Error executing release pipeline for Continuous Deployment with AKS

Senior Member

I have been following the steps to execute Release pipeline following these links :

https://azure.github.io/application-gateway-kubernetes-ingress/how-tos/continuous-deployment/

https://github.com/Azure/application-gateway-kubernetes-ingress/blob/master/docs/how-tos/continuous-...

 

But I am facing an error , looks like pipeline is not able to find the Principal ID:

 

 

2021-07-28T15:15:59.1832610Z Setting AZURE_CONFIG_DIR env variable to: /home/vsts/work/_temp/.azclitask
2021-07-28T15:15:59.1838681Z Setting active cloud to: AzureCloud
2021-07-28T15:15:59.1849656Z [command]/usr/bin/az cloud set -n AzureCloud
2021-07-28T15:15:59.4258685Z [command]/usr/bin/az login --service-principal -u *** --password=*** --tenant ***
2021-07-28T15:16:00.0105962Z [
2021-07-28T15:16:00.0106252Z {
2021-07-28T15:16:00.0106758Z "cloudName": "AzureCloud",
2021-07-28T15:16:00.0108400Z "homeTenantId": "",
2021-07-28T15:16:00.0108921Z "id": "90005c67-7555-493b-ba11-a38de0084ce6",
2021-07-28T15:16:00.0109239Z "isDefault": true,
2021-07-28T15:16:00.0109519Z "managedByTenants": [],
2021-07-28T15:16:00.0109966Z "name": "Azure Pass - Sponsorship-13July",
2021-07-28T15:16:00.0110272Z "state": "Enabled",
2021-07-28T15:16:00.0110867Z "tenantId": "
",
2021-07-28T15:16:00.0111364Z "user": {
2021-07-28T15:16:00.0111997Z "name": "",
2021-07-28T15:16:00.0112296Z "type": "servicePrincipal"
2021-07-28T15:16:00.0112550Z }
2021-07-28T15:16:00.0112773Z }
2021-07-28T15:16:00.0112957Z ]
2021-07-28T15:16:00.0120323Z [command]/usr/bin/az account set --subscription 90005c67-7555-493b-ba11-a38de0084ce6
2021-07-28T15:16:00.2442631Z [command]/bin/bash /home/vsts/work/_temp/azureclitaskscript1627485358779.sh
2021-07-28T15:16:05.5385918Z {
2021-07-28T15:16:05.5387380Z "clientId": "1031baeb-212d-43fd-8662-0955be9eaa4e",
2021-07-28T15:16:05.5389254Z "clientSecretUrl": "https://control-eastus.identity.azure.net/subscriptions/90005c67-7555-493b-ba11-a38de0084ce6/resourc...",
2021-07-28T15:16:05.5390734Z "id": "/subscriptions/90005c67-7555-493b-ba11-a38de0084ce6/resourcegroups/MC_resource-group_aks-cluster_eastus/providers/Microsoft.ManagedIdentity/userAssignedIdentities/agic-identity",
2021-07-28T15:16:05.5391300Z "location": "eastus",
2021-07-28T15:16:05.5392044Z "name": "agic-identity",
2021-07-28T15:16:05.5392564Z "principalId": "f4dd0eb7-132f-4d33-a9fb-df951cc81ee8",
2021-07-28T15:16:05.5393115Z "resourceGroup": "MC_resource-group_aks-cluster_eastus",
2021-07-28T15:16:05.5393455Z "tags": {},
2021-07-28T15:16:05.5404411Z "tenantId": "
",
2021-07-28T15:16:05.5404898Z "type": "Microsoft.ManagedIdentity/userAssignedIdentities"
2021-07-28T15:16:05.5405224Z }
2021-07-28T15:16:08.8767293Z WARNING: Failed to query --assignee-principal-type for f4dd0eb7-132f-4d33-a9fb-df951cc81ee8 by invoking Graph API.
2021-07-28T15:16:08.8768766Z RBAC server might reject creating role assignment without --assignee-principal-type in the future. Better to specify --assignee-principal-type manually.
2021-07-28T15:16:10.0120410Z ERROR: Principal f4dd0eb7132f4d33a9fbdf951cc81ee8 does not exist in the directory ***.
2021-07-28T15:16:10.8664081Z WARNING: Failed to query --assignee-principal-type for f4dd0eb7-132f-4d33-a9fb-df951cc81ee8 by invoking Graph API.
2021-07-28T15:16:10.8665060Z RBAC server might reject creating role assignment without --assignee-principal-type in the future. Better to specify --assignee-principal-type manually.
2021-07-28T15:16:11.7955580Z ERROR: Principal f4dd0eb7132f4d33a9fbdf951cc81ee8 does not exist in the directory ***.
2021-07-28T15:16:11.8685975Z ##[error]Script failed with error: Error: The process '/bin/bash' failed with exit code 1
2021-07-28T15:16:11.8702755Z [command]/usr/bin/az account clear
2021-07-28T15:16:12.1424485Z ##[section]Finishing: Create AGIC Identity

Also opened Issue here - https://github.com/Azure/application-gateway-kubernetes-ingress/issues/1231

 

 

 

0 Replies