AKS creation timing issue with KV rolebinding

sometimes the AKS cluster creation fails because the AKS MI does not have permissions on the etcd KV yet. this PR introduces an explicit dependency from the AKS resource to the KV roleassignment (and the VNET role assignment as well). Signed-off-by: Gerd Oberlechner <[email protected]>
Azure · Nov 12, 2024 · 69da402 · 69da402
1 parent 07deb79
commit 69da402
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/dev-infrastructure/modules/aks-cluster-base.bicep b/dev-infrastructure/modules/aks-cluster-base.bicep
@@ -361,6 +361,10 @@ resource aksCluster 'Microsoft.ContainerService/managedClusters@2024-04-02-previ
     }
     supportPlan: 'KubernetesOfficial'
   }
+  dependsOn: [
+    aksNetworkContributorRoleAssignment
+    aks_keyvault_crypto_user
+  ]
 }
 
 resource userAgentPools 'Microsoft.ContainerService/managedClusters/agentPools@2024-04-02-preview' = [