Deploy to AKS using Github Actions

Question

Deploy to AKS using Github Actions

Kopl 166

Hello community,

I am trying to setup a CI/CD pipeline using Github Actions to deploy to AKS.

I have been following this tutorial here: https://learn.microsoft.com/en-us/learn/modules/aks-deployment-pipeline-github-actions/10-exercise-deploy-workflow

Here is the authentication process I am using:

      - name: Azure Login     
        uses: Azure/login@v1.4.5     
        with:     
          creds: ${<!-- -->{ secrets.AZURE_CREDENTIALS }}     
     
      - name: Get AKS Credentials     
        uses: Azure/aks-set-context@v3     
        with:     
          # Azure resource group name     
          resource-group: <RESOURCE_GROUP>     
          # Azure connected cluster name     
          cluster-name: <CLUSTER_NAME>

However, I get the following error:

WARNING: the azure auth plugin is deprecated in v1.22+, unavailable in v1.25+; use https://github.com/Azure/kubelogin instead.

To learn more, consult https://kubernetes.io/docs/reference/access-authn-authz/authentication/#client-go-credential-plugins

To sign in, use a web browser to open the page https://microsoft.com/devicelogin and enter the code <CODE> to authenticate.

Could you please help? Do you have an updated process for getting Github Actions to connect with AKS?

Thanks!

Accepted answer

0 additional answers

Your answer

Answer 1

srbhatta-MSFT 8,586 Microsoft Employee

Hello @Kopl ,
Welcome to Microsoft QnA.
Apologies for the delay in response. The reason why you haven't yet received any responses on this thread is because GitHub Actions is as of now not supported on Microsoft QnA Platform.

However, after doing some research, here is something relevant that I have found which might be the cause behind this error. Please check the below.

Starting with 1.23 AKS will follow upstream kubernetes and deprecate in-tree azure authentication which is marked for deprecation to be replaced with 'exec'. If you are using Azure CLI or Azure clients, AKS will download kubelogin for users automatically. If outside of Azure CLI, users need to download and install kubelogin in order to continue to use kubectl with AAD authentication

Please go through #2728 and reference release 2022-05-22 for more details.
Do let me know if this helps?

Kopl 166 Reputation points

2022-07-27T10:55:03.923+00:00

Hello @srbhatta-MSFT ,

Thank you for your time and research. Indeed, I was able to get connected to AKS using kubelogin. That is the way for non-interactive login recording to the documentation.

On the other topic, that I mentioned in the other thread, now that I login, I originally had one authorized IP to access AKS but the GitHub Actions runner has a different IP. For now, I removed the authorized IP to make sure connection works. But do you know how to enforce that with AKS and GitHub Actions?

Thanks!
srbhatta-MSFT 8,586 Reputation points Microsoft Employee

2022-07-28T08:47:30.86+00:00

@Kopl , glad to hear that. If the information provided was useful, please hit on accept as answer so that the relevancy of this post will increase and it can help other users on community looking for some help on similar query.
As far as your second query is concerned, I can definitely try doing some research on this. Please allow me some time to get back to you. Thanks.

Share via

Deploy to AKS using Github Actions

0 additional answers

Your answer