|
1243 | 1243 | "properties": {
|
1244 | 1244 | "roleDefinitionId": "[variables('AcrPullRole')]",
|
1245 | 1245 | "principalType": "ServicePrincipal",
|
1246 |
| - "principalId": "[reference(resourceId('Microsoft.ContainerService/managedClusters', format('aks-{0}', parameters('resourceName'))), '2023-11-01').identityProfile.kubeletidentity.objectId]" |
| 1246 | + "principalId": "[reference(resourceId('Microsoft.ContainerService/managedClusters', format('aks-{0}', parameters('resourceName'))), '2024-01-01').identityProfile.kubeletidentity.objectId]" |
1247 | 1247 | },
|
1248 | 1248 | "dependsOn": [
|
1249 | 1249 | "[resourceId('Microsoft.ContainerRegistry/registries', variables('acrName'))]",
|
|
1316 | 1316 | "properties": {
|
1317 | 1317 | "roleDefinitionId": "[variables('contributor')]",
|
1318 | 1318 | "principalType": "ServicePrincipal",
|
1319 |
| - "principalId": "[reference(resourceId('Microsoft.ContainerService/managedClusters', format('aks-{0}', parameters('resourceName'))), '2023-11-01').addonProfiles.ingressApplicationGateway.identity.objectId]" |
| 1319 | + "principalId": "[reference(resourceId('Microsoft.ContainerService/managedClusters', format('aks-{0}', parameters('resourceName'))), '2024-01-01').addonProfiles.ingressApplicationGateway.identity.objectId]" |
1320 | 1320 | },
|
1321 | 1321 | "dependsOn": [
|
1322 | 1322 | "[resourceId('Microsoft.ContainerService/managedClusters', format('aks-{0}', parameters('resourceName')))]",
|
|
1331 | 1331 | "properties": {
|
1332 | 1332 | "roleDefinitionId": "[variables('reader')]",
|
1333 | 1333 | "principalType": "ServicePrincipal",
|
1334 |
| - "principalId": "[reference(resourceId('Microsoft.ContainerService/managedClusters', format('aks-{0}', parameters('resourceName'))), '2023-11-01').addonProfiles.ingressApplicationGateway.identity.objectId]" |
| 1334 | + "principalId": "[reference(resourceId('Microsoft.ContainerService/managedClusters', format('aks-{0}', parameters('resourceName'))), '2024-01-01').addonProfiles.ingressApplicationGateway.identity.objectId]" |
1335 | 1335 | },
|
1336 | 1336 | "dependsOn": [
|
1337 | 1337 | "[resourceId('Microsoft.ContainerService/managedClusters', format('aks-{0}', parameters('resourceName')))]"
|
|
1346 | 1346 | "properties": {
|
1347 | 1347 | "roleDefinitionId": "[variables('managedIdentityOperator')]",
|
1348 | 1348 | "principalType": "ServicePrincipal",
|
1349 |
| - "principalId": "[reference(resourceId('Microsoft.ContainerService/managedClusters', format('aks-{0}', parameters('resourceName'))), '2023-11-01').addonProfiles.ingressApplicationGateway.identity.objectId]" |
| 1349 | + "principalId": "[reference(resourceId('Microsoft.ContainerService/managedClusters', format('aks-{0}', parameters('resourceName'))), '2024-01-01').addonProfiles.ingressApplicationGateway.identity.objectId]" |
1350 | 1350 | },
|
1351 | 1351 | "dependsOn": [
|
1352 | 1352 | "[resourceId('Microsoft.ContainerService/managedClusters', format('aks-{0}', parameters('resourceName')))]",
|
|
1656 | 1656 | "name": "[guid(resourceId('Microsoft.ContainerService/managedClusters', format('aks-{0}', parameters('resourceName'))), 'omsagent', variables('MonitoringMetricsPublisherRole'))]",
|
1657 | 1657 | "properties": {
|
1658 | 1658 | "roleDefinitionId": "[variables('MonitoringMetricsPublisherRole')]",
|
1659 |
| - "principalId": "[reference(resourceId('Microsoft.ContainerService/managedClusters', format('aks-{0}', parameters('resourceName'))), '2023-11-01').addonProfiles.omsagent.identity.objectId]", |
