From 59f74a247679867b9476c0c4920962ab3da61dda Mon Sep 17 00:00:00 2001 From: Paul Yu Date: Fri, 17 Feb 2023 14:50:51 -0800 Subject: [PATCH] Move command to enable secret rotation from key vault --- website/blog-cnny/2023-02-07/index.md | 1 + website/blog-cnny/2023-02-08/index.md | 3 +-- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/website/blog-cnny/2023-02-07/index.md b/website/blog-cnny/2023-02-07/index.md index aa22a41964..081f1d7ec1 100644 --- a/website/blog-cnny/2023-02-07/index.md +++ b/website/blog-cnny/2023-02-07/index.md @@ -172,6 +172,7 @@ ACR_NAME= az aks enable-addons \ --addons azure-keyvault-secrets-provider \ + --enable-secret-rotation \ --name $AKS_NAME \ --resource-group $RG_NAME ``` diff --git a/website/blog-cnny/2023-02-08/index.md b/website/blog-cnny/2023-02-08/index.md index 4e428d38c8..74482d0e85 100644 --- a/website/blog-cnny/2023-02-08/index.md +++ b/website/blog-cnny/2023-02-08/index.md @@ -172,8 +172,7 @@ az aks enable-addons \ --name $AKS_NAME \ --resource-group $RESOURCE_GROUP \ --addons web_application_routing \ - --dns-zone-resource-id=$DNS_ZONE_ID \ - --enable-secret-rotation + --dns-zone-resource-id=$DNS_ZONE_ID ``` The add-on will also deploy a new Azure Managed Identity which is used by the `external-dns` controller when writing Azure DNS zone entries. Currently, it does not have permission to do that, so let's grant it permission.