How to Reset Azure AKS Service Principal credentials

[rjshrjndrn]

We'll have to reset / rotate aks sp creds when it expires. This is how we do

Steps

1. Get the service principal client id

   export AKS_CLUSTER_NAME=<name of the cluster>
   export AKS_CLUSTER_RESOURCE_GROUP=<name of the resource group in whic aks resource got created>
   SP_ID=$(az aks show --name $AKS_CLUSTER_NAME --resource-group $AKS_CLUSTER_RESOURCE_GROUP --query servicePrincipalProfile.clientId -o tsv)

2. Check the validity

   az ad sp credential list --id $SP_ID --query "[].endDate" -o tsv

3. Reset the credential

   az ad sp credential reset --name $SP_ID

   This will give a sample output like this

   The output includes credentials that you must protect. Be sure that you do not include these credentials in your code or check the credentials into your source control. For more information, see https://aka.ms/azadsp-cli
   {
     "appId": "xxxx",
     "name": "xxxx",
     "password": "xxxx",
     "tenant": "xxxx"
   }

   Run the below command for resetting the credential.

   export SP_SECRET=$(az ad sp credential reset --name $SP_ID --query password -o tsv)

   az aks update-credentials \
   --resource-group $AKS_CLUSTER_RESOURCE_GROUP \
   --name $AKS_CLUSTER_NAME \
   --reset-service-principal \
   --service-principal $SP_ID \
   --client-secret $SP_SECRET

   It might take some time to propagate.