[QUERY] AddonProfiles["IngressApplicationGateway"]

[cwash05]

Library name and version

Azure.ResourceManager.ContainerService 1.2.2

Query/Question

I'm trying to configure the AGIC addon to use a user created MI. i have this

managedClusterData.AddonProfiles["IngressApplicationGateway"] = new ManagedClusterAddonProfile(isEnabled: true)
{
    Config =
    {
        {"sku", "WAF_2" },
        {"enableHttp2", "true" },
        {"applicationGatewayId", appGatewayId.Id },
        {"userAssignedIdentities", kubeletId.Id }
    }

which converts to this when deployed

"IngressApplicationGateway": {
                        "enabled": true,
                        "config": {
                            "applicationGatewayId": "[parameters('applicationGateways_usermicheck2_appgw_externalid')]",
                            "effectiveApplicationGatewayId": "[parameters('applicationGateways_usermicheck2_appgw_externalid')]",
                            "enableHttp2": "true",
                            "sku": "WAF_2",
                            "userAssignedIdentities": "[parameters('userAssignedIdentities_kubelet_usermicheck2_mi_externalid')]"
                        }

but it's still using the default ingressapplicationgateway-{AKSNAME} MI. How can I configure it to use the user created MI or is this not possible any more?

Environment

No response

[jsquire]

Thank you for your feedback. Tagging and routing to the team member best able to assist.

[mcgallan]

@cwash05 Thank you for reaching out to us. I have conducted a local test regarding the issue you mentioned, but I was unable to reproduce the problem on my end. Below is the relevant response body recorded in my test logs:

"addonProfiles": {
            "IngressApplicationGateway": {
              "enabled": true,
              "config": {
                "applicationGatewayId": "/subscriptions/mysub/resourceGroups/deleteme0225/providers/Microsoft.Network/applicationGateways/AGICTest",
                "effectiveApplicationGatewayId": "/subscriptions/mysub/resourceGroups/deleteme0225/providers/Microsoft.Network/applicationGateways/AGICTest",
                "userAssignedIdentities": "/subscriptions/mysub/resourcegroups/testaksrg6947/providers/Microsoft.ManagedIdentity/userAssignedIdentities/AGICtest6050"
              },

To better understand the root cause and assist you more effectively, could you please provide additional details? Specifically, did the userAssignedIdentities change after the service returned the response, or did the issue occur immediately after the value was assigned?

Your insights will help us identify potential contributing factors and work towards a resolution more efficiently. Additionally, here is the reference code I used during my testing:

UserAssignedIdentityResource kubernetId = await CreateIdentityAsync(resourceGroup, input, location.Value);
var clusterData = new ContainerServiceManagedClusterData(location == null ? resourceGroup.Data.Location : location.Value)
{
    //other properties
    AddonProfiles =
    {
        { "IngressApplicationGateway", new ManagedClusterAddonProfile(isEnabled: true)
        {
            Config =
            {
                {"applicationGatewayId", myAPGWId },
                {"userAssignedIdentities", kubernetId.Id }
            }
        }
        }
    },
};

[github-actions]

Hi @cwash05. Thank you for opening this issue and giving us the opportunity to assist. To help our team better understand your issue and the details of your scenario please provide a response to the question asked above or the information requested above. This will help us more accurately address your issue.