| 1659 | + "principalId": "[reference(resourceId('Microsoft.ContainerService/managedClusters', format('aks-{0}', parameters('resourceName'))), '2024-01-01').addonProfiles.omsagent.identity.objectId]", |
1660 | 1660 | "principalType": "ServicePrincipal"
|
1661 | 1661 | },
|
1662 | 1662 | "dependsOn": [
|
|
5442 | 5442 | },
|
5443 | 5443 | "vnetId": "[if(variables('isDnsZonePrivate'), if(not(empty(parameters('byoAKSSubnetId'))), createObject('value', split(parameters('byoAKSSubnetId'), '/subnets')[0]), if(parameters('custom_vnet'), createObject('value', reference(resourceId('Microsoft.Resources/deployments', take(format('{0}-network', deployment().name), 64)), '2022-09-01').outputs.vnetId.value), createObject('value', ''))), createObject('value', ''))]",
|
5444 | 5444 | "principalId": {
|
5445 |
| - "value": "[reference(resourceId('Microsoft.ContainerService/managedClusters', format('aks-{0}', parameters('resourceName'))), '2023-11-01').identityProfile.kubeletidentity.objectId]" |
| 5445 | + "value": "[reference(resourceId('Microsoft.ContainerService/managedClusters', format('aks-{0}', parameters('resourceName'))), '2024-01-01').identityProfile.kubeletidentity.objectId]" |
5446 | 5446 | }
|
5447 | 5447 | },
|
5448 | 5448 | "template": {
|
|
5765 | 5765 | "parameters": {
|
5766 | 5766 | "keyVaultName": "[if(parameters('keyVaultCreate'), createObject('value', reference(resourceId('Microsoft.Resources/deployments', take(format('{0}-keyvaultApps', deployment().name), 64)), '2022-09-01').outputs.keyVaultName.value), createObject('value', ''))]",
|
5767 | 5767 | "rbacSecretUserSps": {
|
5768 |
| - "value": "[union(createArray(if(and(variables('deployAppGw'), parameters('appgwKVIntegration')), reference(resourceId('Microsoft.ManagedIdentity/userAssignedIdentities', format('id-appgw-{0}', parameters('resourceName'))), '2023-01-31').principalId, '')), createArray(if(parameters('keyVaultAksCSI'), reference(resourceId('Microsoft.ContainerService/managedClusters', format('aks-{0}', parameters('resourceName'))), '2023-11-01').addonProfiles.azureKeyvaultSecretsProvider.identity.objectId, '')))]" |
| 5768 | + "value": "[union(createArray(if(and(variables('deployAppGw'), parameters('appgwKVIntegration')), reference(resourceId('Microsoft.ManagedIdentity/userAssignedIdentities', format('id-appgw-{0}', parameters('resourceName'))), '2023-01-31').principalId, '')), createArray(if(parameters('keyVaultAksCSI'), reference(resourceId('Microsoft.ContainerService/managedClusters', format('aks-{0}', parameters('resourceName'))), '2024-01-01').addonProfiles.azureKeyvaultSecretsProvider.identity.objectId, '')))]" |
5769 | 5769 | },
|
5770 | 5770 | "rbacSecretOfficerSps": "[if(and(not(empty(parameters('keyVaultOfficerRolePrincipalId'))), parameters('automatedDeployment')), createObject('value', variables('keyVaultOfficerRolePrincipalIds')), createObject('value', createArray()))]",
|
5771 | 5771 | "rbacCertOfficerSps": "[if(and(not(empty(parameters('keyVaultOfficerRolePrincipalId'))), parameters('automatedDeployment')), createObject('value', variables('keyVaultOfficerRolePrincipalIds')), createObject('value', createArray()))]",
|
|
7821 | 7821 | "resources": [
|
7822 | 7822 | {
|
7823 | 7823 | "type": "Microsoft.ContainerService/managedClusters/agentPools",
|
7824 |
| - "apiVersion": "2023-11-01", |
| 7824 | + "apiVersion": "2024-01-01", |
7825 | 7825 | "name": "[format('{0}/{1}', parameters('AksName'), parameters('PoolName'))]",
|
7826 | 7826 | "properties": {
