{"id":35487,"date":"2023-02-27T13:28:35","date_gmt":"2023-02-17T07:21:51","guid":{"rendered":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8terraform%e6%9e%84%e5%bb%ba%e5%92%8c%e9%85%8d%e7%bd%aeaks%e5%b7%a5%e4%bd%9c%e8%b4%9f%e8%bd%bdid%e7%8e%af%e5%a2%83%e7%9a%84%e7%a4%ba%e4%be%8b%ef%bc%8c%e4%bb%a5azure-openai%e4%b8%ba\/"},"modified":"2024-04-29T16:33:28","modified_gmt":"2024-04-29T08:33:28","slug":"%e4%bd%bf%e7%94%a8terraform%e6%9e%84%e5%bb%ba%e5%92%8c%e9%85%8d%e7%bd%aeaks%e5%b7%a5%e4%bd%9c%e8%b4%9f%e8%bd%bdid%e7%8e%af%e5%a2%83%e7%9a%84%e7%a4%ba%e4%be%8b%ef%bc%8c%e4%bb%a5azure-openai%e4%b8%ba","status":"publish","type":"post","link":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8terraform%e6%9e%84%e5%bb%ba%e5%92%8c%e9%85%8d%e7%bd%aeaks%e5%b7%a5%e4%bd%9c%e8%b4%9f%e8%bd%bdid%e7%8e%af%e5%a2%83%e7%9a%84%e7%a4%ba%e4%be%8b%ef%bc%8c%e4%bb%a5azure-openai%e4%b8%ba\/","title":{"rendered":"\u4f7f\u7528terraform\u6784\u5efa\u548c\u914d\u7f6eAKS\u5de5\u4f5c\u8d1f\u8f7dID\u73af\u5883\u7684\u793a\u4f8b\uff0c\u4ee5Azure OpenAI\u4e3a\u4f8b"},"content":{"rendered":"<h1>\u9996\u5148<\/h1>\n<p>\u5728AKS\u4e0a\u8fd0\u884c\u7684\u5e94\u7528\u7a0b\u5e8f\u548c\u5404\u4e2aAzure\u670d\u52a1\u4e4b\u95f4\u7684\u8ba4\u8bc1\u662f\u5982\u4f55\u8fdb\u884c\u7684\u5462\uff1f\u7279\u522b\u662f\u5728\u914d\u7f6eGitOps\u65f6\uff0c\u4f7f\u7528\u5bc6\u94a5\u548c\u5bc6\u7801\u5bb9\u6613\u6cc4\u9732\uff0c\u8fd9\u662f\u4e00\u4e2a\u9ebb\u70e6\u7684\u95ee\u9898\u3002\u5fae\u8f6fAzure\u57282023\u5e744\u6708\u4e3a\u89e3\u51b3\u8fd9\u4e2a\u95ee\u9898\u63a8\u51fa\u4e86&#8221;\u5de5\u4f5c\u8d1f\u8f7d\u6807\u8bc6(workload identity)&#8221;\uff0c\u7528\u4e8eAKS(Azure Kubernetes Service)\u3002<\/p>\n<p>\u56e0\u6b64\uff0c\u672c\u6b21\u6211\u6253\u7b97\u4f7f\u7528 IaC \u5de5\u5177 Terraform \u6765\u6784\u5efa\u4e00\u4e2a\u4f7f\u7528\u6b64\u5de5\u4f5c\u8d1f\u8f7d ID \u7684 Azure \u73af\u5883\u3002<br \/>\n\u4e3b\u8981\u662f\u6839\u636e\u4ee5\u4e0b Microsoft \u6587\u6863\u7684\u6b65\u9aa4\uff0c\u4f7f\u7528 Terraform \u8fdb\u884c\u5b9e\u65bd\u3002<\/p>\n<ul class=\"post-ul\">\u30ef\u30fc\u30af\u30ed\u30fc\u30c9 ID \u3092\u4f7f\u7528\u3057\u3066 Azure Kubernetes Service (AKS) \u30af\u30e9\u30b9\u30bf\u30fc\u3092\u30c7\u30d7\u30ed\u30a4\u3057\u3066\u69cb\u6210\u3059\u308b &#8211; Azure Kubernetes Service<\/ul>\n<p>\u6709\u5173\u5de5\u4f5c\u8d1f\u8f7dID\u7684\u7279\u70b9\uff0c\u8bf7\u53c2\u8003\u4ee5\u4e0b\u7684GA\u65f6\u7684\u6587\u7ae0\u3002<\/p>\n<ul class=\"post-ul\">\u4e00\u822c\u63d0\u4f9b\u958b\u59cb: AKS \u3067\u306e Azure Active Directory \u30ef\u30fc\u30af\u30ed\u30fc\u30c9 ID | Azure \u306e\u66f4\u65b0\u60c5\u5831 | Microsoft Azure<\/ul>\n<h2>\u5efa\u7acb\u73af\u5883<\/h2>\n<p>\u8fd9\u6b21\u6211\u4eec\u5c06\u4f7f\u7528terraform\u6765\u6784\u5efa\u4e00\u4e2a\u7b80\u5355\u7684\u73af\u5883\u3002\u8bf7\u4fee\u6539terraform\u7684\u672c\u5730\u53d8\u91cf\u4ee5\u66f4\u6539\u90e8\u7f72\u8d44\u6e90\u7684\u540d\u79f0\u3002\u6709\u5173\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u8003&#8221;\u5173\u4e8e\u8ba4\u8bc1\u6d41\u7a0b&#8221;\u3002<\/p>\n<div><img decoding=\"async\" class=\"post-images\" title=\"\" src=\"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d238537434c4406c2b0e1\/8-0.png\" alt=\"\u30c7\u30d7\u30ed\u30a4\u30ea\u30bd\u30fc\u30b9\" \/><\/div>\n<h2>\u642d\u5efa\u73af\u5883\u7684\u6b65\u9aa4<\/h2>\n<p>\u5728\u8fd9\u91cc\uff0c\u6211\u4eec\u5c06\u4f7f\u7528Azure CloudShell\uff08bash\uff09\u3002CloudShell\u9ed8\u8ba4\u5b89\u88c5\u4e86terraform\u548ckubectl\u3002<\/p>\n<p>\u8bf7\u5728CloudShell\u4e2d\u6267\u884c\u4ee5\u4e0b\u547d\u4ee4\uff0c\u5e76\u5c06terraform\u4ee3\u7801\u590d\u5236\u5230\u4ee5\u4e0b\u5185\u5bb9\u4e2d\u3002<br \/>\n\u8bf7\u6ce8\u610f\uff0c\u6839\u636e\u547d\u4ee4\u4e2d\u7684\u6ce8\u91ca\uff0c\u7b2c\u4e00\u6b21\u6267\u884cterraform apply\u5c06\u4f1a\u5931\u8d25\uff0c\u6240\u4ee5\u8bf7\u518d\u6b21\u6267\u884c\u4ee5\u5c06\u6e05\u5355\u5e94\u7528\u5230AKS\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"c\"># terraform\u30d5\u30a9\u30eb\u30c0\u3092\u4f5c\u6210\u3057\u79fb\u52d5<\/span>\r\n<span class=\"nb\">mkdir <\/span>terraform <span class=\"o\">&amp;&amp;<\/span> <span class=\"nb\">cd <\/span>terraform\r\n\r\n<span class=\"c\"># terraform\u306e\u5185\u5bb9\u3092\u8cbc\u308a\u4ed8\u3051\u3066\u4fdd\u5b58<\/span>\r\nvi aks-workload-id.tf\r\n\r\n<span class=\"c\"># terraform\u3092\u521d\u671f\u5316\u3057\u3001\u30c7\u30d7\u30ed\u30a4\u5b9f\u884c<\/span>\r\nterraform init <span class=\"o\">&amp;&amp;<\/span> terraform apply\r\n\r\n<span class=\"c\"># 1\u56de\u76ee\u3067\u306fKubernetes Config\u304c\u5b58\u5728\u305b\u305a\u5931\u6557\u3059\u308b\u306e\u3067\u518d\u5b9f\u884c<\/span>\r\nterraform apply\r\n<\/code><\/pre>\n<p>\u8bf7\u770b\u4e0b\u65b9\u6240\u793a\u7684Terraform\u4ee3\u7801\u62f7\u8d1d\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"c1\"># \u5fc5\u8981\u306a\u5916\u90e8\u30d7\u30ed\u30d0\u30a4\u30c0\u30fc\u306e\u5b9a\u7fa9 \u203b\u4eca\u56de\u306fAzApi\u3092\u5229\u7528\u3057\u307e\u3059\u3002<\/span>\r\n<span class=\"k\">terraform<\/span> <span class=\"p\">{<\/span>\r\n  <span class=\"nx\">required_providers<\/span> <span