From 2b294717abab21cf7de1eb7ef48bbe175397ab2a Mon Sep 17 00:00:00 2001
From: Leonard <92177433+LeonardHd@users.noreply.github.com>
Date: Tue, 2 Aug 2022 22:50:30 +0200
Subject: [PATCH] fix: #948 arc missing system identity (#949)

---
 .../DeploymentTemplates/DefaultTemplate.json               | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/arc/portal_gallery_package/DeploymentTemplates/DefaultTemplate.json b/arc/portal_gallery_package/DeploymentTemplates/DefaultTemplate.json
index 8ba0f963e..19333b2f8 100644
--- a/arc/portal_gallery_package/DeploymentTemplates/DefaultTemplate.json
+++ b/arc/portal_gallery_package/DeploymentTemplates/DefaultTemplate.json
@@ -41,6 +41,10 @@
             "type": "Microsoft.KubernetesConfiguration/extensions",
             "apiVersion": "2021-09-01",
             "name": "[parameters('extensionName')]",
+            "scope": "[concat('Microsoft.Kubernetes/connectedClusters/', parameters('connectedClusterName'))]",
+            "identity": {
+                "type": "SystemAssigned"
+            },
             "tags": "[ if(contains(parameters('tagsByResource'), 'Microsoft.KubernetesConfiguration/extensions'), parameters('tagsByResource')['Microsoft.KubernetesConfiguration/extensions'], json('{}')) ]",
             "properties": {
                 "extensionType": "Microsoft.AzureKeyVaultSecretsProvider",
@@ -55,8 +59,7 @@
                     "secrets-store-csi-driver.rotationPollInterval": "[parameters('rotationPollInterval')]",
                     "secrets-store-csi-driver.syncSecret.enabled": "[parameters('enableSyncSecret')]"
                 }
-            },
-            "scope": "[concat('Microsoft.Kubernetes/connectedClusters/', parameters('connectedClusterName'))]"
+            }
         }
     ]
 }