Skip to content

Commit 593d5dc

Browse files
authored
The text in the important section is idential
The only difference in the text is the usage of "as workaround" vs "in the meantime" Given both are same text, keeping the one which sounds better.
1 parent 1e096b9 commit 593d5dc

File tree

1 file changed

+0
-3
lines changed

1 file changed

+0
-3
lines changed

articles/aks/cluster-container-registry-integration.md

Lines changed: 0 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -17,9 +17,6 @@ You can set up the AKS to ACR integration using the Azure CLI or Azure PowerShel
1717
> [!IMPORTANT]
1818
> There is a latency issue with Azure Active Directory groups when attaching ACR. If the AcrPull role is granted to an Azure AD group and the kubelet identity is added to the group to complete the RBAC configuration, there might be up to a one-hour delay before the RBAC group takes effect. We recommended you to use the [Bring your own kubelet identity][byo-kubelet-identity] as a workaround. You can pre-create a user-assigned identity, add it to the Azure AD group, then use the identity as the kubelet identity to create an AKS cluster. This ensures the identity is added to the Azure AD group before a token is generated by kubelet, which avoids the latency issue.
1919
20-
> [!IMPORTANT]
21-
> There is a latency issue with Azure Active Directory groups when attaching ACR. If the AcrPull role is granted to an Azure AD group and the kubelet identity is added to the group to complete the RBAC configuration, there might be up to a one-hour delay before the RBAC group update takes effect. We recommended you use the [Bring your own kubelet identity][byo-kubelet-identity] in the meantime. You can pre-create a user-assigned identity, add it to the Azure AD group, and then use the identity as the kubelet identity to create an AKS cluster. This ensures the identity is first added to the Azure AD group and then a token is generated by kubelet, which works around the latency issue.
22-
2320
> [!NOTE]
2421
> This article covers automatic authentication between AKS and ACR. If you need to pull an image from a private external registry, use an [image pull secret][image-pull-secret].
2522

0 commit comments

Comments
 (0)