Skip to content

Commit 61777d8

Browse files
Merge pull request #223168 from MGoedtel/task58359
added step for disabling WI
2 parents bb6dbaa + aba6cbf commit 61777d8

File tree

1 file changed

+9
-1
lines changed

1 file changed

+9
-1
lines changed

articles/aks/workload-identity-deploy-cluster.md

Lines changed: 9 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@ title: Deploy and configure an Azure Kubernetes Service (AKS) cluster with workl
33
description: In this Azure Kubernetes Service (AKS) article, you deploy an Azure Kubernetes Service cluster and configure it with an Azure AD workload identity (preview).
44
services: container-service
55
ms.topic: article
6-
ms.date: 10/24/2022
6+
ms.date: 01/06/2023
77
---
88

99
# Deploy and configure workload identity (preview) on an Azure Kubernetes Service (AKS) cluster
@@ -157,6 +157,14 @@ az identity federated-credential create --name myfederatedIdentity --identity-na
157157
> [!NOTE]
158158
> It takes a few seconds for the federated identity credential to be propagated after being initially added. If a token request is made immediately after adding the federated identity credential, it might lead to failure for a couple of minutes as the cache is populated in the directory with old data. To avoid this issue, you can add a slight delay after adding the federated identity credential.
159159
160+
## Disable workload identity
161+
162+
To disable the Azure AD workload identity on the AKS cluster where it's been enabled and configured, you can run the following command:
163+
164+
```azurecli
165+
az aks update --resource-group myResourceGroup --name myAKSCluster --enable-workload-identity false
166+
```
167+
160168
## Next steps
161169

162170
In this article, you deployed a Kubernetes cluster and configured it to use a workload identity in preparation for application workloads to authenticate with that credential. Now you're ready to deploy your application and configure it to use the workload identity with the latest version of the [Azure Identity][azure-identity-libraries] client library. If you can't rewrite your application to use the latest client library version, you can [set up your application pod][workload-identity-migration] to authenticate using managed identity with workload identity as a short-term migration solution.

0 commit comments

Comments
 (0)