From d83ef212550d3094e0a1a41ad9e65c6a1c170dca Mon Sep 17 00:00:00 2001 From: Ernest Wong Date: Tue, 2 Feb 2021 13:56:01 -0800 Subject: [PATCH] release: update manifest and helm charts for v1.7.2 (#955) Signed-off-by: Ernest Wong --- charts/aad-pod-identity-3.0.1.tgz | Bin 0 -> 13385 bytes charts/aad-pod-identity/README.md | 6 +-- charts/aad-pod-identity/templates/NOTES.txt | 4 -- .../templates/mic-deployment.yaml | 2 +- .../templates/mic-exception.yaml | 2 + .../templates/nmi-daemonset.yaml | 6 ++- charts/aad-pod-identity/values.yaml | 10 +--- charts/index.yaml | 17 ++++++- deploy/demo/deployment.yaml | 2 +- deploy/infra/deployment-rbac.yaml | 8 ++- deploy/infra/deployment.yaml | 8 ++- deploy/infra/managed-mode-deployment.yaml | 6 ++- deploy/infra/noazurejson/deployment-rbac.yaml | 8 ++- deploy/infra/noazurejson/deployment.yaml | 8 ++- .../charts/aad-pod-identity/README.md | 5 +- .../charts/aad-pod-identity/values.yaml | 4 +- manifest_staging/deploy/demo/deployment.yaml | 2 +- .../deploy/infra/deployment-rbac.yaml | 4 +- manifest_staging/deploy/infra/deployment.yaml | 4 +- .../deploy/infra/managed-mode-deployment.yaml | 2 +- .../infra/noazurejson/deployment-rbac.yaml | 4 +- .../deploy/infra/noazurejson/deployment.yaml | 4 +- test/e2e/README.md | 2 +- test/e2e/framework/config.go | 6 +-- website/content/en/changelog/_index.md | 46 ++++++++++++++++-- .../en/docs/Demo/standard_walkthrough.md | 21 ++++---- .../en/docs/Getting started/installation.md | 6 +-- 27 files changed, 133 insertions(+), 64 deletions(-) create mode 100644 charts/aad-pod-identity-3.0.1.tgz diff --git a/charts/aad-pod-identity-3.0.1.tgz b/charts/aad-pod-identity-3.0.1.tgz new file mode 100644 index 0000000000000000000000000000000000000000..9d48328d14077ca8f31404f84268c01b89ca9264 GIT binary patch literal 13385 zcmV-PG`7nhiwG0|00000|0w_~VMtOiV@ORlOnEsqVl!4SWK%V1T2nbTPgYhoO;>Dc zVQyr3R8em|NM&qo0PMZ}QY1I>DC)oKDe~9&7X}a2AHd-G^&QW>81OD(!