Skip to content

Commit ef438ee

Browse files
Merge pull request #220208 from MGoedtel/updateAKSTutorial122
updated AKS Workload Identity tutorial
2 parents 3b3f598 + 57e040f commit ef438ee

File tree

2 files changed

+23
-3
lines changed

2 files changed

+23
-3
lines changed

articles/aks/learn/tutorial-kubernetes-workload-identity.md

Lines changed: 21 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@ title: Tutorial - Use a workload identity with an application on Azure Kubernete
33
description: In this Azure Kubernetes Service (AKS) tutorial, you deploy an Azure Kubernetes Service cluster and configure an application to use a workload identity.
44
services: container-service
55
ms.topic: tutorial
6-
ms.date: 11/28/2022
6+
ms.date: 12/02/2022
77
---
88

99
# Tutorial: Use a workload identity with an application on Azure Kubernetes Service (AKS)
@@ -77,6 +77,26 @@ Run the following command to update to the latest version of the extension relea
7777
az extension update --name aks-preview
7878
```
7979

80+
## Register the 'EnableWorkloadIdentityPreview' feature flag
81+
82+
Register the `EnableWorkloadIdentityPreview` feature flag by using the [az feature register][az-feature-register] command, as shown in the following example:
83+
84+
```azurecli-interactive
85+
az feature register --namespace "Microsoft.ContainerService" --name "EnableWorkloadIdentityPreview"
86+
```
87+
88+
It takes a few minutes for the status to show *Registered*. Verify the registration status by using the [az feature list][az-feature-list] command:
89+
90+
```azurecli-interactive
91+
az feature show --namespace "Microsoft.ContainerService" --name "EnableWorkloadIdentityPreview"
92+
```
93+
94+
When the status shows *Registered*, refresh the registration of the *Microsoft.ContainerService* resource provider by using the [az provider register][az-provider-register] command:
95+
96+
```azurecli-interactive
97+
az provider register --namespace Microsoft.ContainerService
98+
```
99+
80100
## Create AKS cluster
81101

82102
Create an AKS cluster using the [az aks create][az-aks-create] command with the `--enable-oidc-issuer` parameter to use the OIDC Issuer. The following example creates a cluster named *myAKSCluster* with one node in the *myResourceGroup*:

articles/aks/workload-identity-deploy-cluster.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -53,10 +53,10 @@ az feature register --namespace "Microsoft.ContainerService" --name "EnableWorkl
5353
It takes a few minutes for the status to show *Registered*. Verify the registration status by using the [az feature list][az-feature-list] command:
5454

5555
```azurecli-interactive
56-
az feature list -o table --query "[?contains(name, 'Microsoft.ContainerService/EnableWorkloadIdentityPreview')].{Name:name,State:properties.state}"
56+
az feature show --namespace "Microsoft.ContainerService" --name "EnableWorkloadIdentityPreview"
5757
```
5858

59-
When ready, refresh the registration of the *Microsoft.ContainerService* resource provider by using the [az provider register][az-provider-register] command:
59+
When the status shows *Registered*, refresh the registration of the *Microsoft.ContainerService* resource provider by using the [az provider register][az-provider-register] command:
6060

6161
```azurecli-interactive
6262
az provider register --namespace Microsoft.ContainerService

0 commit comments

Comments
 (0)