You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/operator-nexus/howto-service-principal-rotation.md
+4-4Lines changed: 4 additions & 4 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,6 +1,6 @@
1
1
---
2
2
title: Azure Operator Nexus service principal rotation
3
-
description: Instructions on Service Principal Rotation Lifecycle Management.
3
+
description: Instructions on service principal rotation lifecycle management.
4
4
ms.service: azure-operator-nexus
5
5
ms.custom: template-how-to
6
6
ms.topic: how-to
@@ -23,7 +23,7 @@ This document provides an overview on the process of performing service principa
23
23
6. Service Principal rotation should be performed prior to the configured credentials expiring.
24
24
7. Service Principal should have owner privilege on the subscription of the target cluster.
25
25
26
-
## Appending secondary credential to the existing service principal
26
+
## Append secondary credential to the existing service principal
27
27
28
28
List existing credentials info for the service principal
29
29
@@ -36,15 +36,15 @@ Append secondary credential to the service principal. Please copy the resulting
36
36
```azurecli
37
37
az ad app credential reset --id "<SP Application (client) ID>" --append --display-name "<human-readable description>"
38
38
```
39
-
## Creating new service principal
39
+
## Create a new service principal
40
40
41
41
New service principal should have owner privilege scope on the target cluster subscription.
42
42
43
43
```azurecli
44
44
az ad sp create-for-rbac -n "<service principal display name>" --role owner --scopes /subscriptions/<subscription-id>
45
45
```
46
46
47
-
## Rotating service principal on the target cluster
47
+
## Rotate service principal on the target cluster
48
48
49
49
Service principal can be rotated on the target cluster by supplying the new information, which can either be only secondary credential update or it could be the new service principal for the target cluster.
0 commit comments