Skip to content

Commit a86194d

Browse files
committed
Remove step
1 parent 0a876f8 commit a86194d

File tree

1 file changed

+3
-17
lines changed

1 file changed

+3
-17
lines changed

scenarios/AksKaito/README.md

Lines changed: 3 additions & 17 deletions
Original file line numberDiff line numberDiff line change
@@ -108,29 +108,15 @@ Configure `kubectl` to connect to your cluster using the [az aks get-credentials
108108
az aks get-credentials --resource-group ${AZURE_RESOURCE_GROUP} --name ${CLUSTER_NAME}
109109
```
110110

111-
## Create role assignment for the service principal
111+
## Establish a federated identity credential
112+
113+
Create the federated identity credential between the managed identity, AKS OIDC issuer, and subject using the [az identity federated-credential create](https://learn.microsoft.com/en-us/cli/azure/identity/federated-credential?view=azure-cli-latest) command.
112114

113115
```bash
114116
export MC_RESOURCE_GROUP=$(az aks show --resource-group ${AZURE_RESOURCE_GROUP} \
115117
--name ${CLUSTER_NAME} \
116118
--query nodeResourceGroup \
117119
-o tsv)
118-
119-
export PRINCIPAL_ID=$(az identity show --name "ai-toolchain-operator-${CLUSTER_NAME}" \
120-
--resource-group "${MC_RESOURCE_GROUP}" \
121-
--query 'principalId' \
122-
-o tsv)
123-
124-
az role assignment create --role "Contributor" \
125-
--assignee "${PRINCIPAL_ID}" \
126-
--scope "/subscriptions/${SUBSCRIPTION_ID}/resourcegroups/${AZURE_RESOURCE_GROUP}"
127-
```
128-
129-
## Establish a federated identity credential
130-
131-
Create the federated identity credential between the managed identity, AKS OIDC issuer, and subject using the [az identity federated-credential create](https://learn.microsoft.com/en-us/cli/azure/identity/federated-credential?view=azure-cli-latest) command.
132-
133-
```bash
134120
export KAITO_IDENTITY_NAME="ai-toolchain-operator-${CLUSTER_NAME}"
135121
export AKS_OIDC_ISSUER=$(az aks show --resource-group "${AZURE_RESOURCE_GROUP}" \
136122
--name "${CLUSTER_NAME}" \

0 commit comments

Comments
 (0)