Microsoft

Service Connection guidance for AKS customers using Kubernetes tasks

Apr 13, 2023Eric van Wijk
Service Connection guidance for AKS customers using Kubernetes tasks
SummaryAI, from the source post

This post introduces and details the use of Azure Resource Manager (ARM) Service Connections for Azure DevOps Kubernetes tasks (AzureFunctionOnKubernetes, KubernetesManifest, HelmDeploy, Kubernetes) when targeting Azure Kubernetes Service (AKS). It explains the limitations of the Kubernetes Service Connection type for private clusters or clusters with local accounts disabled, particularly due to Kubernetes' move away from long-lived tokens. The ARM Service Connection approach defers connectivity to pipeline runtime, allowing for short-lived tokens and better integration with private clusters and Azure AD RBAC via `kubelogin`.

More from the Azure DevOps Workload Identity Federation with Terraform trail