class=\"p\">{<\/span>\r\n    <span class=\"nx\">azapi<\/span> <span class=\"p\">=<\/span> <span class=\"p\">{<\/span>\r\n      <span class=\"nx\">source<\/span> <span class=\"p\">=<\/span> <span class=\"s2\">\"azure\/azapi\"<\/span>\r\n    <span class=\"p\">}<\/span>\r\n  <span class=\"p\">}<\/span>\r\n<span class=\"p\">}<\/span>\r\n<span class=\"c1\"># \u5404\u30d7\u30ed\u30d0\u30a4\u30c0\u30fc\u306e\u8a2d\u5b9a<\/span>\r\n<span class=\"k\">provider<\/span> <span class=\"s2\">\"azurerm\"<\/span> <span class=\"p\">{<\/span>\r\n  <span class=\"nx\">features<\/span> <span class=\"p\">{}<\/span>\r\n<span class=\"p\">}<\/span>\r\n<span class=\"k\">provider<\/span> <span class=\"s2\">\"kubernetes\"<\/span> <span class=\"p\">{<\/span>\r\n  <span class=\"nx\">config_path<\/span> <span class=\"p\">=<\/span> <span class=\"s2\">\"~\/.kube\/config\"<\/span>\r\n<span class=\"p\">}<\/span>\r\n<span class=\"k\">provider<\/span> <span class=\"s2\">\"azapi\"<\/span> <span class=\"p\">{<\/span>\r\n<span class=\"p\">}<\/span>\r\n\r\n<span class=\"c1\"># \u30ef\u30fc\u30af\u30ed\u30fc\u30c9ID\u95a2\u9023\u3067\u5229\u7528\u3059\u308b\u30ed\u30fc\u30ab\u30eb\u5909\u6570\u3092\u5b9a\u7fa9<\/span>\r\n<span class=\"nx\">locals<\/span> <span class=\"p\">{<\/span>\r\n  <span class=\"nx\">resource_group_name<\/span>                <span class=\"p\">=<\/span> <span class=\"s2\">\"example\"<\/span>\r\n  <span class=\"nx\">resource_group_locaiton<\/span>            <span class=\"p\">=<\/span> <span class=\"s2\">\"Japan East\"<\/span>\r\n\r\n  <span class=\"nx\">aks_name<\/span>                           <span class=\"p\">=<\/span> <span class=\"s2\">\"example-aks\"<\/span>\r\n  <span class=\"nx\">aks_dns_prefix<\/span>                     <span class=\"p\">=<\/span> <span class=\"s2\">\"exampleaks\"<\/span>\r\n\r\n  <span class=\"nx\">service_account_name<\/span>               <span class=\"p\">=<\/span> <span class=\"s2\">\"workload-identity-sa\"<\/span>\r\n  <span class=\"nx\">service_account_namespace<\/span>          <span class=\"p\">=<\/span> <span class=\"s2\">\"default\"<\/span>\r\n  <span class=\"nx\">user_assigned_identity_name<\/span>        <span class=\"p\">=<\/span> <span class=\"s2\">\"myIdentity\"<\/span>\r\n  <span class=\"nx\">federated_identity_credential_name<\/span> <span class=\"p\">=<\/span> <span class=\"s2\">\"myFedIdentity\"<\/span>\r\n\r\n  <span class=\"nx\">kubernetes_pod_name<\/span>                <span class=\"p\">=<\/span> <span class=\"s2\">\"test-pod\"<\/span>\r\n  <span class=\"nx\">kubernetes_container_name<\/span>          <span class=\"p\">=<\/span> <span class=\"s2\">\"test\"<\/span>\r\n  \r\n  <span class=\"nx\">openai_account_name<\/span>                <span class=\"p\">=<\/span> <span class=\"s2\">\"example-openai\"<\/span>\r\n  <span class=\"nx\">gpt_35_turbo_deploy_name<\/span>           <span class=\"p\">=<\/span> <span class=\"s2\">\"chatgpt\"<\/span>\r\n  <span class=\"nx\">gpt_35_turbo_model_version<\/span>         <span class=\"p\">=<\/span> <span class=\"s2\">\"0613\"<\/span>\r\n<span class=\"p\">}<\/span>\r\n\r\n<span class=\"c1\"># \u30ea\u30bd\u30fc\u30b9\u30b0\u30eb\u30fc\u30d7\u3092\u4f5c\u6210<\/span>\r\n<span class=\"k\">resource<\/span> <span class=\"s2\">\"azurerm_resource_group\"<\/span> <span class=\"s2\">\"example\"<\/span> <span class=\"p\">{<\/span>\r\n  <span class=\"nx\">name<\/span>     <span class=\"p\">=<\/span> <span class=\"kd\">local<\/span><span class=\"p\">.<\/span><span class=\"nx\">resource_group_name<\/span>\r\n  <span class=\"nx\">location<\/span> <span class=\"p\">=<\/span> <span class=\"kd\">local<\/span><span class=\"p\">.<\/span><span class=\"nx\">resource_group_locaiton<\/span>\r\n<span class=\"p\">}<\/span>\r\n\r\n<span class=\"c1\"># AKS\u306e\u4f5c\u6210<\/span>\r\n<span class=\"k\">resource<\/span> <span class=\"s2\">\"azurerm_kubernetes_cluster\"<\/span> <span class=\"s2\">\"example\"<\/span> <span class=\"p\">{<\/span>\r\n  <span class=\"nx\">name<\/span>                      <span class=\"p\">=<\/span> <span class=\"kd\">local<\/span><span class=\"p\">.<\/span><span class=\"nx\">aks_name<\/span>\r\n  <span class=\"nx\">location<\/span>                  <span class=\"p\">=<\/span> <span class=\"nx\">azurerm_resource_group<\/span><span class=\"p\">.<\/span><span class=\"nx\">example<\/span><span class=\"p\">.<\/span><span class=\"nx\">location<\/span>\r\n  <span class=\"nx\">resource_group_name<\/span>       <span class=\"p\">=<\/span> <span class=\"nx\">azurerm_resource_group<\/span><span class=\"p\">.<\/span><span class=\"nx\">example<\/span><span class=\"p\">.<\/span><span class=\"nx\">name<\/span>\r\n  <span class=\"nx\">dns_prefix<\/span>                <span class=\"p\">=<\/span> <span class=\"kd\">local<\/span><span class=\"p\">.