Skip to content

{AKS} feat: Support trustedaccess role and rolebinding operations#27931

Merged
yanzhudd merged 9 commits into
Azure:devfrom
YitongFeng-git:feat/trustedaccess
Dec 22, 2023
Merged

{AKS} feat: Support trustedaccess role and rolebinding operations#27931
yanzhudd merged 9 commits into
Azure:devfrom
YitongFeng-git:feat/trustedaccess

Conversation

@YitongFeng-git
Copy link
Copy Markdown
Contributor

@YitongFeng-git YitongFeng-git commented Nov 28, 2023

Related command

az aks trustedaccess role list --location
az aks trustedaccess rolebinding list --cluster-name
az aks trustedaccess rolebinding show --name/-n --cluster-name
az aks trustedaccess rolebinding create --name/-n  --cluster-name --roles --source-resource-id/-r
az aks trustedaccess rolebinding update --name/-n --cluster-name --roles
az aks trustedaccess rolebinding delete --name/-n --cluster-name

Description
TrustedAccess feature GA, move commands from preview to stable
Ref Add roles commands, Add bindings commands

Testing Guide

History Notes

[AKS] az aks trustedaccess role: Add new command group to manage trusted access roles
[AKS] az aks trustedaccess rolebinding: Add new command group to manage trusted access role bindings
[AKS] az aks trustedaccess rolebinding list: Add new command to list all the trusted access role bindings
[AKS] az aks trustedaccess rolebinding show: Add new command to get the specific trusted access role binding according to binding name
[AKS] az aks trustedaccess rolebinding create: Add new command to create a new trusted access role binding
[AKS] az aks trustedaccess rolebinding update: Add new command to update an existing trusted access role binding
[AKS] az aks trustedaccess rolebinding delete: Add new command to delete a trusted access role binding according to name


This checklist is used to make sure that common guidelines for a pull request are followed.

