Fix the issue of service principal. (Azure#13458)

Co-authored-by: wyunchi-ms <[email protected]>
lilinvictorms · Nov 9, 2020 · fd71499 · fd71499
1 parent 4aa08c0
commit fd71499
Show file tree

Hide file tree

Showing 5 changed files with 1,982 additions and 1 deletion.
diff --git a/src/Aks/Aks.Test/ScenarioTests/KubernetesTests.cs b/src/Aks/Aks.Test/ScenarioTests/KubernetesTests.cs
@@ -31,6 +31,13 @@ public void TestAzureKubernetes()
             TestController.NewInstance.RunPowerShellTest(_logger, "Test-NewAzAks");
         }
 
+        [Fact]
+        [Trait(Category.AcceptanceType, Category.CheckIn)]
+        public void TestNewAzureKubernetesByServicePrincipal()
+        {
+            TestController.NewInstance.RunPowerShellTest(_logger, "Test-NewAzAksByServicePrincipal");
+        }
+
         [Fact]
         [Trait(Category.AcceptanceType, Category.CheckIn)]
         public void TestAzureKubernetesAddons()

diff --git a/src/Aks/Aks.Test/ScenarioTests/KubernetesTests.ps1 b/src/Aks/Aks.Test/ScenarioTests/KubernetesTests.ps1
@@ -146,6 +146,37 @@ function Test-NewAzAks
     }
 }
 
+function Test-NewAzAksByServicePrincipal
+{
+    # Setup
+    $resourceGroupName = Get-RandomResourceGroupName
+    $kubeClusterName = Get-RandomClusterName
+    $location = "eastus"
+
+    $ServicePrincipalId = '618a2a3a-9d44-415a-b0ce-9729253a4ba9'
+    $Secret = '5E41A57vC_ODdiFb5ji-a9~C~Mp3gKt7D~'
+    $secStringPassword = ConvertTo-SecureString $Secret -AsPlainText -Force
+    $credObject = New-Object System.Management.Automation.PSCredential($ServicePrincipalId,$secStringPassword)
+
+    try
+    {
+        New-AzResourceGroup -Name $resourceGroupName -Location $location
+
+
+        New-AzAksCluster -ResourceGroupName $resourceGroupName -Name $kubeClusterName `
+                -ServicePrincipalIdAndSecret $credObject
+        $cluster = Get-AzAksCluster -ResourceGroupName $resourceGroupName -Name $kubeClusterName
+        Assert-AreEqual $ServicePrincipalId $cluster.ServicePrincipalProfile.ClientId
+
+        $cluster | Import-AzAksCredential -Force
+        $cluster | Remove-AzAksCluster -Force
+    }
+    finally
+    {
+        Remove-AzResourceGroup -Name $resourceGroupName -Force
+    }
+}
+
 function Test-NewAzAksAddons
 {
     # Setup