ManagedClusterPodIdentityProfile Class

See use AAD pod identity for more details on pod identity integration.

Inheritance

Model

ManagedClusterPodIdentityProfile

Constructor

ManagedClusterPodIdentityProfile(*, enabled: Optional[bool] = None, allow_network_plugin_kubenet: Optional[bool] = None, user_assigned_identities: Optional[List[_models.ManagedClusterPodIdentity]] = None, user_assigned_identity_exceptions: Optional[List[_models.ManagedClusterPodIdentityException]] = None, **kwargs)

Variables

enabled

bool

Whether the pod identity addon is enabled.

allow_network_plugin_kubenet

bool

Running in Kubenet is disabled by default due to the security related nature of AAD Pod Identity and the risks of IP spoofing. See using Kubenet network plugin with AAD Pod Identity for more information.

user_assigned_identities

list[ManagedClusterPodIdentity]

The pod identities to use in the cluster.

user_assigned_identity_exceptions

list[ManagedClusterPodIdentityException]

The pod identity exceptions to allow.