<\/span><span class=\"nx\">aks_dns_prefix<\/span>\r\n  <span class=\"nx\">oidc_issuer_enabled<\/span>       <span class=\"p\">=<\/span> <span class=\"kc\">true<\/span> <span class=\"c1\"># OIDC issuer\u3092\u6709\u52b9\u5316 <\/span>\r\n  <span class=\"nx\">workload_identity_enabled<\/span> <span class=\"p\">=<\/span> <span class=\"kc\">true<\/span> <span class=\"c1\"># \u30ef\u30fc\u30af\u30ed\u30fc\u30c9ID\u3092\u6709\u52b9\u5316<\/span>\r\n\r\n  <span class=\"nx\">default_node_pool<\/span> <span class=\"p\">{<\/span>\r\n    <span class=\"nx\">name<\/span>       <span class=\"p\">=<\/span> <span class=\"s2\">\"default\"<\/span>\r\n    <span class=\"nx\">node_count<\/span> <span class=\"p\">=<\/span> <span class=\"mi\">1<\/span>\r\n    <span class=\"nx\">vm_size<\/span>    <span class=\"p\">=<\/span> <span class=\"s2\">\"Standard_D2_v2\"<\/span>\r\n  <span class=\"p\">}<\/span>\r\n\r\n  <span class=\"nx\">identity<\/span> <span class=\"p\">{<\/span>\r\n    <span class=\"nx\">type<\/span> <span class=\"p\">=<\/span> <span class=\"s2\">\"SystemAssigned\"<\/span>\r\n  <span class=\"p\">}<\/span>\r\n\r\n  <span class=\"c1\"># \u30c7\u30d7\u30ed\u30a4\u5f8c\u3001Kubernetes Config\u3092\u4f5c\u6210<\/span>\r\n  <span class=\"k\">provisioner<\/span> <span class=\"s2\">\"local-exec\"<\/span> <span class=\"p\">{<\/span>\r\n    <span class=\"nx\">command<\/span> <span class=\"p\">=<\/span> <span class=\"s2\">\"az aks get-credentials -n <\/span><span class=\"k\">${<\/span><span class=\"nx\">self<\/span><span class=\"p\">.<\/span><span class=\"nx\">name<\/span><span class=\"k\">}<\/span><span class=\"s2\"> -g <\/span><span class=\"k\">${<\/span><span class=\"nx\">azurerm_resource_group<\/span><span class=\"p\">.<\/span><span class=\"nx\">example<\/span><span class=\"p\">.<\/span><span class=\"nx\">name<\/span><span class=\"k\">}<\/span><span class=\"s2\">\"<\/span>\r\n  <span class=\"p\">}<\/span>\r\n<span class=\"p\">}<\/span>\r\n\r\n<span class=\"c1\"># \u30e6\u30fc\u30b6\u5272\u5f53\u30de\u30cd\u30fc\u30b8\u30c9ID\u306e\u4f5c\u6210<\/span>\r\n<span class=\"k\">resource<\/span> <span class=\"s2\">\"azurerm_user_assigned_identity\"<\/span> <span class=\"s2\">\"example\"<\/span> <span class=\"p\">{<\/span>\r\n  <span class=\"nx\">name<\/span>                <span class=\"p\">=<\/span> <span class=\"kd\">local<\/span><span class=\"p\">.<\/span><span class=\"nx\">user_assigned_identity_name<\/span>\r\n  <span class=\"nx\">location<\/span>            <span class=\"p\">=<\/span> <span class=\"nx\">azurerm_resource_group<\/span><span class=\"p\">.<\/span><span class=\"nx\">example<\/span><span class=\"p\">.<\/span><span class=\"nx\">location<\/span>\r\n  <span class=\"nx\">resource_group_name<\/span> <span class=\"p\">=<\/span> <span class=\"nx\">azurerm_resource_group<\/span><span class=\"p\">.<\/span><span class=\"nx\">example<\/span><span class=\"p\">.<\/span><span class=\"nx\">name<\/span>\r\n<span class=\"p\">}<\/span>\r\n\r\n<span class=\"c1\"># Kubernetes\u306e\u30b5\u30fc\u30d3\u30b9\u30a2\u30ab\u30a6\u30f3\u30c8\u3092\u4f5c\u6210<\/span>\r\n<span class=\"k\">resource<\/span> <span class=\"s2\">\"kubernetes_service_account\"<\/span> <span class=\"s2\">\"example\"<\/span> <span class=\"p\">{<\/span>\r\n  <span class=\"nx\">depends_on<\/span> <span class=\"p\">=<\/span> <span class=\"p\">[<\/span><span class=\"nx\">azurerm_kubernetes_cluster<\/span><span class=\"p\">.<\/span><span class=\"nx\">example<\/span><span class=\"p\">]<\/span>\r\n\r\n  <span class=\"nx\">metadata<\/span> <span class=\"p\">{<\/span>\r\n    <span class=\"nx\">name<\/span>      <span class=\"p\">=<\/span> <span class=\"kd\">local<\/span><span class=\"p\">.<\/span><span class=\"nx\">service_account_name<\/span>\r\n    <span class=\"nx\">namespace<\/span> <span class=\"p\">=<\/span> <span class=\"kd\">local<\/span><span class=\"p\">.<\/span><span class=\"nx\">service_account_namespace<\/span>\r\n    <span class=\"nx\">annotations<\/span> <span class=\"p\">=<\/span> <span class=\"p\">{<\/span>\r\n      <span class=\"s2\">\"azure.workload.identity\/client-id\"<\/span> <span class=\"p\">=<\/span> <span class=\"nx\">azurerm_user_assigned_identity<\/span><span class=\"p\">.<\/span><span class=\"nx\">example<\/span><span class=\"p\">.<\/span><span class=\"nx\">client_id<\/span>\r\n    <span class=\"p\">}<\/span>\r\n  <span class=\"p\">}<\/span>\r\n<span class=\"p\">}<\/span>\r\n\r\n<span class=\"c1\"># \u30d5\u30a7\u30c7\u30ec\u30fc\u30b7\u30e7\u30f3 ID \u8cc7\u683c\u60c5\u5831\u3092\u8a2d\u5b9a<\/span>\r\n<span class=\"k\">resource<\/span> <span class=\"s2\">\"azurerm_federated_identity_credential\"<\/span> <span class=\"s2\">\"example\"<\/span> <span class=\"p\">{<\/span>\r\n  <span class=\"nx\">depends_on<\/span> <span class=\"p\">=<\/span> <span class=\"p\">[<\/span><span class=\"nx\">kubernetes_service_account<\/span><span class=\"p\">.<\/span><span class=\"nx\">example<\/span><span class=\"p\">]<\/span>\r\n\r\n  <span class=\"nx\">name<\/span>                <span class=\"p\">=<\/span> <span class=\"kd\">local<\/span><span class=\"p\">.<\/span><span class=\"nx\">federated_identity_credential_name<\/span>\r\n  <span class=\"nx\">parent_id<\/span>           <span class=\"p\">=<\/span> <span class=\"nx\">azurerm_user_assigned_identity<\/span><span class=\"p\">.<\/span><span class=\"nx\">example<\/span><span class=\"p\">.<\/span><span class=\"nx\">id<\/span>\r\n  <span class=\"nx\">resource_group_name<\/span> <span class=\"p\">=<\/span> <span class=\"nx\">azurerm_resource_group<\/span><span class=\"p\">.