Azure / Azure/azure-cli

Get OIDC Issuer URL is not possible if AKS-Preview extension is not installed

Open
#24,315 5 comments 4 reactions 0 assignees View on GitHub
act-observability-squad AKS Auto-Assign Service Attention
Dominant language
Python
Stars
4.6k
Forks
3.5k
Avg merge
3d 2h
Merged PRs (30d)
60

Description

## Cannot get the OIDC Issuer URL Without AKS-Preview Extension
you cannot get the OIDC Issuer URL for cluster that was enabled for that feature, if AKS -Preview is not part of AZ CLI Extensions.
- running on the latest Az CLI v.2.41.0
- running against AKS Cluster with Workload Identity and OIDC Issuer enabled as described here:
https://learn.microsoft.com/en-us/azure/aks/cluster-configuration#oidc-issuer

the OIDC issuer + Workload Identities were enabled via ARM Template as they are GA since October 1st.

**Get OIDC Issuer**
```
az aks show -g $ResourceGroup -n $ClusterName --query "oidcIssuerProfile.issuerUrl" -otsv
```

**Errors:**
```
[]
```

## To Reproduce:

- install Az CLI lastest 2.41.0
- remove the AKS-Preview Extension if it is installed
```
az extension remove --name aks-preview
```
- run the command to get the OIDC issuer URL on a cluster that this feature was enabled to
```
az aks show -g $ResourceGroup -n $ClusterName --query "oidcIssuerProfile.issuerUrl" -otsv
```
- now, re-add the aks-preview extension, and run the command again
```
az extension add --name aks-preview
az aks show -g $ResourceGroup -n $ClusterName --query "oidcIssuerProfile.issuerUrl" -otsv
```
- you will get the OIDC Issuer URL
## Expected Behavior

- OIDC and Workload Identity are GA, not in preview, hence the latest Az.CLI needs to retreive them without the AKS Extension
## Environment Summary
```
Linux-5.10.102.1-microsoft-standard-WSL2-x86_64-with-glibc2.31, Ubuntu 20.04.5 LTS
Python 3.10.5
Installer: DEB

azure-cli 2.41.0

Extensions:
aks-preview 0.5.111

Dependencies:
msal 1.20.0b1
azure-mgmt-resource 21.1.0b1
```
## Additional Context

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.