|
7827 | 7827 | "mode": "User",
|
|
8918 | 8918 | },
|
8919 | 8919 | "privateFQDN": {
|
8920 | 8920 | "type": "string",
|
8921 |
| - "value": "[if(and(parameters('enablePrivateCluster'), not(equals(parameters('privateClusterDnsMethod'), 'none'))), reference(resourceId('Microsoft.ContainerService/managedClusters', format('aks-{0}', parameters('resourceName'))), '2023-11-01').privateFQDN, '')]" |
| 8921 | + "value": "[if(and(parameters('enablePrivateCluster'), not(equals(parameters('privateClusterDnsMethod'), 'none'))), reference(resourceId('Microsoft.ContainerService/managedClusters', format('aks-{0}', parameters('resourceName'))), '2024-01-01').privateFQDN, '')]" |
8922 | 8922 | },
|
8923 | 8923 | "aksPrivateDnsZoneName": {
|
8924 | 8924 | "type": "string",
|
8925 |
| - "value": "[if(and(parameters('enablePrivateCluster'), not(equals(parameters('privateClusterDnsMethod'), 'none'))), join(skip(split(reference(resourceId('Microsoft.ContainerService/managedClusters', format('aks-{0}', parameters('resourceName'))), '2023-11-01').privateFQDN, '.'), 1), '.'), '')]" |
| 8925 | + "value": "[if(and(parameters('enablePrivateCluster'), not(equals(parameters('privateClusterDnsMethod'), 'none'))), join(skip(split(reference(resourceId('Microsoft.ContainerService/managedClusters', format('aks-{0}', parameters('resourceName'))), '2024-01-01').privateFQDN, '.'), 1), '.'), '')]" |
8926 | 8926 | },
|
8927 | 8927 | "aksClusterName": {
|
8928 | 8928 | "type": "string",
|
8929 | 8929 | "value": "[format('aks-{0}', parameters('resourceName'))]"
|
8930 | 8930 | },
|
8931 | 8931 | "aksOidcIssuerUrl": {
|
8932 | 8932 | "type": "string",
|
8933 |
| - "value": "[if(parameters('oidcIssuer'), reference(resourceId('Microsoft.ContainerService/managedClusters', format('aks-{0}', parameters('resourceName'))), '2023-11-01').oidcIssuerProfile.issuerURL, '')]" |
| 8933 | + "value": "[if(parameters('oidcIssuer'), reference(resourceId('Microsoft.ContainerService/managedClusters', format('aks-{0}', parameters('resourceName'))), '2024-01-01').oidcIssuerProfile.issuerURL, '')]" |
8934 | 8934 | },
|
8935 | 8935 | "aksOidcFedIdentityProperties": {
|
8936 | 8936 | "type": "object",
|
8937 | 8937 | "metadata": {
|
8938 | 8938 | "description": "This output can be directly leveraged when creating a ManagedId Federated Identity"
|
8939 | 8939 | },
|
8940 | 8940 | "value": {
|
8941 |
| - "issuer": "[if(parameters('oidcIssuer'), reference(resourceId('Microsoft.ContainerService/managedClusters', format('aks-{0}', parameters('resourceName'))), '2023-11-01').oidcIssuerProfile.issuerURL, '')]", |
| 8941 | + "issuer": "[if(parameters('oidcIssuer'), reference(resourceId('Microsoft.ContainerService/managedClusters', format('aks-{0}', parameters('resourceName'))), '2024-01-01').oidcIssuerProfile.issuerURL, '')]", |
8942 | 8942 | "audiences": [
|
8943 | 8943 | "api://AzureADTokenExchange"
|
8944 | 8944 | ],
|
|
8950 | 8950 | "metadata": {
|
8951 | 8951 | "description": "The name of the managed resource group AKS uses"
|
8952 | 8952 | },
|
8953 |
| - "value": "[reference(resourceId('Microsoft.ContainerService/managedClusters', format('aks-{0}', parameters('resourceName'))), '2023-11-01').nodeResourceGroup]" |
| 8953 | + "value": "[reference(resourceId('Microsoft.ContainerService/managedClusters', format('aks-{0}', parameters('resourceName'))), '2024-01-01').nodeResourceGroup]" |
8954 | 8954 | },
|
8955 | 8955 | "aksResourceId": {
|
8956 | 8956 | "type": "string",
|
|
0 commit comments