Merge pull request #186432 from zhengchang907/removepullsecret

Init PR for removing pull secret related content

Author: PRMerger8

articles/aks/howto-deploy-java-liberty-app-with-postgresql.md

@@ -33,7 +33,7 @@ For more information on Open Liberty, see [the Open Liberty project page](https:
   * Install a Java SE implementation (for example, [AdoptOpenJDK OpenJDK 8 LTS/OpenJ9](https://adoptopenjdk.net/?variant=openjdk8&jvmVariant=openj9)).
   * Install [Maven](https://maven.apache.org/download.cgi) 3.5.0 or higher.
   * Install [Docker](https://docs.docker.com/get-docker/) for your OS.
-  * Create a user-assigned managed identity and assign `Contributor` role to that identity by following the steps in [Manage user-assigned managed identities](../active-directory/managed-identities-azure-resources/how-manage-user-assigned-managed-identities.md). Return to this document after creating the identity and assigning it the necessary role.
+  * Create a user-assigned managed identity and assign `Owner` role or `Contributor` and `User Access Administrator` roles to that identity by following the steps in [Manage user-assigned managed identities](../active-directory/managed-identities-azure-resources/how-manage-user-assigned-managed-identities.md). Assign `Directory readers` role to the identity in Azure AD by following [Assign Azure AD roles to users](../active-directory/roles/manage-roles-portal.md). Return to this document after creating the identity and assigning it the necessary roles.
 
 ## Create a Jakarta EE runtime using the portal
 
@@ -151,15 +151,15 @@ In directory *liberty/config*, the *server.xml* is used to configure the DB conn
 
 ### Acquire necessary variables from AKS deployment
 
-After the offer is successfully deployed, an AKS cluster with a namespace will be generated automatically. The AKS cluster is configured to connect to the ACR using a pre-created secret under the generated namespace. Before we get started with the application, we need to extract the namespace and the pull-secret name of the ACR configured for the AKS.
+After the offer is successfully deployed, an AKS cluster will be generated automatically. The AKS cluster is configured to connect to the ACR. Before we get started with the application, we need to extract the namespace configured for the AKS.
 
 1. Run following command to print the current deployment file, using the `appDeploymentTemplateYamlEncoded` you saved above. The output contains all the variables we need.
 
    ```bash
    echo <appDeploymentTemplateYamlEncoded> | base64 -d
    ```
 
-1. Save the `metadata.namespace` and `spec.pullSecret` from this yaml output aside for later use in this article.
+1. Save the `metadata.namespace` from this yaml output aside for later use in this article.
 
 ### Build the project
 
@@ -179,7 +179,6 @@ export DB_TYPE=postgres
 export DB_USER=${DB_ADMIN_USERNAME}@${DB_NAME}
 export DB_PASSWORD=${DB_ADMIN_PASSWORD}
 export NAMESPACE=<metadata.namespace>
-export PULL_SECRET=<pullSecret>
 
 mvn clean install
 ```
@@ -300,4 +299,4 @@ az group delete --name <RESOURCE_GROUP_NAME> --yes --no-wait
 * [Azure Database for PostgreSQL](https://azure.microsoft.com/services/postgresql/)
 * [Open Liberty](https://openliberty.io/)
 * [Open Liberty Operator](https://github.com/OpenLiberty/open-liberty-operator)
-* [Open Liberty Server Configuration](https://openliberty.io/docs/ref/config/)
+* [Open Liberty Server Configuration](https://openliberty.io/docs/ref/config/)

articles/aks/howto-deploy-java-liberty-app.md

@@ -32,6 +32,7 @@ For more details on Open Liberty, see [the Open Liberty project page](https://op
   * Install a Java SE implementation (for example, [AdoptOpenJDK OpenJDK 8 LTS/OpenJ9](https://adoptopenjdk.net/?variant=openjdk8&jvmVariant=openj9)).
   * Install [Maven](https://maven.apache.org/download.cgi) 3.5.0 or higher.
   * Install [Docker](https://docs.docker.com/get-docker/) for your OS.
+* Please make sure you have been assigned either `Owner` role or `Contributor` and `User Access Administrator` roles of the subscription. You can verify it by following steps in [List role assignments for a user or group](../role-based-access-control/role-assignments-list-portal.md#list-role-assignments-for-a-user-or-group)
 
 ## Create a resource group
 
@@ -218,7 +219,6 @@ export DB_PORT_NUMBER=1433
 export DB_NAME=<Database name>
 export DB_USER=<Server admin login>@<Database name>
 export DB_PASSWORD=<Server admin password>
-export PULL_SECRET=acr-secret
 export NAMESPACE=${OPERATOR_NAMESPACE}
 
 mvn clean install
@@ -313,14 +313,12 @@ The steps in this section deploy the application.
 
 Follow steps below to deploy the Liberty application on the AKS cluster.
 
-1. Create a pull secret so that the AKS cluster is authenticated to pull image from the ACR instance.
+1. Attach the ACR instance to the AKS cluster so that the AKS cluster is authenticated to pull image from the ACR instance.
 
-   ```bash
-   kubectl create secret docker-registry ${PULL_SECRET} \
-      --docker-server=${LOGIN_SERVER} \
-      --docker-username=${USER_NAME} \
-      --docker-password=${PASSWORD}
+   ```azurecli-interactive
+   az aks update -n $CLUSTER_NAME -g $RESOURCE_GROUP_NAME --attach-acr $REGISTRY_NAME
    ```
+
 1. Retrieve the value for `artifactId` defined in `pom.xml`.
 
    ```bash
@@ -358,13 +356,10 @@ Follow steps below to deploy the Liberty application on the AKS cluster.
 
 Follow steps below to deploy the Liberty application on the AKS cluster.
 
-1. Create a pull secret so that the AKS cluster is authenticated to pull image from the ACR instance.
+1. Attach the ACR instance to the AKS cluster so that the AKS cluster is authenticated to pull image from the ACR instance.
 
    ```azurecli-interactive
-   kubectl create secret docker-registry acr-secret \
-      --docker-server=${LOGIN_SERVER} \
-      --docker-username=${USER_NAME} \
-      --docker-password=${PASSWORD}
+   az aks update -n $CLUSTER_NAME -g $RESOURCE_GROUP_NAME --attach-acr $REGISTRY_NAME
    ```
 
 1. Verify the current working directory is `javaee-app-simple-cluster/target` of your local clone.