<\/span><span class=\"nx\">example<\/span><span class=\"p\">.<\/span><span class=\"nx\">name<\/span>\r\n  <span class=\"nx\">audience<\/span>            <span class=\"p\">=<\/span> <span class=\"p\">[<\/span><span class=\"s2\">\"api:\/\/AzureADTokenExchange\"<\/span><span class=\"p\">]<\/span>\r\n  <span class=\"nx\">issuer<\/span>              <span class=\"p\">=<\/span> <span class=\"nx\">azurerm_kubernetes_cluster<\/span><span class=\"p\">.<\/span><span class=\"nx\">example<\/span><span class=\"p\">.<\/span><span class=\"nx\">oidc_issuer_url<\/span>\r\n  <span class=\"nx\">subject<\/span>             <span class=\"p\">=<\/span> <span class=\"s2\">\"system:serviceaccount:<\/span><span class=\"k\">${<\/span><span class=\"kd\">local<\/span><span class=\"p\">.<\/span><span class=\"nx\">service_account_namespace<\/span><span class=\"k\">}<\/span><span class=\"s2\">:<\/span><span class=\"k\">${<\/span><span class=\"kd\">local<\/span><span class=\"p\">.<\/span><span class=\"nx\">service_account_name<\/span><span class=\"k\">}<\/span><span class=\"s2\">\"<\/span>\r\n<span class=\"p\">}<\/span>\r\n\r\n<span class=\"c1\"># \u30c6\u30b9\u30c8\u7528\u306eKubernetes Pod\u3092\u4f5c\u6210<\/span>\r\n<span class=\"k\">resource<\/span> <span class=\"s2\">\"kubernetes_pod\"<\/span> <span class=\"s2\">\"example\"<\/span> <span class=\"p\">{<\/span>\r\n  <span class=\"nx\">depends_on<\/span> <span class=\"p\">=<\/span> <span class=\"p\">[<\/span><span class=\"nx\">azurerm_federated_identity_credential<\/span><span class=\"p\">.<\/span><span class=\"nx\">example<\/span><span class=\"p\">]<\/span>\r\n\r\n  <span class=\"nx\">metadata<\/span> <span class=\"p\">{<\/span>\r\n    <span class=\"nx\">name<\/span>      <span class=\"p\">=<\/span> <span class=\"kd\">local<\/span><span class=\"p\">.<\/span><span class=\"nx\">kubernetes_pod_name<\/span>\r\n    <span class=\"nx\">namespace<\/span> <span class=\"p\">=<\/span> <span class=\"kd\">local<\/span><span class=\"p\">.<\/span><span class=\"nx\">service_account_namespace<\/span>\r\n    <span class=\"nx\">labels<\/span> <span class=\"p\">=<\/span> <span class=\"p\">{<\/span>\r\n      <span class=\"s2\">\"azure.workload.identity\/use\"<\/span> <span class=\"p\">=<\/span> <span class=\"s2\">\"true\"<\/span>\r\n    <span class=\"p\">}<\/span>\r\n  <span class=\"p\">}<\/span>\r\n\r\n  <span class=\"nx\">spec<\/span> <span class=\"p\">{<\/span>\r\n    <span class=\"nx\">service_account_name<\/span> <span class=\"p\">=<\/span> <span class=\"kd\">local<\/span><span class=\"p\">.<\/span><span class=\"nx\">service_account_name<\/span>\r\n    <span class=\"nx\">container<\/span> <span class=\"p\">{<\/span>\r\n      <span class=\"nx\">name<\/span>    <span class=\"p\">=<\/span> <span class=\"kd\">local<\/span><span class=\"p\">.<\/span><span class=\"nx\">kubernetes_container_name<\/span>\r\n      <span class=\"nx\">image<\/span>   <span class=\"p\">=<\/span> <span class=\"s2\">\"python:3.11\"<\/span>\r\n      <span class=\"nx\">command<\/span> <span class=\"p\">=<\/span> <span class=\"p\">[<\/span><span class=\"s2\">\"sleep\"<\/span><span class=\"p\">,<\/span> <span class=\"s2\">\"3600\"<\/span><span class=\"p\">]<\/span>\r\n    <span class=\"p\">}<\/span>\r\n  <span class=\"p\">}<\/span>\r\n<span class=\"p\">}<\/span>\r\n\r\n<span class=\"c1\"># OpenAI\u30a2\u30ab\u30a6\u30f3\u30c8\u3092\u4f5c\u6210<\/span>\r\n<span class=\"k\">resource<\/span> <span class=\"s2\">\"azurerm_cognitive_account\"<\/span> <span class=\"s2\">\"example\"<\/span> <span class=\"p\">{<\/span>\r\n  <span class=\"nx\">name<\/span>                  <span class=\"p\">=<\/span> <span class=\"kd\">local<\/span><span class=\"p\">.<\/span><span class=\"nx\">openai_account_name<\/span>\r\n  <span class=\"nx\">location<\/span>              <span class=\"p\">=<\/span> <span class=\"nx\">azurerm_resource_group<\/span><span class=\"p\">.<\/span><span class=\"nx\">example<\/span><span class=\"p\">.<\/span><span class=\"nx\">location<\/span>\r\n  <span class=\"nx\">resource_group_name<\/span>   <span class=\"p\">=<\/span> <span class=\"nx\">azurerm_resource_group<\/span><span class=\"p\">.<\/span><span class=\"nx\">example<\/span><span class=\"p\">.<\/span><span class=\"nx\">name<\/span>\r\n  <span class=\"nx\">custom_subdomain_name<\/span> <span class=\"p\">=<\/span> <span class=\"kd\">local<\/span><span class=\"p\">.<\/span><span class=\"nx\">openai_account_name<\/span>\r\n\r\n  <span class=\"nx\">kind<\/span>     <span class=\"p\">=<\/span> <span class=\"s2\">\"OpenAI\"<\/span>\r\n  <span class=\"nx\">sku_name<\/span> <span class=\"p\">=<\/span> <span class=\"s2\">\"S0\"<\/span>\r\n\r\n  <span class=\"nx\">identity<\/span> <span class=\"p\">{<\/span>\r\n    <span class=\"nx\">type<\/span> <span class=\"p\">=<\/span> <span class=\"s2\">\"SystemAssigned\"<\/span>\r\n  <span class=\"p\">}<\/span>\r\n<span class=\"p\">}<\/span>\r\n\r\n<span class=\"c1\"># gpt-35-turbo(ChatGPT)\u30e2\u30c7\u30eb\u3092\u30c7\u30d7\u30ed\u30a4<\/span>\r\n<span class=\"k\">resource<\/span> <span class=\"s2\">\"azapi_resource\"<\/span> <span class=\"s2\">\"chatgpt\"<\/span> <span class=\"p\">{<\/span>\r\n  <span class=\"nx\">type<\/span>      <span class=\"p\">=<\/span> <span class=\"s2\">\"Microsoft.CognitiveServices\/accounts\/deployments@2023-05-01\"<\/span>\r\n  <span class=\"nx\">name<\/span>      <span class=\"p\">=<\/span> <span class=\"kd\">local<\/span><span class=\"p\">.