*GG|#)j81 zt*%mcYpE*LmQ*n9Vcz7#dARc=CzO)vyFY-2vB#~5T@Te#W=fe#rBbOBA-)@P-(^0H zB$Lz5;e;fzJtblA)v8Lj+wJb}?csmB-EQ^2-Mzi;SG~P%cYk+hZ|7z2t8Q;^cc=Rm zbXP{foRSJjlCQdt##QaypQMnO{X!GLc+`iRocfZyR8=^lUO*BGHzZ+X7*GL{!;nHugrGjKNOG9+GyzG&I3SXW zwu966?F~&5=F>j3TFxj9g4#!ig=9?o4nRU^dCi6Bkmk7! zfH2O}AUNj%^QL_`2yV$#IL-#VjVSO0LY`0%)Jv$e#HWh%+X;;zPJ@6&V+}?)8#%m7 z-JjWZHbg>7ktw6W)M)V?HeLn6J2`c=3ra^-}&3Xh11 zN1YA$VG6$HF#;RKeJfi}L8a)9SD1n^jx(VLnU!Z8Yx8Eii8M1N`6fvNa%l3DkOL$2v9Nu!4+R3NfVF8N;Zd61-*@p zJQ95)VN4|uCGgBQV2B=+h)G5Q_B#a<`H0Hd03rk%>%Lp2wBaNYl4xNd5zr3`7vm95 zABE_ar-2VN5@|v~(N-c?iH@y_W9zeodNP>8m@7g~PLD2;gosQ0G)Z_mo*)fH;m~~` z3iEwrsxu7uuoDs?Y0~kzCprlwen>^<;`rd`^tesp*vVM0AiXbt%MbaM9}>`ppnOYMVmrD=_0fV;`i#kmngo^B!XtrVoz%D`jYuSQCu&U5KV}{B0!C-n)jtCB z+ib=Q3wCkLo1 zsDFBSa+r@s)_3HDlFXT4-o`Y+=?tL~2UWi~S=!lZ%>-C!&{a{ACq$r5@j0$ic8X~Y zrli!_fCDvqsBdOKA6gbpYa3djrm5v{OUNn5^*5{JI3e@;b}8*c$UFx?lCj!9;Euro z#TK40IXw)B5NEg+sudhy0|GvVfZouctwuq>FY1ec&Fg@Vw;WJ^{X&zWTHvRB=;|+H z7L9*IW5WWn6GbRe00I^=Y5oo1#c3aQy4}$H9nuhugp!`m+INYV-p#q=B&fDh@c-sVhAJUYaB{QaT@(SdqptPt(EfCtl&g!2p@z=xrN9?*9sSR);Bp)uX z>1`i+=2PDACpzuJh_E0{sH;2E9#To#WjcT75zX2vRq!qnL^3f#^R^F1{EW*>Z$kYv z$SdODl^M68#Y)*!KjY9AKLe0Bu3*kK*?NxQfc~t+Tw7sjIHUN9YALPN2?=E^<;q<9ViyP*M#s1Oh*TZB1@oNbzgP2aQ)yzdd?Hs018d}8xj~> zjYqx!B9)wa6A;tLgMjlG!~`vHCGOm3YI`sRZ$iCmlysUTJP~LlB?^Y8guF<}?tZt6 z-BJ)Qs7$6uvwNpF?bA`Vi&oQ;g<&d{2o|dUY-;c*6{}t#sM~0zrd#H z#84TAaiDfi+HO+_6IwK@3=1|~Xj!+a+wgz3w6fYgQ{0CCv&Hmxb^D7EB{EIuC?I3e z4*iWGZfy1ZaD5t3NnQ0LqV#yXy|o{2~b?p8^e%XYiEM)#&8M=4f%~-(G<>z@>CS4HcOUFlSpq3ZADGoQB5w@ z{7#F5b4os-?#Q{O1~k*6lEW=w5{7id6RIgw1eFJP6UWWilq?!|)beQm$VYIL@DP4E z?fi0jdAX&i^@u=KqIF#}$vsge8R|*}gjf*yhAEIW;Yw zgV>C^32w7orBql#{khcIMt{dP7p6&0u4be?FRANu9_2f8v<#J=j;Nf44;=(&RNnIB z`aDR-Ec!_|=$k6o@SLb!2}fW7l^Gyyp0=yN(e5;VcT5`xZ0oXlTB+7@oMcGQ1F5^} z_ffbJ1)d`5ArabVA%ymZa6I&}=X&VVt^1HSB|6%BTZ+b1A6S-;wscRj(+*q@(MHoP zyIZvu+XgA(&q)H0L~38>Gl88@2C1Od!=jJQvdM`&P_tTyD{fC3b+4Tb(ApT#b}yal zMLrB!^!~fGg>YN{-s{7q5zKQdnC7RQ{HI)Ik&zxvBpcy& z&tNn1nBnde&!9xOm7GrT_#kAA3x1)S8kM_Z{4Gj#&k}ExaEmby&wP8 zQr-JktN*XoYct*PIPhPsZT%ApL+y9``sQD)PdVqf}gqh$`ivi)mm9Kz1tJUn%C2S1cF0EwR>TxCcPJ=zMd0>Ed_~V zGhOVK0wG#heQ5bK-*IJNEh^WlZ+pk8-AcjU~M zQEEm^7MRmHdwX?!*_I#VV{t5q|LpblzpKQ5?RR&3>-ewdDF5UsOvnudk)nMuN`qi( zrzG|3fkZ6Qr%FF%+k0zI{+Huiak!z0J}V@$-grXr*czP&EP{_8q5X@FH!Phu!