Share via


ManagedClusterPodIdentityProfile interface

The pod identity profile of the Managed Cluster. See use AAD pod identity for more details on pod identity integration.

Properties

allowNetworkPluginKubenet

Whether pod identity is allowed to run on clusters with Kubenet networking. Running in Kubenet is disabled by default due to the security related nature of AAD Pod Identity and the risks of IP spoofing. See using Kubenet network plugin with AAD Pod Identity for more information.

enabled

Whether the pod identity addon is enabled.

userAssignedIdentities

The pod identities to use in the cluster.

userAssignedIdentityExceptions

The pod identity exceptions to allow.

Property Details

allowNetworkPluginKubenet

Whether pod identity is allowed to run on clusters with Kubenet networking. Running in Kubenet is disabled by default due to the security related nature of AAD Pod Identity and the risks of IP spoofing. See using Kubenet network plugin with AAD Pod Identity for more information.

allowNetworkPluginKubenet?: boolean

Property Value

boolean

enabled

Whether the pod identity addon is enabled.

enabled?: boolean

Property Value

boolean

userAssignedIdentities

The pod identities to use in the cluster.

userAssignedIdentities?: ManagedClusterPodIdentity[]

Property Value

userAssignedIdentityExceptions

The pod identity exceptions to allow.

userAssignedIdentityExceptions?: ManagedClusterPodIdentityException[]

Property Value