<\/span><span class=\"nx\">gpt_35_turbo_deploy_name<\/span>\r\n  <span class=\"nx\">parent_id<\/span> <span class=\"p\">=<\/span> <span class=\"nx\">azurerm_cognitive_account<\/span><span class=\"p\">.<\/span><span class=\"nx\">example<\/span><span class=\"p\">.<\/span><span class=\"nx\">id<\/span>\r\n\r\n  <span class=\"nx\">body<\/span> <span class=\"p\">=<\/span> <span class=\"nx\">jsonencode<\/span><span class=\"p\">({<\/span>\r\n    <span class=\"nx\">properties<\/span> <span class=\"p\">=<\/span> <span class=\"p\">{<\/span>\r\n      <span class=\"nx\">model<\/span> <span class=\"p\">=<\/span> <span class=\"p\">{<\/span>\r\n        <span class=\"nx\">format<\/span>  <span class=\"p\">=<\/span> <span class=\"s2\">\"OpenAI\"<\/span>\r\n        <span class=\"nx\">name<\/span>    <span class=\"p\">=<\/span> <span class=\"s2\">\"gpt-35-turbo\"<\/span>\r\n        <span class=\"nx\">version<\/span> <span class=\"p\">=<\/span> <span class=\"kd\">local<\/span><span class=\"p\">.<\/span><span class=\"nx\">gpt_35_turbo_model_version<\/span>\r\n      <span class=\"p\">}<\/span>\r\n      <span class=\"nx\">versionUpgradeOption<\/span> <span class=\"p\">=<\/span> <span class=\"s2\">\"NoAutoUpgrade\"<\/span>\r\n    <span class=\"p\">}<\/span>\r\n    <span class=\"nx\">sku<\/span> <span class=\"p\">=<\/span> <span class=\"p\">{<\/span>\r\n      <span class=\"nx\">capacity<\/span> <span class=\"p\">=<\/span> <span class=\"mi\">120<\/span>\r\n      <span class=\"nx\">name<\/span>     <span class=\"p\">=<\/span> <span class=\"s2\">\"Standard\"<\/span>\r\n    <span class=\"p\">}<\/span>\r\n  <span class=\"p\">})<\/span>\r\n<span class=\"p\">}<\/span>\r\n\r\n<span class=\"c1\"># \u30e6\u30fc\u30b6\u5272\u5f53\u30de\u30cd\u30fc\u30b8\u30c9ID\u306b\u30a2\u30af\u30bb\u30b9\u6a29\u3092\u4ed8\u4e0e<\/span>\r\n<span class=\"k\">resource<\/span> <span class=\"s2\">\"azurerm_role_assignment\"<\/span> <span class=\"s2\">\"openai_role_user\"<\/span> <span class=\"p\">{<\/span>\r\n  <span class=\"nx\">scope<\/span>                <span class=\"p\">=<\/span> <span class=\"nx\">azurerm_cognitive_account<\/span><span class=\"p\">.<\/span><span class=\"nx\">example<\/span><span class=\"p\">.<\/span><span class=\"nx\">id<\/span>\r\n  <span class=\"nx\">role_definition_name<\/span> <span class=\"p\">=<\/span> <span class=\"s2\">\"Cognitive Services OpenAI User\"<\/span>\r\n  <span class=\"nx\">principal_id<\/span>         <span class=\"p\">=<\/span> <span class=\"nx\">azurerm_user_assigned_identity<\/span><span class=\"p\">.<\/span><span class=\"nx\">example<\/span><span class=\"p\">.<\/span><span class=\"nx\">principal_id<\/span>\r\n<span class=\"p\">}<\/span>\r\n<\/code><\/pre>\n<h2>\u5173\u4e8e\u5de5\u4f5c\u8d1f\u8f7dID\u7684\u914d\u7f6e\u8bbe\u5b9a<\/h2>\n<h3>\u5728Azure\u4e2d\u7684\u8bbe\u7f6e<\/h3>\n<p>\u8bf7\u5c06`azurerm_kubernetes_cluster`\u7684`oidc_issuer_enabled`\u548c`workload_identity_enabled`\u8bbe\u7f6e\u4e3a`true`\uff0c\u4ee5\u542f\u7528\u5728Terraform\u4e2d\u5de5\u4f5c\u8d1f\u8f7dID\u7684\u529f\u80fd\u3002\u63a5\u4e0b\u6765\uff0c\u9700\u8981\u8fdb\u884c\u7684\u914d\u7f6e\u662f\u8bbe\u7f6e`azurerm_federated_identity_credential`\u4f5c\u4e3a\u8054\u5408\u8eab\u4efd\u9a8c\u8bc1\u51ed\u636e\u3002\u901a\u8fc7\u6b64\u914d\u7f6e\uff0c\u5c06\u5b9e\u73b0\u7528\u6237\u5206\u914d\u6258\u7ba1ID\u4e0eAKS\u548c\u670d\u52a1\u8d26\u53f7\u7684\u5173\u8054\u3002<\/p>\n<h3>Kubernetes\u8d44\u6e90\u7684\u914d\u7f6e<\/h3>\n<p>\u5728Kubernetes\u8d44\u6e90\u4e2d\uff0c\u9700\u8981\u5c06\u7528\u6237\u5206\u914d\u7684\u6258\u7ba1\u6807\u8bc6\u5ba2\u6237\u7aefID\u8bbe\u7f6e\u4e3a\u670d\u52a1\u8d26\u6237\uff08sa\uff09\uff0c\u5e76\u5c06\u8be5sa\u4e0ePod\u5173\u8054\u8d77\u6765\uff0c\u5c06\u6807\u7b7eazure.workload.identity\/use\u8bbe\u7f6e\u4e3atrue\u3002\u8fd9\u6837\uff0c\u5728\u90e8\u7f72Pod\u65f6\u5c06\u6ce8\u5165\u6240\u9700\u7684\u4f7f\u7528\u5de5\u4f5c\u8d1f\u8f7dID\u8fdb\u884c\u8eab\u4efd\u9a8c\u8bc1\u7684\u914d\u7f6e\u3002\u6709\u5173\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605\u4e0b\u6587\u7684&#8221;\u5173\u4e8e\u8eab\u4efd\u9a8c\u8bc1\u6d41\u7a0b&#8221;\u3002<\/p>\n<h2>\u901a\u8fc7\u793a\u4f8b\u5e94\u7528\u7a0b\u5e8f\u5bf9\u5de5\u4f5c\u8d1f\u8f7dID\u8fdb\u884c\u8ba4\u8bc1\u7684\u793a\u4f8b<\/h2>\n<p>\u63a5\u4e0b\u6765\uff0c\u8bf7\u5728Azure Cloud Shell\u4e2d\u6267\u884c\u4ee5\u4e0b\u547d\u4ee4\u5e76\u8fdb\u5165Pod\u3002<\/p>\n<pre class=\"post-pre\"><code>kubectl <span class=\"nb\">exec<\/span> <span class=\"nt\">-it<\/span> test-pod <span class=\"nt\">--<\/span> \/bin\/bash\r\n<\/code><\/pre>\n<p>\u8fdb\u5165Pod\u4e4b\u540e\uff0c\u8bf7\u4f7f\u7528pip\u5b89\u88c5\u6240\u9700\u7684\u5e93\uff0c\u5e76\u4f7f\u7528apt\u5b89\u88c5\u7f16\u8f91\u5668\uff08\u5982vi\u7b49\uff09\u3002<\/p>\n<pre class=\"post-pre\"><code>pip <span class=\"nb\">install <\/span>azure-identity openai\r\napt <span class=\"nb\">install <\/span>vi\r\n<\/code><\/pre>\n<p>\u8bf7\u4f7f\u7528\u5b89\u88c5\u7684\u7f16\u8f91\u5668\u5c06\u4ee5\u4e0bPython\u4ee3\u7801\u4fdd\u5b58\u4e0b\u6765\u3002<br \/>\n\u5982\u679c\u60a8\u5728terraform\u4e2d\u66f4\u6539\u4e86OpenAI\u8d44\u6e90\u540d\u79f0\uff0c\u8bf7\u5c06\u7b2c6\u884c\u4e0a\u9762\u7684&#8221;example-openai&#8221;\u66f4\u6539\u4e3a\u60a8\u66f4\u6539\u7684\u8d44\u6e90\u540d\u79f0\uff1b\u5982\u679c\u60a8\u66f4\u6539\u4e86OpenAI\u7684\u90e8\u7f72\u540d\u79f0\uff0c\u8bf7\u5c06\u7b2c12\u884c\u7684engine=&#8221;&lt;\u90e8\u7f72\u540d\u79f0&gt;&#8221;\u4fee\u6539\u4e3a\u60a8\u66f4\u6539\u7684\u540d\u79f0\u3002<br \/>\n\u8fd0\u884c\u6b64Python\u4ee3\u7801\u540e\uff0c\u5c06\u81ea\u52a8\u4f7f\u7528\u5de5\u4f5c\u8d1f\u8f7dID\u8fdb\u884c\u8eab\u4efd\u9a8c\u8bc1\uff0c\u5e76\u4eceAzure OpenAI\u670d\u52a1\u83b7\u53d6\u5230\u54cd\u5e94\u3002<br \/>\n\u5982\u60a8\u6240\u89c1\uff0c\u4ee3\u7801\u4e2d\u65e0\u9700\u8fdb\u884c\u5de5\u4f5c\u8d1f\u8f7dID\u7684\u4efb\u4f55\u8bf4\u660e\uff0c\u5168\u90e8\u7531DefaultAzureCredential\u5904\u7406\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"kn\">import<\/span> <span class=\"n\">openai<\/span>\r\n<span class=\"kn\">from<\/span> <span class=\"n\">azure.identity<\/span> <span class=\"kn\">import<\/span> <span class=\"n\">DefaultAzureCredential<\/span>\r\n\r\n<span class=\"n\">default_credential<\/span> <span class=\"o\">=<\/span> <span class=\"nc\">DefaultAzureCredential<\/span><span class=\"p\">()<\/span>\r\n\r\n<span class=\"n\">openai<\/span><span class=\"p\">.<\/span><span class=\"n\">api_base<\/span> <span class=\"o\">=<\/span> <span class=\"sh\">\"<\/span><span class=\"s\">https:\/\/example-openai.openai.azure.com\/<\/span><span class=\"sh\">\"<\/span>\r\n<span class=\"n\">openai<\/span><span class=\"p\">.<\/span><span class=\"n\">api_version<\/span> <span class=\"o\">=<\/span> <span class=\"sh\">\"<\/span><span class=\"s\">2023-05-15<\/span><span class=\"sh\">\"<\/span>\r\n<span class=\"n\">openai<\/span><span class=\"p\">.<\/span><span class=\"n\">api_type<\/span> <span class=\"o\">=<\/span> <span class=\"sh\">\"<\/span><span class=\"s\">azure_ad<\/span><span class=\"sh\">\"<\/span>\r\n<span class=\"n\">openai<\/span><span class=\"p\">.<\/span><span class=\"n\">api_key<\/span> <span class=\"o\">=<\/span> <span class=\"n\">default_credential<\/span><span class=\"p\">.<\/span><span class=\"nf\">get_token<\/span><span class=\"p\">(<\/span><span class=\"sh\">\"<\/span><span class=\"s\">https:\/\/cognitiveservices.azure.com\/.default<\/span><span class=\"sh\">\"<\/span><span class=\"p\">).<\/span><span class=\"n\">token<\/span>\r\n\r\n<span class=\"n\">response<\/span> <span class=\"o\">=<\/span> <span class=\"n\">openai<\/span><span class=\"p\">.<\/span><span class=\"n\">ChatCompletion<\/span><span class=\"p\">.<\/span><span class=\"nf\">create<\/span><span class=\"p\">(<\/span>\r\n    <span class=\"n\">engine<\/span><span class=\"o\">=<\/span><span class=\"sh\">\"<\/span><span class=\"s\">chatgpt<\/span><span class=\"sh\">\"<\/span><span class=\"p\">,<\/span>\r\n    <span class=\"n\">messages<\/span><span class=\"o\">=<\/span><span class=\"p\">[<\/span>\r\n        <span class=\"p\">{<\/span><span class=\"sh\">\"<\/span><span class=\"s\">role<\/span><span class=\"sh\">\"<\/span><span class=\"p\">:<\/span> <span class=\"sh\">\"<\/span><span class=\"s\">user<\/span><span class=\"sh\">\"<\/span><span class=\"p\">,<\/span> <span class=\"sh\">\"<\/span><span class=\"s\">content<\/span><span class=\"sh\">\"<\/span><span class=\"p\">:<\/span> <span class=\"sh\">\"<\/span><span class=\"s\">\u3053\u3093\u306b\u3061\u306f\uff01<\/span><span class=\"sh\">\"<\/span><span class=\"p\">},<\/span>\r\n    <span class=\"p\">],<\/span>\r\n<span class=\"p\">)<\/span>\r\n\r\n<span class=\"nf\">print<\/span><span class=\"p\">(<\/span><span class=\"n\">response<\/span><span class=\"p\">.<\/span><span class=\"n\">choices<\/span><span class=\"p\">[<\/span><span class=\"mi\">0<\/span><span class=\"p\">].<\/span><span class=\"n\">message<\/span><span class=\"p\">.<\/span><span class=\"n\">content<\/span><span class=\"p\">)<\/span>\r\n<\/code><\/pre>\n<h2>\u6709\u5173\u8ba4\u8bc1\u6d41\u7a0b<\/h2>\n<p>\u4f7f\u7528\u5de5\u4f5c\u8d1f\u8f7dID\u8fdb\u884c\u8eab\u4efd\u9a8c\u8bc1\u7684\u6d41\u7a0b\u5982\u4e0b\uff1a<br \/>\n\u5f53\u5c06\u524d\u8ff0\u7684oidc_issuer_enabled\u8bbe\u7f6e\u4e3atrue\u65f6\uff0cOIDC Provider URL\u5c06\u88ab\u516c\u5f00\uff0c\u4ece\u800c\u53ef\u4ee5\u4e0eAzureAD\u8fdb\u884c\u96c6\u6210\u3002<br \/>\n\u4e00\u65e6\u542f\u7528OIDC Issuer\uff0c\u5c31\u65e0\u6cd5\u7981\u7528\u5b83\u3002\u8981\u7981\u7528\u5b83\uff0c\u9700\u8981\u91cd\u65b0\u521b\u5efa\u96c6\u7fa4\u3002<br \/>\n\u53e6\u5916\uff0c\u5c06workload_identity_enabled\u8bbe\u7f6e\u4e3atrue\u65f6\uff0c\u5bf9\u4e8e\u6807\u7b7e\u4e2dazure.workload.identity\/use\u4e3atrue\u7684Pod\uff0c\u5c06\u6ce8\u5165\u6240\u9700\u7684\u5de5\u4f5c\u8d1f\u8f7dID\u8bbe\u7f6e\u3002<br \/>\n\u6ce8\u5165\u5c06\u4ec5\u5728\u521b\u5efaPod\u65f6\u6267\u884c\uff0c\u6240\u4ee5\u8981\u8fdb\u884c\u4fee\u6539\u8bf7\u91cd\u65b0\u521b\u5efaPod\u672c\u8eab\u3002<\/p>\n<div><img decoding=\"async\" class=\"post-images\" title=\"\" src=\"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d238537434c4406c2b0e1\/28-0.png\" alt=\"\u30ef\u30fc\u30af\u30ed\u30fc\u30c9ID \u8a8d\u8a3c\u6982\u8981\" \/><\/div>\n<p>\u8bf7\u67e5\u9605\u4ee5\u4e0b\u5b98\u65b9\u6587\u6863\u4ee5\u83b7\u53d6\u6709\u5173\u8ba4\u8bc1\u6d41\u7a0b\u7684\u8be6\u7ec6\u4fe1\u606f\u3002<\/p>\n<ul class=\"post-ul\">Azure Kubernetes Service (AKS) \u3067 Azure AD \u30ef\u30fc\u30af\u30ed\u30fc\u30c9 ID \u3092\u4f7f\u7528\u3059\u308b &#8211; Azure Kubernetes Service<\/ul>\n<p>\u53e6\u5916\uff0c\u5728\u5236\u4f5c\u4e0a\u8ff0\u56fe\u8868\u65f6\uff0c\u6211\u4eec\u8fd8\u53c2\u8003\u4e86\u4ee5\u4e0b\u7f51\u7ad9\u3002<\/p>\n<ul class=\"post-ul\">\n<li style=\"list-style-type: none;\">\n<ul class=\"post-ul\">Lab &#8211; Workload Identity<\/ul>\n<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul class=\"post-ul\">Connect your Kubernetes application to your database without any credentials (and securely) &#8211; Alexis Plantin &#8211; Blog<\/ul>\n<h2>\u6700\u540e<\/h2>\n<p>\u60a8\u8ba4\u4e3a\u600e\u6837\uff1f\u7531\u4e8e\u5728\u5b98\u65b9\u6587\u6863\u4e2d\u4ece\u8ba4\u8bc1\u6d41\u7a0b\u4e2d\u63cf\u8ff0\uff0c\u53ef\u80fd\u4f1a\u8ba9\u4eba\u611f\u89c9\u6709\u4e9b\u96be\u4ee5\u7406\u89e3\uff0c\u4f46\u662f\u4e00\u65e6\u4e86\u89e3\u4e86\u8bbe\u7f6e\uff0c\u6211\u89c9\u5f97\u5e76\u4e0d\u662f\u5f88\u56f0\u96be\u3002<br \/>\n\u540c\u65f6\uff0c\u5982\u679c\u60a8\u4f7f\u7528Azure Identity\u7684DefaultAzureCredential\u8fdb\u884c\u8ba4\u8bc1\uff0c\u90a3\u4e48\u5728\u4e0d\u5bf9\u73b0\u6709\u4ee3\u7801\u8fdb\u884c\u66f4\u6539\u7684\u60c5\u51b5\u4e0b\uff0c\u53ef\u4ee5\u5c06\u5de5\u4f5c\u8d1f\u8f7d\u8fc1\u79fb\u5230\u5de5\u4f5c\u6807\u8bc6\u4e2d\u3002\u6211\u8ba4\u4e3a\u60a8\u5df2\u7ecf\u77e5\u9053\u4e86\u8fd9\u4e00\u70b9\u3002<br \/>\n\u7279\u522b\u662f\u6b63\u5982\u60a8\u4e4b\u524d\u63d0\u5230\u7684\u90a3\u6837\uff0c\u968f\u7740\u65e5\u76ca\u589e\u52a0\u7684\u5bc6\u94a5\u548c\u5bc6\u7801\u6cc4\u6f0f\u98ce\u9669\uff0c\u6211\u611f\u89c9\u5230\u60a8\u6709\u5fc5\u8981\u8003\u8651\u8fc1\u79fb\uff0c\u5982\u679c\u60a8\u6b63\u5728\u4f7f\u7528\u5bc6\u94a5\u6216\u5bc6\u7801\uff0c\u8bf7\u52a1\u5fc5\u8003\u8651\u8fc1\u79fb\u3002<\/p>\n<h2>\u8bf7\u63d0\u4f9b\u66f4\u591a\u4e0a\u4e0b\u6587\u4fe1\u606f\u3002&#8221;\u53c2\u8003&#8221;\u548c&#8221;\u8a18\u4e8b&#8221;\u4e4b\u95f4\u662f\u5426\u6709\u5173\u8054\u6027\uff1f\u8fd8\u6709\u5176\u4ed6\u76f8\u5173\u7684\u5185\u5bb9\u5417\uff1f<\/h2>\n<ul class=\"post-ul\">\n<li style=\"list-style-type: none;\">\n<ul class=\"post-ul\">\u30ef\u30fc\u30af\u30ed\u30fc\u30c9 ID \u3092\u4f7f\u7528\u3057\u3066 Azure Kubernetes Service (AKS) \u30af\u30e9\u30b9\u30bf\u30fc\u3092\u30c7\u30d7\u30ed\u30a4\u3057\u3066\u69cb\u6210\u3059\u308b &#8211; Azure Kubernetes Service<\/ul>\n<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul class=\"post-ul\">Azure Kubernetes Service \u3067Azure AD \u30ef\u30fc\u30af\u30ed\u30fc\u30c9 ID\u3092\u4f7f\u3063\u3066\u307f\u305f &#8211; APC \u6280\u8853\u30d6\u30ed\u30b0<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>\u9996\u5148 \u5728AKS\u4e0a\u8fd0\u884c\u7684\u5e94\u7528\u7a0b\u5e8f\u548c\u5404\u4e2aAzure\u670d\u52a1\u4e4b\u95f4\u7684\u8ba4\u8bc1\u662f\u5982\u4f55\u8fdb\u884c\u7684\u5462\uff1f\u7279\u522b\u662f\u5728\u914d\u7f6eGitOps\u65f6\uff0c\u4f7f\u7528\u5bc6 [&hellip;]<\/p>\n","protected":false},"author":6,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-35487","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v21.5 (Yoast SEO v21.5) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>\u4f7f\u7528terraform\u6784\u5efa\u548c\u914d\u7f6eAKS\u5de5\u4f5c\u8d1f\u8f7dID\u73af\u5883\u7684\u793a\u4f8b\uff0c\u4ee5Azure OpenAI\u4e3a\u4f8b - Blog - Silicon Cloud<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.silicloud.com\/zh\/blog\/\u4f7f\u7528terraform\u6784\u5efa\u548c\u914d\u7f6eaks\u5de5\u4f5c\u8d1f\u8f7did\u73af\u5883\u7684\u793a\u4f8b\uff0c\u4ee5azure-openai\u4e3a\/\" \/>\n<meta property=\"og:locale\" content=\"zh_CN\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"\u4f7f\u7528terraform\u6784\u5efa\u548c\u914d\u7f6eAKS\u5de5\u4f5c\u8d1f\u8f7dID\u73af\u5883\u7684\u793a\u4f8b\uff0c\u4ee5Azure OpenAI\u4e3a\u4f8b\" \/>\n<meta property=\"og:description\" content=\"\u9996\u5148 \u5728AKS\u4e0a\u8fd0\u884c\u7684\u5e94\u7528\u7a0b\u5e8f\u548c\u5404\u4e2aAzure\u670d\u52a1\u4e4b\u95f4\u7684\u8ba4\u8bc1\u662f\u5982\u4f55\u8fdb\u884c\u7684\u5462\uff1f\u7279\u522b\u662f\u5728\u914d\u7f6eGitOps\u65f6\uff0c\u4f7f\u7528\u5bc6 [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.silicloud.com\/zh\/blog\/\u4f7f\u7528terraform\u6784\u5efa\u548c\u914d\u7f6eaks\u5de5\u4f5c\u8d1f\u8f7did\u73af\u5883\u7684\u793a\u4f8b\uff0c\u4ee5azure-openai\u4e3a\/\" \/>\n<meta property=\"og:site_name\" content=\"Blog - Silicon Cloud\" \/>\n<meta property=\"article:published_time\" content=\"2023-02-17T07:21:51+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-04-29T08:33:28+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d238537434c4406c2b0e1\/8-0.png\" \/>\n<meta