Comments on: Disable local user account (–admin) in Azure Kubernetes Service

By: Pixel Robots.

Pixel Robots. — Fri, 18 Jun 2021 09:05:47 +0000

In reply to hakabo. What command are you using to get the credentials?

By: hakabo

hakabo — Thu, 17 Jun 2021 17:58:08 +0000

Thanks for this post – really useful!
If I disable local accounts and then run my terraform again, it complains of Status=400 Code=”BadRequest” Message=”Getting static credential is not allowed because this cluster is set to disable local accounts.”
How do I get around this? I’m logging in via az login with an account that is has the role Azure Kubernetes Service RBAC Cluster Admin.
thanks

By: Mark

Mark — Thu, 03 Jun 2021 11:56:17 +0000

In reply to Pixel Robots..

Ok 🙂

Re the screenshot, I guess I was expecting the image to show the “disableLocalAccounts”: true section as to demonstrate the impact of the command… only visible if you scroll up a little. Doesn’t really matter either way 🙂

By: Pixel Robots.

Pixel Robots. — Thu, 03 Jun 2021 07:27:01 +0000

In reply to Mark.

Hello, good shout about the AKS-Preview extension being needed.

The image looks right to me. once you run the az aks update command it returns the json of your aks cluster which is what is seen in the image.

Thanks

By: Mark

Mark — Wed, 02 Jun 2021 23:51:00 +0000

Hi.

Useful post – thank you.

There was one thing that initially tripped me up when following it – a one-off step you probably did a while ago yourself but might be worth adding into your post…

You need to add the aks-preview extension to the Azure CLI before you can use the –disable-local-accounts switch; else it is not recognized and you receive an error

The command for this doing is ‘az extension add –name aks-preview’

Also, just a small point, but your screenshot after running the ‘az aks update –resource-group deleteme –name betatesting –disable-local-accounts’ command I assume meant to show the result of the command being executed, but it doesn’t unless I’m missing something.