@azure-client-tools-bot-prd
Copy link
Copy Markdown

azure-client-tools-bot-prd Bot commented Nov 28, 2023

️✔️AzureCLI-FullTest
️✔️acr
️✔️2020-09-01-hybrid
️✔️3.11
️✔️3.9
️✔️latest
️✔️3.11
️✔️3.9
️✔️acs
️✔️2020-09-01-hybrid
️✔️3.11
️✔️3.9
️✔️latest
️✔️3.11
️✔️3.9
️✔️advisor
️✔️latest
️✔️3.11
️✔️3.9
️✔️ams
️✔️latest
️✔️3.11
️✔️3.9
️✔️apim
️✔️latest
️✔️3.11
️✔️3.9
️✔️appconfig
️✔️latest
️✔️3.11
️✔️3.9
️✔️appservice
️✔️latest
️✔️3.11
️✔️3.9
️✔️aro
️✔️latest
️✔️3.11
️✔️3.9
️✔️backup
️✔️latest
️✔️3.11
️✔️3.9
️✔️batch
️✔️latest
️✔️3.11
️✔️3.9
️✔️batchai
️✔️latest
️✔️3.11
️✔️3.9
️✔️billing
️✔️latest
️✔️3.11
️✔️3.9
️✔️botservice
️✔️latest
️✔️3.11
️✔️3.9
️✔️cdn
️✔️latest
️✔️3.11
️✔️3.9
️✔️cloud
️✔️latest
️✔️3.11
️✔️3.9
️✔️cognitiveservices
️✔️latest
️✔️3.11
️✔️3.9
️✔️config
️✔️latest
️✔️3.11
️✔️3.9
️✔️configure
️✔️latest
️✔️3.11
️✔️3.9
️✔️consumption
️✔️latest
️✔️3.11
️✔️3.9
️✔️container
️✔️latest
️✔️3.11
️✔️3.9
️✔️containerapp
️✔️latest
️✔️3.11
️✔️3.9
️✔️core
️✔️2018-03-01-hybrid
️✔️3.11
️✔️3.9
️✔️2019-03-01-hybrid
️✔️3.11
️✔️3.9
️✔️2020-09-01-hybrid
️✔️3.11
️✔️3.9
️✔️latest
️✔️3.11
️✔️3.9
️✔️cosmosdb
️✔️latest
️✔️3.11
️✔️3.9
️✔️databoxedge
️✔️2019-03-01-hybrid
️✔️3.11
️✔️3.9
️✔️2020-09-01-hybrid
️✔️3.11
️✔️3.9
️✔️latest
️✔️3.11
️✔️3.9
️✔️dla
️✔️latest
️✔️3.11
️✔️3.9
️✔️dls
️✔️latest
️✔️3.11
️✔️3.9
️✔️dms
️✔️latest
️✔️3.11
️✔️3.9
️✔️eventgrid
️✔️latest
️✔️3.11
️✔️3.9
️✔️eventhubs
️✔️latest
️✔️3.11
️✔️3.9
️✔️feedback
️✔️latest
️✔️3.11
️✔️3.9
️✔️find
️✔️latest
️✔️3.11
️✔️3.9
️✔️hdinsight
️✔️latest
️✔️3.11
️✔️3.9
️✔️identity
️✔️latest
️✔️3.11
️✔️3.9
️✔️iot
️✔️2019-03-01-hybrid
️✔️3.11
️✔️3.9
️✔️2020-09-01-hybrid
️✔️3.11
️✔️3.9
️✔️latest
️✔️3.11
️✔️3.9
️✔️keyvault
️✔️2018-03-01-hybrid
️✔️3.11
️✔️3.9
️✔️2020-09-01-hybrid
️✔️3.11
️✔️3.9
️✔️latest
️✔️3.11
️✔️3.9
️✔️kusto
️✔️latest
️✔️3.11
️✔️3.9
️✔️lab
️✔️latest
️✔️3.11
️✔️3.9
️✔️managedservices
️✔️latest
️✔️3.11
️✔️3.9
️✔️maps
️✔️latest
️✔️3.11
️✔️3.9
️✔️marketplaceordering
️✔️latest
️✔️3.11
️✔️3.9
️✔️monitor
️✔️latest
️✔️3.11
️✔️3.9
️✔️mysql
️✔️latest
️✔️3.11
️✔️3.9
️✔️netappfiles
️✔️latest
️✔️3.11
️✔️3.9
️✔️network
️✔️2018-03-01-hybrid
️✔️3.11
️✔️3.9
️✔️latest
️✔️3.11
️✔️3.9
️✔️policyinsights
️✔️latest
️✔️3.11
️✔️3.9
️✔️privatedns
️✔️latest
️✔️3.11
️✔️3.9
️✔️profile
️✔️latest
️✔️3.11
️✔️3.9
️✔️rdbms
️✔️latest
️✔️3.11
️✔️3.9
️✔️redis
️✔️latest
️✔️3.11
️✔️3.9
️✔️relay
️✔️latest
️✔️3.11
️✔️3.9
️✔️resource
️✔️2018-03-01-hybrid
️✔️3.11
️✔️3.9
️✔️2019-03-01-hybrid
️✔️3.11
️✔️3.9
️✔️latest
️✔️3.11
️✔️3.9
️✔️role
️✔️latest
️✔️3.11
️✔️3.9
️✔️search
️✔️latest
️✔️3.11
️✔️3.9
️✔️security
️✔️latest
️✔️3.11
️✔️3.9
️✔️servicebus
️✔️latest
️✔️3.11
️✔️3.9
️✔️serviceconnector
️✔️latest
️✔️3.11
️✔️3.9
️✔️servicefabric
️✔️latest
️✔️3.11
️✔️3.9
️✔️signalr
️✔️latest
️✔️3.11
️✔️3.9
️✔️sql
️✔️latest
️✔️3.11
️✔️3.9
️✔️sqlvm
️✔️latest
️✔️3.11
️✔️3.9
️✔️storage
️✔️2018-03-01-hybrid
️✔️3.11
️✔️3.9
️✔️2019-03-01-hybrid
️✔️3.11
️✔️3.9
️✔️2020-09-01-hybrid
️✔️3.11
️✔️3.9
️✔️latest
️✔️3.11
️✔️3.9
️✔️synapse
️✔️latest
️✔️3.11
️✔️3.9
️✔️telemetry
️✔️2018-03-01-hybrid
️✔️3.11
️✔️3.9
️✔️2019-03-01-hybrid
️✔️3.11
️✔️3.9
️✔️2020-09-01-hybrid
️✔️3.11
️✔️3.9
️✔️latest
️✔️3.11
️✔️3.9
️✔️util
️✔️latest
️✔️3.11
️✔️3.9
️✔️vm
️✔️2018-03-01-hybrid
️✔️3.11
️✔️3.9
️✔️2019-03-01-hybrid
️✔️3.11
️✔️3.9
️✔️2020-09-01-hybrid
️✔️3.11
️✔️3.9
️✔️latest
️✔️3.11
️✔️3.9

@azure-client-tools-bot-prd
Copy link
Copy Markdown

Hi @YitongFeng-git,
Since the current milestone time is less than 7 days, this pr will be reviewed in the next milestone.

