
)
28672867

2868+
# Initialize these variables to ensure they are always defined, preventing UnboundLocalError if only a subset of features is enabled.
2869+
final_enable_cl = False
2870+
custom_locations_oid = None
2871+
28682872
# Check if cluster is private link enabled
28692873
connected_cluster = client.get(resource_group_name, cluster_name)
28702874

@@ -3024,8 +3028,9 @@ def enable_features(
30243028
# apps for authN/authZ.
30253029
cmd_helm_upgrade.extend(["--set", "systemDefaultValues.guard.authnMode=arc"])
30263030
logger.warning(
3027-
"Please use the kubelogin version v0.0.32 or higher which has support for generating PoP token(s). "
3028-
"This is needed by guard running in 'arc' authN mode."
3031+
"[Azure RBAC] For secure authentication, ensure you have the latest kubelogin installed which supports PoP tokens. "
3032+
"This is required for Azure RBAC. Download or upgrade at: https://github.com/Azure/kubelogin/releases. "
3033+
"If you encounter authentication errors, please verify your kubelogin version and refer to the documentation for troubleshooting."
30293034
)
30303035
cmd_helm_upgrade.extend(
30313036
[

0 commit comments

Comments
 (0)