Skip to content

Commit 465e868

Browse files
authored
Update container-insights-enable-existing-clusters.md
------- cc: @bwren
1 parent 1ca7990 commit 465e868

File tree

1 file changed

+16
-5
lines changed

1 file changed

+16
-5
lines changed

articles/azure-monitor/containers/container-insights-enable-existing-clusters.md

Lines changed: 16 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -406,6 +406,11 @@ After a few minutes, the command completes and returns JSON-formatted informatio
406406
### Existing clusters with service principal
407407
AKS Clusters with service principal must first disable monitoring and then upgrade to managed identity. Only Azure public cloud, Azure China cloud, and Azure Government cloud are currently supported for this migration.
408408

409+
1. Get the configured Log Analytics workspace resource id:
410+
411+
```cli
412+
az aks show -g <resource-group-name> -n <cluster-name> | grep -i "logAnalyticsWorkspaceResourceID"
413+
```
409414

410415
1. Disable monitoring with the following command:
411416

@@ -419,22 +424,28 @@ AKS Clusters with service principal must first disable monitoring and then upgra
419424
az aks update -g <resource-group-name> -n <cluster-name> --enable-managed-identity --workspace-resource-id <workspace-resource-id>
420425
```
421426

422-
3. Enable Monitoring addon with managed identity authentication with the following command:
427+
3. Enable Monitoring addon with managed identity authentication option using Log Analytics workspace resource ID obtained in the first step:
423428

424429
```cli
425430
az aks enable-addons -a monitoring --enable-msi-auth-for-monitoring -g <resource-group-name> -n <cluster-name> --workspace-resource-id <workspace-resource-id>
426431
```
427432

428-
### Existing clusters with system assigned identity
429-
AKS Clusters with system assigned identity must first disable monitoring and then upgrade to managed identity. Only Azure public cloud, Azure China cloud, and Azure Government cloud are currently supported for this migration.
433+
### Existing clusters with system or user assigned identity
434+
AKS Clusters with system assigned identity must first disable monitoring and then upgrade to managed identity. Only Azure public cloud, Azure China cloud, and Azure Government cloud are currently supported for clusters with system identity. For clusters with user assigned identity, only Azure Public cloud is supported.
435+
436+
1. Get the configured Log Analytics workspace resource id:
437+
438+
```cli
439+
az aks show -g <resource-group-name> -n <cluster-name> | grep -i "logAnalyticsWorkspaceResourceID"
440+
```
430441

431442
1. Disable monitoring with the following command:
432443

433444
```cli
434-
az aks disable-addons -a monitoring -g <resource-group-name> -n <cluster-name> --workspace-resource-id <workspace-resource-id>
445+
az aks disable-addons -a monitoring -g <resource-group-name> -n <cluster-name>
435446
```
436447

437-
2. Enable Monitoring addon with Managed Identity Auth Option
448+
3. Enable Monitoring addon with managed identity authentication option using Log Analytics workspace resource ID obtained in the first step:
438449

439450
```cli
440451
az aks enable-addons -a monitoring --enable-msi-auth-for-monitoring -g <resource-group-name> -n <cluster-name> --workspace-resource-id <workspace-resource-id>

0 commit comments

Comments
 (0)