>3Pp zsJ*Ss*uL}eqpQ|z`kxuKvr}vM^vPI}o(#avqocl8m@a5QiJmQEB zh|$2;zBcsmYfBlo@|!~)J9Bh)sp_iTwTP*=)pkxskZ66bfn=v(I-(K3F_~>d(Ir9D z7GCwpbYbzp+i>c9yx1rk>uRiZR%d2~r5K_XN&Cmw*pL4A%k#WIXEr1nN@@MeX)S%d zH-Tz5El1G$Z{hy8XjPzTy!Vm9S^u8TrI2|IoGOr}3v(h2vl8usOlxZ_TbS>OYE+f}iy^&_*Vo}KSzs=PqxU=CD(0b8=*85h* z-u>OBl?)F<9%VaQu?)dkWev1$sOb&*$B)_dh}q)}jR5j^q^hk5^Ln9o@XK^T*DPp~ znQ~F+>(eL4`U;WNi$=!CL%Z75&%MU}k;@$W&rAH(+yh&5|8u8T zz5ltt)7@R$f6q}W)38&G*bnYL$xhqvXriiU$e;X!_Q1ehe;ZWeosg7;OKZv1()yh(+o%yt2U5CeQ-X=XHu!9I!SX{bWeef$d>-lG!K*wOVDvq z<@JB3ySu-$UjLt?m?eQkezrg-L*lhfY!z(IK6T5kgl<8_GC&9_X|l}0X3#bPYzLsaxVjtMt;m$mAE1-1AG?9 z#znM_2iF)|%ZAM%X;=?r#PxivQ_;SBd}G>3z4m&j0o-v?zf3ogvX9kLARH#!R+=E!R|Ir5gGr*aIbM526+ zxzM*FCzNFIf08hm*YpmGG*vvXML%QpFtn1~F{h!P_OVV#t#z4O_bdN6Z+69AjD7Y zJU=LW`qZh=gH_jss_hej{JlUW|T;|7Md2+#GOV!nu z>tdP??M?ZI4d@Q+;K24Hpg9@)p84RkB5Rl3GS|w{vLqk{XTODhw&cj9vWQjd@a=S~FTMi@264sZKzxN=@m^ zhp{v%HZ4*E3HGPDzH4l=EXrEGtp@d&)xk@~ZYY?d!i9fx7C~#fH6P#-O1N1Z3b_&L zm^5G0jGmrX}D#h_q4yj>YsLZLUoLGMC6Xke8OP z#kq*;BxiST^YlAzmWOU8>Gwv}(1+zM5kb8a4L2T1`au@WnIw%4gc?G9!+a((8r}3u zJ=aFu>B-^y^S4Lu&kjzHFV7DSj|+7`Cl&ZH;bFh@8T1Vcj2J{(N%0TAFR7hP;XxYG zQ=UfEE@(2YUkO)dR~fOOtY|~kNZTlL9Xh2(2_^p9D41p`u4eWjU^g_PLY%9;Vv#hp zxBMHGWl@Tej?RRVKu&%y{j~hfRkN~*UCp)Yk-$YLuez_g_3BmOGcU9p(SS^|M0~ws zL!IzB`|TzAdogoCk;p9Ur3k)|sI%bC&Hc8$od*B$^5Ua~r{>a}Au|&$w757`wk;z* zl>pXS|BLB53&FpoB%Y09P<5d5R-t!Sq3t2-8!Q_QhqK|?-<2ivMrdclz zERXk(7f8I|{5O9D=n+?d7RLWn@Bi&|yS?@Ozh^1U_y3CTJVAaJe~DA#$|3QbD-4C} z3+Ft`BbT9VI7ZfoKg*m9+e5vW`^AG*636)wQtd=^iDSyb{l%y3D7h9c@qHfU^RL`- zMWidHLeg+nUkm-viFrI8+8fuyDdJcM@~q1O{jYw?UzKr(_}0pO*Mdd&zxS&7-*$F( z*6)8lPiYRksJ^aKjs1!7#Jh9T8&XMZ2+(=GU9%E*V}E#0MP7c>r@G^)BW@QPXd7-} z(9KdoDqotqTrmHQhvup8fA^~Qzju4<`Ts1XA^y9#d3{j$cNP?Ae2HIRK%ni;p?(gu zbnW!Oye!-NL}>96YOB#5s@vVcaDR_RUO8OqvhuWOBjU<)ql+LkevG3iHCXP~%hzL8#LWcJ$WVr1E6^=5R3&A0h;boRN> zB}Bzs@t=ptKAJiYnVIfOBGeFPAYIbY|IWO%T3E{)sy3sT;Q*fptf~H-4*X>j)GS>8 zG18RiNYe+}0gLSam%ZKU{jcucI{)*tlqb3WRWJZbccQ*PL*UP@A?D2gC}hu)|Dm_v zds+4W?seDspPr>GxNq=`SsluWNT2aKXB4vM$m&o`6|ii6hsC)Deyd)c(OhbHFi4HX zLagS2q&ni#o&P7!uwXwek@#T#m@Ij#?Fo}5%%QKEA^7vGAj|9jC%pf^Q`P^y?