@@ -1045,7 +1045,7 @@ function Test-AadProfile {
1045
1045
# New-AzADGroup -DisplayName $AdGroupName -MailNickname $AdGroupName
1046
1046
# $adGroup = Get-AzADGroup -DisplayName $AdGroupName
1047
1047
# $adGroupId = $adGroup.Id
1048
- $adGroupId = ' e74a0087-33b6-4144-977d-f9802b0031d4 '
1048
+ $adGroupId = ' 1e1dad09-f44e-4ec3-9bdd-6c92d2099c63 '
1049
1049
$AadProfile = @ {
1050
1050
managed = $true
1051
1051
enableAzureRBAC = $false
@@ -1054,18 +1054,22 @@ function Test-AadProfile {
1054
1054
$AadProfile = [Microsoft.Azure.Management.ContainerService.Models.ManagedClusterAADProfile ]$AadProfile
1055
1055
1056
1056
# create aks cluster with AadProfile
1057
- New-AzAksCluster - ResourceGroupName $resourceGroupName - Name $kubeClusterName - NodeCount 1 - AadProfile $AadProfile
1057
+ New-AzAksCluster - ResourceGroupName $resourceGroupName - Name $kubeClusterName - NodeCount 1 - AadProfile $AadProfile - DisableLocalAccount
1058
1058
$cluster = Get-AzAksCluster - ResourceGroupName $resourceGroupName - Name $kubeClusterName
1059
1059
Assert-ObjectEquals $AadProfile.managed $cluster.AadProfile.managed
1060
1060
Assert-ObjectEquals $AadProfile.enableAzureRBAC $cluster.AadProfile.enableAzureRBAC
1061
1061
Assert-ObjectEquals $AadProfile.adminGroupObjectIDs $cluster.AadProfile.adminGroupObjectIDs
1062
1062
Assert-ObjectEquals ' 54826b22-38d6-4fb2-bad9-b7b93a3e9c5a' $cluster.AadProfile.TenantID
1063
+ Assert-ObjectEquals $true $cluster.DisableLocalAccounts
1064
+ $cluster = $cluster | Set-AzAksCluster - DisableLocalAccount:$false
1065
+ Assert-ObjectEquals $false $cluster.DisableLocalAccounts
1063
1066
$cluster | Remove-AzAksCluster - Force
1064
1067
1065
1068
# create aks cluster without AadProfile
1066
1069
New-AzAksCluster - ResourceGroupName $resourceGroupName - Name $kubeClusterName - NodeCount 1
1067
1070
$cluster = Get-AzAksCluster - ResourceGroupName $resourceGroupName - Name $kubeClusterName
1068
1071
Assert-Null $cluster.AadProfile
1072
+ Assert-Null $cluster.DisableLocalAccounts
1069
1073
# update the aks cluster with AadProfile
1070
1074
Set-AzAksCluster - ResourceGroupName $resourceGroupName - Name $kubeClusterName - AadProfile $AadProfile
1071
1075
$cluster = Get-AzAksCluster - ResourceGroupName $resourceGroupName - Name $kubeClusterName
@@ -1074,6 +1078,9 @@ function Test-AadProfile {
1074
1078
Assert-ObjectEquals " " $cluster.AadProfile.enableAzureRBAC
1075
1079
Assert-ObjectEquals $AadProfile.adminGroupObjectIDs $cluster.AadProfile.adminGroupObjectIDs
1076
1080
Assert-ObjectEquals ' 54826b22-38d6-4fb2-bad9-b7b93a3e9c5a' $cluster.AadProfile.TenantID
1081
+ Assert-Null $cluster.DisableLocalAccounts
1082
+ $cluster = $cluster | Set-AzAksCluster - DisableLocalAccount
1083
+ Assert-ObjectEquals $true $cluster.DisableLocalAccounts
1077
1084
$cluster | Remove-AzAksCluster - Force
1078
1085
}
1079
1086
finally {
0 commit comments