Community Center | Not monitored
Tag not monitored by Microsoft.
Hi Sebastian
Did you tried Creating service principle in azuredevops? PFA screenshot attached.
azure devops and deploy app in k8s with pipelines
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(310.4, 18%, 40%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESP%3C/text%3E%3C/svg%3E)
Sebastian Pacheco
371
Reputation points
I was testing and practicing with azure devops and a kubernetes cluster (AKS)... I have a repository in github and a pipeline in devops which is connected to git, so when I make a change in the git branch it uploads the image in azure regestry and then the automatic deployment in the cluster, but to achieve this I had to activate the local users of the cluster, if not, it gave me an error when making the connection and wanting to search for the namespace.
If I do not activate the local users of the cluster, is it possible for Azure Devops to deploy to K8s?
Thanks !!
Community Center | Not monitored
{count} votes
-
vipullag-MSFT 26,522 Reputation points Moderator2024-03-04T03:48:19.77+00:00 Welcome to Microsoft Q&A Platform, thanks for posting your query here. Azure DevOps related queries/issues are currently not supported on this Microsoft Q&A platform.
I would request you to please post your queries in dedicated forums as in below links:
https://developercommunity.visualstudio.com/spaces/21/index.html
https://developercommunity.visualstudio.com/t/get-unique-id-from-devops-organization/756710
Sign in to comment
1 answer
Sort by: Most helpful
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(147.20000000000002, 27%, 24%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EV%3C/text%3E%3C/svg%3E)
VasimTamboli 5,535 Reputation points MVP2024-03-03T19:09:41.8366667+00:00 -
Sebastian Pacheco 371 Reputation points
2024-03-04T15:54:26.1833333+00:00 Yes, I created a ‘service connection’ for Kubernetes and selected ‘Service Account.’ Before that, I had to create a new Service Account and a Secret to add it to this DevOps screen. After doing that, I created a new pipeline, but the error persists when trying to load the namespaces.
Do I need to do something with that created Service Account? Any access within my cluster? Should I do something to make it recognize and display the namespaces?
-
VasimTamboli 5,535 Reputation points MVP
2024-03-04T16:43:51.9966667+00:00 Can you please share some more information, steps and error screenshot?
Some suggestion you can check
Service account permission on AKS and ADO- ClusterReader, read write,create,update (from RBAC),
Make sure you are using same account during process.
If possible please share logs specifically related to access/authorization issues.
-
Sebastian Pacheco 371 Reputation points
2024-03-05T17:35:50.6666667+00:00 1.- Create a Service Account:
kubectl create sa devops-serviceaccount –n test2.- Then, create a YAML file called secret.yaml with the following content:
apiVersion: v1 kind: Secret type: kubernetes.io/service-account-token metadata: name: devops-secret namespace: test annotations: kubernetes.io/service-account.name: "devops-serviceaccount"kubectl apply -f secret.yaml3.- Add the secret to the ServiceAccount:
KUBE_EDITOR="nano" kubectl edit serviceaccount devops-homatest -n testapiVersion: v1 kind: ServiceAccount metadata: creationTimestamp: "2024-03-03T22:48:57Z" name: devops-homatest namespace: test resourceVersion: "215838085" uid: 90f4cef4-ad98-4927-97e6-39c57cdefcdf secrets: - name: devops-secret4.- Verify that the secret is linked to the Service Account:
kubectl describe sa devops-homatest -n test5.- Create Role.yaml and Rolebinding.yaml
apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: name: devops-role namespace: test rules: - apiGroups: ["*","apps","extensions"] resources: ["deployment","pods","services","secrets","pods/log"] verbs: ["get", "list", "watch", "create", "update", "delete"]apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: name: devops-rolebinding namespace: test subjects: - kind: ServiceAccount name: devops-homatest roleRef: kind: Role name: devops-role apiGroup: rbac.authorization.k8s.io6.- Then from the Azure portal in azure devops
"My Project" -> "Project Settings" -> "Pipeline" - "Service Connections" -> "Create Service Connections":
7.- Pipeline:
"Create Pipeline" -> "GitHub" -> "My Repo" -> "Configure your Pipeline" -> "Deploy to Azure Kubernetes Service" -> "My Suscription" -> ....... ERROR
Error while fetching cluster credentials. Make sure you have clusterAdmin permissions on the cluster. Error from external server: Failed to query service connection API: 'https://management.azure.com/subscriptions/xxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/resourcegroups/xxxx-rg-aks-test/providers/Microsoft.ContainerService/managedClusters/akshomatest/accessProfiles/clusterAdmin/listCredential?api-version=xxxxxxxx'. Status Code: 'BadRequest', Response from server: '{ "code": "BadRequest", "details": null, "message": "Getting static credential is not allowed because this cluster is set to disable local accounts.", "subcode": "" }'
Sign in to comment -