{?Sz zpJypgrvD#$tN*hu11q}K-`Iy|y4Bx^dwr{aU7E`R{qGYR@<=@H2w=Yc@9nW>_4j;=9s{}GK2^!weV-NPiuNq~S#ovFu`S-V%SMN{Gx0cJJpw!s+UvHkhJvzqQi?wF8 zN%fFB-*Z|nb1M}&6JOyKWxVWq#X?$pzrNv8YAo$tT6+W471XOzc3;rTk{mMcY<7}^ z)04xqro0C8TP}+muM8hZrCX)=ksCcwlK|J;EheU>JK~ACJMUMCS_9dEKOA%;& zREsEV2D&VXBNk<`t)*+#b0ki+$?rnXzPJ4l_{-9**WF8x1oTJ!K7RwD4V9|&Erhcy zL61lbu&DX6Bn;J3cVg0)oEk&2P6<}avZ1)v;;d4%1hl1fglYYEOw3{5>8=rGtGN@M z=)=Y|)D%Y}xQCJUpu{-~8ZMDI$3R#zanAhO^Sat(>g+Etb!^`=-@6;C^>favzsvP~ z*@u9OG*s^JKY+n_reX}%^B^6w=%;i@qxv;}*Tt%Cr0cpdR(7v-?J7H#1bbiJEHXna zsbw>?O56-1a|S_`bPta<)U=suEVRGY~j>&nwx%)jnCf7Q9yb>Bq`*h;SZ-Z!xcfJb67WC5Pamt^G&23az&RtGEi?2>R)68RN>i@>|9z%&WO& z{JH)5%a#S_KhF~Xxwlt+|EJe|xjz4YmU55t|5ZhG{t1qU{)7|xfu%P8m05Cn+z$QK z;g~!Bd%fQ7UgiF0Z+CxxegFSi$_7*=z;S-9e)?@wnNFhL>5Q42q(i(*ju+ZH)v8;d zwTFP8vI(ZhJ}PnTQs0c18xz7erK?dYLB z_~{akqcMxjz@8)BZ;^c9m#nhI>s1qO*>^OkyK8U z9C&zgE%~fL#lg@fO^)tnx1FiYe6S9GK7pNfcL^!+0%jz|Ql=%*3)ugwJWiN` zt+1wKPEKfOdsMk=1_2YQ3I2AYePB}(21rdp zOB(Lcf8c*InPQNljq@DDftF zrU^XnRK32^Jt128)Wp9)J87U;PzeJ&@J3jQ$tVVDqz0j2gKf~2bp{FjU2Sd$+q%_^ zWDo-@Atocn$&nq#Mta-mH*gABCi)I&k47I}H>ZAi;{b?C0+-j7WG!zB*9^^-o!3gU zRg{pbrc;{q;q}0t2M=)kBc6mLfE$*`lmrkGZ^9y~^`jYsn@|W{*~&b%pTDWftUC&<2ro1@izTT0FP~$lQjeP2eMD2-$(C>`H7wHc zm(bPb18rMtvr&vWP;4LLV|ui8~unA%$Ki)Z_p;;ezHIK+FTH;o603eP)3z zO@=X*;EVeBDWon3Wn9NZPQL%%0SM>_hE$>&@(!Pmt!x0P3=O z4LriHAAOaCq*+FObF#5egFb68oXrb8+JnU+YApSwM0Aj^?lZ@C%PF%00eNwTgCDdIZksEu4~n z^Q3%w={N@v;^(qjGn#iZVAm9G@B|LrH*kZ;ZCjw$9gpbMnV>r;!L*bFhQzzRC5i7c zwWW@UWXdkw943@pvuM0!AxD%Vae5sF;^{@m_*U>V%yD#5AFIy_jtt|&(Ebdiq!XVe z*%kx65R$`)jg{i%sb2i!gh%M?p-I9M0Zi|BIksiOQ06P6o{4NEw5@5)w}OSos2CU* z4S|rv;#I^Cy_WGTp^TA4RGRV(Mp32o_MiKlj;a zR7nMk(OZvY$iK^J4t8lOn!K+3&mC}+cx&oOr#<}d6Lky~UMMIqp+ zm0`tPrro~UoowqrdRe$te#D|{>wBwR+q6@(=SAr+m-!uQ&Z9LiI%Vf!CrA^TF)onw^AH6O;SO`q0WSG2e7E_X)K0Kl7iA_14#aK{JnBQ>$fb zZJ+_1ZA6eI=vucP+99=(V#pu6x^vve7LQE~!0a|ZwA6;H<-Dkg&`i&e|ciy5+mhVw}T#P^xrvJbKw7ngYB zVxRyI3f|{IZexG@txw~G;tAZh-)i@rl^eUGW05te&8ASa;as}~#4VHF1pQu>YaRou zob3X$qZgQxrnj5cnx?n@deXSRH+opnMQ(Vaba-u@*lt`A5UQL|mK1&Hc2l>lI%3Yt