[BUG] Cannot complete instructions for setting up Web Application Routing add-on

[sam-huang1223]

Describe the bug
In https://learn.microsoft.com/en-us/azure/aks/web-app-routing?tabs=without-osm, it asks us to run MANAGEDIDENTITY_OBJECTID=$(az aks show -g ${RGNAME} -n ${CLUSTERNAME} --query ingressProfile.webAppRouting.identity.objectId -o tsv) after enabling the add-on for an existing cluster. However, this returns null and further inspection of the ingressProfile field reveals that this identity block doesn't seem to exist. Perhaps this commands need to be updated?

To Reproduce

1. az aks enable-addons -g snorkel-flow-rg -n snorkel-flow-cluster --addons azure-keyvault-secrets-provider,web_application_routing --enable-secret-rotation
2. MANAGEDIDENTITY_OBJECTID=$(az aks show -g ${RGNAME} -n ${CLUSTERNAME} --query ingressProfile.webAppRouting.identity.objectId -o tsv)

Expected behavior
ManagedIdentity field is populated (this worked about a year ago when I first attempted experimenting with the web app routing add-on)

Screenshots
If applicable, add screenshots to help explain your problem.

Environment (please complete the following information):

• latest az, latest AKS cluster version, ubuntu 20.04

Additional context
If web app routing doesn't work for us, Snorkel will need to migrate to using application gateway for our azure deployments which may not be ideal.

[PixelRobots]

Hello @sam-huang1223

I have just tested this on one of my clusters and I am retrieving the Managed Identity Object ID as expected. I tested this on using the cloud shell.

can you please check again and let me know.

[bscholtes1A]

Describe the bug In https://learn.microsoft.com/en-us/azure/aks/web-app-routing?tabs=without-osm, it asks us to run MANAGEDIDENTITY_OBJECTID=$(az aks show -g ${RGNAME} -n ${CLUSTERNAME} --query ingressProfile.webAppRouting.identity.objectId -o tsv) after enabling the add-on for an existing cluster. However, this returns null and further inspection of the ingressProfile field reveals that this identity block doesn't seem to exist. Perhaps this commands need to be updated?

To Reproduce

1. az aks enable-addons -g snorkel-flow-rg -n snorkel-flow-cluster --addons azure-keyvault-secrets-provider,web_application_routing --enable-secret-rotation
2. MANAGEDIDENTITY_OBJECTID=$(az aks show -g ${RGNAME} -n ${CLUSTERNAME} --query ingressProfile.webAppRouting.identity.objectId -o tsv)

Expected behavior ManagedIdentity field is populated (this worked about a year ago when I first attempted experimenting with the web app routing add-on)

Screenshots If applicable, add screenshots to help explain your problem.

Environment (please complete the following information):

• latest az, latest AKS cluster version, ubuntu 20.04

Additional context If web app routing doesn't work for us, Snorkel will need to migrate to using application gateway for our azure deployments which may not be ideal.

Same problem on my side. I had to create a brand new AKS.

[PixelRobots]

Can you confirm if you are using the latest aks-preview extension?

[ghost]

Action required from @Azure/aks-pm

[sabbour]

@sam-huang1223 can you run az version ?

The minimum versions should be:

• Azure CLI version: 2.47.0
• aks-preview Azure CLI extension: 0.5.137

These are the versions that are working for me:

 az version
{
  "azure-cli": "2.51.0",
  "azure-cli-core": "2.51.0",
  "azure-cli-telemetry": "1.1.0",
  "extensions": {
    "aks-preview": "0.5.150"
  }
}

[sabbour]

@sam-huang1223 are you still having this issue with the latest AZ CLI version?

[microsoft-github-policy-service]

This issue will now be closed because it hasn't had any activity for 7 days after stale. sam-huang1223 feel free to comment again on the next 7 days to reopen or open a new issue after that time if you still have a question/issue or suggestion.