Skip to content

Commit

Permalink
Add 1P client/server app IDs to docs (#336)
Browse files Browse the repository at this point in the history
* Add 1P client/server app IDs to docs

- Adds the application IDs for the 1P client and server apps that
customers should use when using `kubelogin get-token` with PoP token
support

* Remove spn mode from documentation changes
  • Loading branch information
rharpavat authored Sep 13, 2023
1 parent 0980658 commit 8e19a20
Showing 1 changed file with 18 additions and 0 deletions.
18 changes: 18 additions & 0 deletions docs/book/src/concepts/azure-arc.md
Original file line number Diff line number Diff line change
Expand Up @@ -8,3 +8,21 @@ kubelogin can be used to authenticate with Azure Arc-enabled clusters by request
These flags can be provided to either `kubelogin get-token` directly to get a PoP token, or to `kubelogin convert-kubeconfig` for `kubectl` to request the token internally.

PoP token requests only work with `interactive` and `spn` login modes; these flags will be ignored if provided for other login modes.

## AAD Server App

```
applicationID: 6256c85f-0aad-4d50-b960-e6e9b21efe35
```

This is the application used by the server side. The access token needs to be issued for this app to access a 1P Arc-enabled cluster.

This server app ID is a required parameter for [`web browser interactive`](./login-modes/interactive.md) login mode supporting PoP token authentication.

## AAD Client App

```
applicationID: 3f4439ff-e698-4d6d-84fe-09c9d574f06b
```

This is a 1P client application used by `kubelogin` to perform login on behalf of the user. It should be used for [`web browser interactive`](./login-modes/interactive.md) login mode when using PoP token authentication.

0 comments on commit 8e19a20

Please sign in to comment.