z^qjzxFdiu&VH!xLR*Z5)fCAWf{+}HxJku%!rLoc~&P3XpI}PqEscmIH*;!wa>g*?7 zv$!EFF_YLVuV?8@YnK;fJoLeaM5U6TI z6cn@Dtjm3i8b3Y!4+YQ|962*Ea{0RJQZJ7lKOJ+Z)Wh2wnk3Ap4N-9~}M*?h(% zkqmvU+%&CC?d*y~ewD%;%?S-=6U~4)p)u9dzjPY3^-vl7!2U$n2e~9uV`KFQSM+6dP(I#mW%8-wj%O%J`~s$XL+0! zvP)GpuZcZ%55K5#2ZMv)mQ2M%XIRdzLiV~j?0Q>>+%ieR&F(lA)Ym}~ikY~7Qeefy zJNM<4I~e@>+vC@+>JEN3x*xJb-tGEb9DDqZA=8qVw%=;{i+t-P+Hl2n1K?3G)oskS zH+NB)j1G$V<=r<1&P*j0OiZ5F&c6Tm#MU6pvJM|R?`Q&!KeQhaL_v}IQ%{%l>AEURaijx(MC^A4Uh z`uH&&`$Lx1v&#l&H$u&n;f%2DwO*WGR?n{dPD3NQS?tR0pzx$Aq}>GM zxvYj=A@g*${zahfwBG{Vyz7ne{fi#!M=&g7mn7rGV2bRLDm#qq(stcPQiL{$`sCP@aqUp_*Im*0Fhtw5QA!(TVZ@;|5;)Uhz(Eu#F ziuu&%9H9Kn#}LpP8noe^paOn@fR6=iUI%>q7aae4mOB_U<%zlnfC9Vnbo;Yiyoy~q zUw>PleT`sK(hm~;b%)nN)-0P>?qHw>>yaLL#jY$$a~`Zau(_ciU?G#)3B$T9RqkN$ z@zbM^Cvoj6J<2w7-*wLY;uCLce%-6Aj$Jlk_JY8*1Dk2vy ze>P$Dc!Vqoi*&4pX}#Wv%`dBo)zIvUdBDfh%Q&ILKje{+336jlLZ_6WtqKC`f|plb zPrA8fb?l0{f5b$R;tBB&sXuP;@EUgcSv?qH#Wjd;Y8vGEKiAHw+2syS^kqhK%g^5~UoinDU@+lAMzj1BGuV~+9xCa2Gj^2&%p|v| z@2YGxnL?j$NdCy>4hDuj51eB2*wv&AXU?wmq*|gZHM^Q}F<4g2VwZ2On=P#jZG+D; z41bog6uWva=Y&z`E?)C6)O@c-#;%E!F}`aRu!sr)*dAYtdYYbo5oHd$aO4!XUUgs1 z_A6%W64S`TH)oF;=aog5vCF<;3oHU*9;YSJBy>{1AmBWCG>m7*Ol0iBIBI=MdY)GUlj&i|wO71R zt?!>m4#i~UI*w3>3#bxJ;oNc2$URd2~!$x#4!|GCU|~a zX5Z!zuLWtYv1r^$BRBga56mg*%B>>1zaSnjXBp0O+GcB)8McFLE?n5fKj)ifS7v1l zsl26l!A93C4S!)$@yMveArY92U0>f}0`nuqw}lE~|-zD!tQw??@=6AJ=86vYO*bT)Q3~3AN_evSoGbT1P@XLs=cW){#)p zP*xLKgWKfz3jOiuKe}RJ=F2#VF7^4ypnQN5o5YyrS(~N*iGHBfpBbwWrQwib5^dGey!D`LM10R7dk49A8J0zGcyWAi zb$kRu{v{W>`Rsy0Z-0TNoXIZh8lM%o_AquGTwb31?d&hhuSM+ITj*oA>{3H))6bQT zyJnag`fM^YFlI5y@NsQ?U|Gbj1*)*P?+OBbdq(9gPp;2{bj+fk(jkq?q1ShCpsHoh zyVug7vnWd?geU*k8pack!k?zBCZC~Vmm1iB%K6b6cW_SR#QN9+d}m7whmPEMct`#k z<<3N6m{IGPQCyyT$gX5ayta8@Vu4q~J`o@J_|WLZ4+n?(g_9tt&$aw9?sdVkn)H*% zF4TtliLWa@BPp*w?=mlu2#9GCG9l1;C^_i6C^|nco_W=C5pC+nGJ0D|S7Y=Pi^^$R z@#R^a2nWy5FxtaBv9VRFy=@R8?wlNa_;*ObX98sqhMCtaO9_iw>6ruQR+KHY`s~?k zbf+Z7=%(W1Pxh&s%8O9;p_}rH_xk2T+k{lba80L*b@(Vx`TOz)ReR^u}?xp)sR zjuvFhM$1OY$9DE$c0|>DB*_%KR7f7KHQ=1G0#n1;*nq2qr^A4X3Fk^-IL^r^f9p{{ zdc#B(j+><`PN-p;NhQfsnLlfcwe8D^Ug8UrNqNds)K!