Skip to content

Commit da5c2c0

Browse files
authored
Merge pull request #207135 from bwren/patch-32
Update container-insights-enable-existing-clusters.md
2 parents 35084ae + 221fa11 commit da5c2c0

File tree

1 file changed

+19
-8
lines changed

1 file changed

+19
-8
lines changed

articles/azure-monitor/containers/container-insights-enable-existing-clusters.md

Lines changed: 19 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -406,35 +406,46 @@ After a few minutes, the command completes and returns JSON-formatted informatio
406406
### Existing clusters with service principal
407407
AKS Clusters with service principal must first disable monitoring and then upgrade to managed identity. Only Azure public cloud, Azure China cloud, and Azure Government cloud are currently supported for this migration.
408408

409+
1. Get the configured Log Analytics workspace resource id:
409410

410-
1. Disable monitoring with the following command:
411+
```cli
412+
az aks show -g <resource-group-name> -n <cluster-name> | grep -i "logAnalyticsWorkspaceResourceID"
413+
```
414+
415+
2. Disable monitoring with the following command:
411416

412417
```cli
413418
az aks disable-addons -a monitoring -g <resource-group-name> -n <cluster-name> --workspace-resource-id <workspace-resource-id>
414419
```
415420

416-
2. Upgrade cluster to system managed identity with the following command:
421+
3. Upgrade cluster to system managed identity with the following command:
417422

418423
```cli
419424
az aks update -g <resource-group-name> -n <cluster-name> --enable-managed-identity --workspace-resource-id <workspace-resource-id>
420425
```
421426

422-
3. Enable Monitoring addon with managed identity authentication with the following command:
427+
4. Enable Monitoring addon with managed identity authentication option using Log Analytics workspace resource ID obtained in the first step:
423428

424429
```cli
425430
az aks enable-addons -a monitoring --enable-msi-auth-for-monitoring -g <resource-group-name> -n <cluster-name> --workspace-resource-id <workspace-resource-id>
426431
```
427432

428-
### Existing clusters with system assigned identity
429-
AKS Clusters with system assigned identity must first disable monitoring and then upgrade to managed identity. Only Azure public cloud, Azure China cloud, and Azure Government cloud are currently supported for this migration.
433+
### Existing clusters with system or user assigned identity
434+
AKS Clusters with system assigned identity must first disable monitoring and then upgrade to managed identity. Only Azure public cloud, Azure China cloud, and Azure Government cloud are currently supported for clusters with system identity. For clusters with user assigned identity, only Azure Public cloud is supported.
430435

431-
1. Disable monitoring with the following command:
436+
1. Get the configured Log Analytics workspace resource id:
432437

433438
```cli
434-
az aks disable-addons -a monitoring -g <resource-group-name> -n <cluster-name> --workspace-resource-id <workspace-resource-id>
439+
az aks show -g <resource-group-name> -n <cluster-name> | grep -i "logAnalyticsWorkspaceResourceID"
440+
```
441+
442+
2. Disable monitoring with the following command:
443+
444+
```cli
445+
az aks disable-addons -a monitoring -g <resource-group-name> -n <cluster-name>
435446
```
436447

437-
2. Enable Monitoring addon with Managed Identity Auth Option
448+
3. Enable Monitoring addon with managed identity authentication option using Log Analytics workspace resource ID obtained in the first step:
438449

439450
```cli
440451
az aks enable-addons -a monitoring --enable-msi-auth-for-monitoring -g <resource-group-name> -n <cluster-name> --workspace-resource-id <workspace-resource-id>

0 commit comments

Comments
 (0)