azure - 获取集群 ca 证书 Azure ARM 模板 ManagedClusters

Question

如何从某些 ManagedCluster 的 Arm 模板中获取集群 ca 证书？

在 terraform 中我们使用:

azurerm_kubernetes_cluster.aks_cluster.kube_config.0.cluster_ca_certificate

但是在 ARM 中我找不到它。

您能提供一些帮助吗？

谢谢

Answer 1

我的解决方案:

  "resources": [
    {
        "type": "Microsoft.Resources/deploymentScripts",
        "apiVersion": "2019-10-01-preview",
        "name": "get-cluster-ca",
        "location": "[resourceGroup().location]",
        "identity": {
          ....
          }
        },
        "kind": "AzureCLI",
                "azCliVersion": "2.0.80",
                "environmentVariables": [
                    {
                        "name": "RESOURCE_GROUP_NAME",
                        "value": "[resourceGroup().name]"
                    },
                    {
                        "name": "CLUSTER_NAME",
                        "value": "[variables('cluster_name')]"
                    }
                ],
                "scriptContent": "#!/bin/bash\r\n\r\naz aks get-credentials --resource-group ${RESOURCE_GROUP_NAME} --name ${CLUSTER_NAME}\r\n\r\naz aks install-cli\r\n\r\necho '{\"ca\":' $(kubectl config view --raw -o json | jq -c '.clusters[0].cluster.\"certificate-authority-data\"') > $AZ_SCRIPTS_OUTPUT_PATH\r\n",
                "timeout": "PT30M",
                "cleanupPreference": "OnSuccess",
                "retentionInterval": "P1D"
    }
  ],
  "outputs": {
    "result": {
      "value": "[reference('get-cluster-ca').outputs.ca]",
      "type": "string"
    }
  }