=iInrTifUi8drPreW&;R~k zPc+bJ;)!XZK_jh;pc3$?r>h|`&`>y*HbXS9Zeo2KS$yeP+s$)jw>>=i58#F$ozTmNAN5s@q3?`n6R1|+F)e5NdXMio%#aQ0ZpS|C;+5a&Ew0 `mcr.microsoft.com/oss/azure/aad-pod-identity/demo` is an image that demostrates the use of AAD pod identity. The source code can be found [here](https://github.com/Azure/aad-pod-identity/blob/master/cmd/demo/main.go). +> `mcr.microsoft.com/oss/azure/aad-pod-identity/demo` is an image that demonstrates the use of AAD pod identity. The source code can be found [here](https://github.com/Azure/aad-pod-identity/blob/master/cmd/demo/main.go). To verify that the pod is indeed using the identity correctly: @@ -164,12 +164,11 @@ kubectl logs demo If successful, the log output would be similar to the following output: ```log -... -successfully doARMOperations vm count 1 -successfully acquired a token using the MSI, msiEndpoint(http://169.254.169.254/metadata/identity/oauth2/token) -successfully acquired a token, userAssignedID MSI, msiEndpoint(http://169.254.169.254/metadata/identity/oauth2/token) clientID(xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx) -successfully made GET on instance metadata -... +I0107 23:54:23.215900 1 main.go:42] starting aad-pod-identity demo pod (namespace: default, name: demo, IP: 10.244.0.73) +I0107 23:56:03.223398 1 main.go:167] curl -H Metadata:true "http://169.254.169.254/metadata/instance?api-version=2017-08-01": {"compute":{"location":"westus2","name":"aks-nodepool1-55282659-0","offer":"aks","osType":"Linux","placementGroupId":"","platformFaultDomain":"0","platformUpdateDomain":"0","publisher":"microsoft-aks","resourceGroupName":"MC_chuwon-aks_chuwon_westus2","sku":"aks-ubuntu-1604-202004","subscriptionId":"2d31b5ab-0ddc-4991-bf8d-61b6ad196f5a","tags":"aksEngineVersion:aks-release-v0.47.0-1-aks;creationSource:aks-aks-nodepool1-55282659-0;orchestrator:Kubernetes:1.15.10;poolName:nodepool1;resourceNameSuffix:55282659","version":"2020.04.16","vmId":"33b6a978-a2ad-4bbe-8331-f7e08c48e175","vmSize":"Standard_DS2_v2"},"network":{"interface":[{"ipv4":{"ipAddress":[{"privateIpAddress":"10.240.0.4","publicIpAddress":""}],"subnet":[{"address":"10.240.0.0","prefix":"16"}]},"ipv6":{"ipAddress":[]},"macAddress":"000D3AC47E7D"}]}} +I0107 