@azure-client-tools-bot-prd
Copy link
Copy Markdown

azure-client-tools-bot-prd Bot commented Nov 28, 2023

⚠️AzureCLI-BreakingChangeTest
⚠️acs
rule cmd_name rule_message suggest_message
⚠️ 1011 - SubgroupAdd aks trustedaccess sub group aks trustedaccess added

@yonzhan
Copy link
Copy Markdown
Collaborator

yonzhan commented Nov 28, 2023

AKS

@microsoft-github-policy-service microsoft-github-policy-service Bot added Auto-Assign Auto assign by bot AKS az aks/acs/openshift labels Nov 28, 2023
@YitongFeng-git YitongFeng-git changed the title [AKS] feat: support trustedaccess role and rolebinding operations [AKS] feat: Support trustedaccess role and rolebinding operations Nov 28, 2023
Copy link
Copy Markdown
Member

@FumingZhang FumingZhang left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please add scenario tests for the newly added command/options and adjust PR title/history note according to the guidelines.

e.g.,

  • [AKS] az aks trustedaccess role: Add new command group to manage trusted access roles
  • [AKS] az aks trustedaccess rolebinding: Add new command group to manage trusted access role bindings

Comment thread src/azure-cli/azure/cli/command_modules/acs/_params.py Outdated
@YitongFeng-git YitongFeng-git force-pushed the feat/trustedaccess branch 2 times, most recently from 76f06ba to d3dd7b0 Compare November 28, 2023 08:01
Comment thread src/azure-cli/azure/cli/command_modules/acs/tests/latest/test_aks_commands.py Outdated
Comment thread src/azure-cli/azure/cli/command_modules/acs/tests/latest/test_aks_commands.py Outdated
@YitongFeng-git YitongFeng-git force-pushed the feat/trustedaccess branch 6 times, most recently from c3c5b43 to 42f19a3 Compare November 29, 2023 02:21
Copy link
Copy Markdown
Member

@FumingZhang FumingZhang left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Comment thread src/azure-cli/azure/cli/command_modules/acs/tests/latest/test_aks_commands.py Outdated
@YitongFeng-git
Copy link
Copy Markdown
Contributor Author

@zhoxing-ms @yanzhudd could you help review, thanks!

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Only rolebinding is present, should we also add role?

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

role no need parameter, role only has one command az aks trustedaccess role list, which no need cluster name parameter

Comment thread src/azure-cli/azure/cli/command_modules/acs/_help.py Outdated
Comment thread src/azure-cli/azure/cli/command_modules/acs/_help.py Outdated
Comment thread src/azure-cli/azure/cli/command_modules/acs/custom.py
Comment thread src/azure-cli/azure/cli/command_modules/acs/custom.py
@yanzhudd
Copy link
Copy Markdown
Contributor

please resolve the conflicts.

@YitongFeng-git
Copy link
Copy Markdown
Contributor Author

updated, kindly review again! @yanzhudd help merge this PR to avoid conflicts again, thank you!

@yanzhudd
Copy link
Copy Markdown
Contributor

/azp run

@azure-pipelines
Copy link
Copy Markdown

Azure Pipelines successfully started running 3 pipeline(s).

@yanzhudd
Copy link
Copy Markdown
Contributor

please resolve CI issues.

@YitongFeng-git
Copy link
Copy Markdown
Contributor Author

@yanzhudd updated! kindly review and merge, thank you !

@yanzhudd yanzhudd changed the title [AKS] feat: Support trustedaccess role and rolebinding operations {AKS} feat: Support trustedaccess role and rolebinding operations Dec 22, 2023
@yanzhudd yanzhudd merged commit 1512178 into Azure:dev Dec 22, 2023
MaxHorstmann pushed a commit to MaxHorstmann/azure-cli that referenced this pull request Jan 19, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

AKS az aks/acs/openshift Auto-Assign Auto assign by bot RBAC az role

Projects

None yet

Development

Successfully merging this pull request may close these issues.

7 participants