Skip to content

Commit d285e2c

Browse files
committed
Added bash commands for azure-arc-guard-manifests
1 parent d6465ea commit d285e2c

File tree

1 file changed

+6
-0
lines changed

1 file changed

+6
-0
lines changed

articles/azure-arc/kubernetes/azure-rbac.md

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -259,6 +259,12 @@ az connectedk8s enable-features -n <clusterName> -g <resourceGroupName> --featur
259259

260260
1. The `azure-arc-guard-manifests` secret in the `kube-system` namespace contains two files `guard-authn-webhook.yaml` and `guard-authz-webhook.yaml`. Copy these files to the `/etc/guard` directory of the node.
261261

262+
```console
263+
sudo mkdir -p /etc/guard
264+
kubectl get secrets azure-arc-guard-manifests -n kube-system -o json | jq '.data."guard-authn-webhook.yaml"' | base64 -d > /etc/guard/guard-authn-webhook.yaml
265+
kubectl get secrets azure-arc-guard-manifests -n kube-system -o json | jq '.data."guard-authz-webhook.yaml"' | base64 -d > /etc/guard/guard-authz-webhook.yaml
266+
```
267+
262268
1. Open the `apiserver` manifest in edit mode:
263269
264270
```console

0 commit comments

Comments
 (0)