23:56:03.816403 1 main.go:90] successfully listed VMSS instances from ARM via AAD Pod Identity: [] +I0107 23:56:03.825676 1 main.go:114] successfully acquired a service principal token from http://169.254.169.254/metadata/identity/oauth2/token +I0107 23:56:03.834516 1 main.go:139] successfully acquired a service principal token from http://169.254.169.254/metadata/identity/oauth2/token using a user-assigned identity (91ff0ee7-35fc-46d0-9cd0-51a7ea9ec7f2) ``` Once you are done with the demo, clean up your resources: diff --git a/website/content/en/docs/Getting started/installation.md b/website/content/en/docs/Getting started/installation.md index accd1a688..988768497 100644 --- a/website/content/en/docs/Getting started/installation.md +++ b/website/content/en/docs/Getting started/installation.md @@ -11,7 +11,7 @@ description: > To install/upgrade AAD Pod Identity on RBAC-enabled clusters: ``` -kubectl apply -f https://raw.githubusercontent.com/Azure/aad-pod-identity/v1.7.1/deploy/infra/deployment-rbac.yaml +kubectl apply -f https://raw.githubusercontent.com/Azure/aad-pod-identity/v1.7.2/deploy/infra/deployment-rbac.yaml ```
@@ -37,7 +37,7 @@ deployment.apps/mic created To install/upgrade aad-pod-identity on RBAC-disabled clusters: ``` -kubectl apply -f https://raw.githubusercontent.com/Azure/aad-pod-identity/v1.7.1/deploy/infra/deployment.yaml +kubectl apply -f https://raw.githubusercontent.com/Azure/aad-pod-identity/v1.7.2/deploy/infra/deployment.yaml ```
@@ -57,7 +57,7 @@ deployment.apps/mic created For AKS clusters, you will have to allow MIC and AKS add-ons to access IMDS without being intercepted by NMI: ``` -kubectl apply -f https://raw.githubusercontent.com/Azure/aad-pod-identity/v1.7.1/deploy/infra/mic-exception.yaml +kubectl apply -f https://raw.githubusercontent.com/Azure/aad-pod-identity/v1.7.2/deploy/infra/mic-exception.yaml ``` {{% alert title="Warning" color="warning" %}}