diff --git a/examples/aks-kubelogin/Program.cs b/examples/aks-kubelogin/Program.cs index 09836b522..cdee0cf10 100644 --- a/examples/aks-kubelogin/Program.cs +++ b/examples/aks-kubelogin/Program.cs @@ -5,7 +5,7 @@ var server = "https://example.hcp.eastus.azmk8s.io"; // the server url of your aks var clientid = "00000000-0000-0000-0000-000000000000"; // the client id of the your msi -var kubeconfig = @"C:\bin\kubelogin.exe"; // the path to the kubelogin.exe +var kubelogin = @"C:\bin\kubelogin.exe"; // the path to the kubelogin.exe using var configstream = new MemoryStream(Encoding.ASCII.GetBytes($""" apiVersion: v1 @@ -34,7 +34,7 @@ - 6dae42f8-4368-4678-94ff-3960e28e3630 - --client-id - {clientid} - command: {kubeconfig} + command: {kubelogin} env: null """)); diff --git a/examples/aks-kubelogin/README.md b/examples/aks-kubelogin/README.md index e69de29bb..ab71071b0 100644 --- a/examples/aks-kubelogin/README.md +++ b/examples/aks-kubelogin/README.md @@ -0,0 +1,24 @@ +# AKS C# example using kubelogin + MSI + +This example shows how to use the [kubelogin](https://github.com/Azure/kubelogin) to authenticate using [managed identities](https://learn.microsoft.com/en-us/entra/identity/managed-identities-azure-resources/overview) with Azure Kubernetes Service (AKS) using the C# SDK. + + +## Prerequisites + + - turn on AAD support for AKS, see [here](https://docs.microsoft.com/en-us/azure/aks/managed-aad) + - create a managed identity for the AKS cluster + - assign the managed identity the `Azure Kubernetes Service RBAC Cluster Admin` (or other RBAC permission) on the AKS cluster + - assign the managed identity to the VM, see [here](https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/qs-configure-portal-windows-vm) + - install the [kubelogin](https://github.com/Azure/kubelogin) to your machine + +## Running the code + + *You must the the code on VM with MSI* + + - Replace `server` with the address of your AKS cluster + - Replace `clientid` with the client id of the managed identity + - Replace `kubelogin` with the path to the kubelogin executable + +``` +dotnet run +``` \ No newline at end of file