use existing clusters-service MI for CS PR checking (Azure#637)

this way we can reuse the role assignments that have been granted to the original CS MI Signed-off-by: Gerd Oberlechner <[email protected]>
ahitacat · Sep 23, 2024 · 5efe3df · 5efe3df
1 parent 3addc56
commit 5efe3df
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 7 deletions.
diff --git a/dev-infrastructure/configurations/cs-integ-msi.bicepparam b/dev-infrastructure/configurations/cs-integ-msi.bicepparam
@@ -2,6 +2,6 @@ using '../templates/cs-integration-msi.bicep'
 
 param namespaceFormatString = 'sandbox-jenkins-{0}-aro-hcp'
 
-param clusterServiceManagedIdentityName = 'cs-integ-cluster-service'
+param clusterServiceManagedIdentityName = 'clusters-service'
 
 param clusterName = take('cs-integ-svc-cluster-${uniqueString('svc-cluster')}', 63)
diff --git a/dev-infrastructure/templates/cs-integration-msi.bicep b/dev-infrastructure/templates/cs-integration-msi.bicep
@@ -1,6 +1,3 @@
-@description('The location for the resources')
-param location string = resourceGroup().location
-
 @description('The format string for the namespace')
 param namespaceFormatString string
 
@@ -10,8 +7,7 @@ param clusterServiceManagedIdentityName string
 @description('The name of the cluster to integrate with')
 param clusterName string
 
-resource uami 'Microsoft.ManagedIdentity/userAssignedIdentities@2023-01-31' = {
-  location: location
+resource uami 'Microsoft.ManagedIdentity/userAssignedIdentities@2023-01-31' existing = {
   name: clusterServiceManagedIdentityName
 }
 
@@ -21,7 +17,7 @@ resource aksCluster 'Microsoft.ContainerService/managedClusters@2024-04-02-previ
 
 @batchSize(1)
 resource uami_fedcred 'Microsoft.ManagedIdentity/userAssignedIdentities/federatedIdentityCredentials@2023-01-31' = [
-  for i in range(0, 20): {
+  for i in range(0, 19): {
     parent: uami
     name: 'fedcred-${i}'
     properties: {