name=\"author\" content=\"\u6587, \u7fd4\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u4f5c\u8005\" \/>\n\t<meta name=\"twitter:data1\" content=\"\u6587, \u7fd4\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 \u5206\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8terraform%e6%9e%84%e5%bb%ba%e5%92%8c%e9%85%8d%e7%bd%aeaks%e5%b7%a5%e4%bd%9c%e8%b4%9f%e8%bd%bdid%e7%8e%af%e5%a2%83%e7%9a%84%e7%a4%ba%e4%be%8b%ef%bc%8c%e4%bb%a5azure-openai%e4%b8%ba\/\",\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8terraform%e6%9e%84%e5%bb%ba%e5%92%8c%e9%85%8d%e7%bd%aeaks%e5%b7%a5%e4%bd%9c%e8%b4%9f%e8%bd%bdid%e7%8e%af%e5%a2%83%e7%9a%84%e7%a4%ba%e4%be%8b%ef%bc%8c%e4%bb%a5azure-openai%e4%b8%ba\/\",\"name\":\"\u4f7f\u7528terraform\u6784\u5efa\u548c\u914d\u7f6eAKS\u5de5\u4f5c\u8d1f\u8f7dID\u73af\u5883\u7684\u793a\u4f8b\uff0c\u4ee5Azure OpenAI\u4e3a\u4f8b - Blog - Silicon Cloud\",\"isPartOf\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#website\"},\"datePublished\":\"2023-02-17T07:21:51+00:00\",\"dateModified\":\"2024-04-29T08:33:28+00:00\",\"author\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/64d5cc7727fffbff2f9a2a8da1de3e5c\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8terraform%e6%9e%84%e5%bb%ba%e5%92%8c%e9%85%8d%e7%bd%aeaks%e5%b7%a5%e4%bd%9c%e8%b4%9f%e8%bd%bdid%e7%8e%af%e5%a2%83%e7%9a%84%e7%a4%ba%e4%be%8b%ef%bc%8c%e4%bb%a5azure-openai%e4%b8%ba\/#breadcrumb\"},\"inLanguage\":\"zh-Hans\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8terraform%e6%9e%84%e5%bb%ba%e5%92%8c%e9%85%8d%e7%bd%aeaks%e5%b7%a5%e4%bd%9c%e8%b4%9f%e8%bd%bdid%e7%8e%af%e5%a2%83%e7%9a%84%e7%a4%ba%e4%be%8b%ef%bc%8c%e4%bb%a5azure-openai%e4%b8%ba\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8terraform%e6%9e%84%e5%bb%ba%e5%92%8c%e9%85%8d%e7%bd%aeaks%e5%b7%a5%e4%bd%9c%e8%b4%9f%e8%bd%bdid%e7%8e%af%e5%a2%83%e7%9a%84%e7%a4%ba%e4%be%8b%ef%bc%8c%e4%bb%a5azure-openai%e4%b8%ba\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u9996\u9875\",\"item\":\"https:\/\/www.silicloud.com\/zh\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"\u4f7f\u7528terraform\u6784\u5efa\u548c\u914d\u7f6eAKS\u5de5\u4f5c\u8d1f\u8f7dID\u73af\u5883\u7684\u793a\u4f8b\uff0c\u4ee5Azure OpenAI\u4e3a\u4f8b\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#website\",\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/\",\"name\":\"Blog - Silicon Cloud\",\"description\":\"\",\"inLanguage\":\"zh-Hans\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/64d5cc7727fffbff2f9a2a8da1de3e5c\",\"name\":\"\u6587, \u7fd4\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/920c3d673e0bccacc98e5e6b7149bb3c22edd8d39cb753e5d7d7e471498118a1?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/920c3d673e0bccacc98e5e6b7149bb3c22edd8d39cb753e5d7d7e471498118a1?s=96&d=mm&r=g\",\"caption\":\"\u6587, \u7fd4\"},\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/author\/wenxiang\/\"},{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8terraform%e6%9e%84%e5%bb%ba%e5%92%8c%e9%85%8d%e7%bd%aeaks%e5%b7%a5%e4%bd%9c%e8%b4%9f%e8%bd%bdid%e7%8e%af%e5%a2%83%e7%9a%84%e7%a4%ba%e4%be%8b%ef%bc%8c%e4%bb%a5azure-openai%e4%b8%ba\/#local-main-organization-logo\",\"url\":\"\",\"contentUrl\":\"\",\"caption\":\"Blog - Silicon Cloud\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"\u4f7f\u7528terraform\u6784\u5efa\u548c\u914d\u7f6eAKS\u5de5\u4f5c\u8d1f\u8f7dID\u73af\u5883\u7684\u793a\u4f8b\uff0c\u4ee5Azure OpenAI\u4e3a\u4f8b - Blog - Silicon Cloud","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.silicloud.com\/zh\/blog\/\u4f7f\u7528terraform\u6784\u5efa\u548c\u914d\u7f6eaks\u5de5\u4f5c\u8d1f\u8f7did\u73af\u5883\u7684\u793a\u4f8b\uff0c\u4ee5azure-openai\u4e3a\/","og_locale":"zh_CN","og_type":"article","og_title":"\u4f7f\u7528terraform\u6784\u5efa\u548c\u914d\u7f6eAKS\u5de5\u4f5c\u8d1f\u8f7dID\u73af\u5883\u7684\u793a\u4f8b\uff0c\u4ee5Azure OpenAI\u4e3a\u4f8b","og_description":"\u9996\u5148 \u5728AKS\u4e0a\u8fd0\u884c\u7684\u5e94\u7528\u7a0b\u5e8f\u548c\u5404\u4e2aAzure\u670d\u52a1\u4e4b\u95f4\u7684\u8ba4\u8bc1\u662f\u5982\u4f55\u8fdb\u884c\u7684\u5462\uff1f\u7279\u522b\u662f\u5728\u914d\u7f6eGitOps\u65f6\uff0c\u4f7f\u7528\u5bc6 [&hellip;]","og_url":"https:\/\/www.silicloud.com\/zh\/blog\/\u4f7f\u7528terraform\u6784\u5efa\u548c\u914d\u7f6eaks\u5de5\u4f5c\u8d1f\u8f7did\u73af\u5883\u7684\u793a\u4f8b\uff0c\u4ee5azure-openai\u4e3a\/","og_site_name":"Blog - Silicon Cloud","article_published_time":"2023-02-17T07:21:51+00:00","article_modified_time":"2024-04-29T08:33:28+00:00","og_image":[{"url":"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d238537434c4406c2b0e1\/8-0.png"}],"author":"\u6587, \u7fd4","twitter_card":"summary_large_image","twitter_misc":{"\u4f5c\u8005":"\u6587, \u7fd4","\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4":"4 \u5206"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8terraform%e6%9e%84%e5%bb%ba%e5%92%8c%e9%85%8d%e7%bd%aeaks%e5%b7%a5%e4%bd%9c%e8%b4%9f%e8%bd%bdid%e7%8e%af%e5%a2%83%e7%9a%84%e7%a4%ba%e4%be%8b%ef%bc%8c%e4%bb%a5azure-openai%e4%b8%ba\/","url":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8terraform%e6%9e%84%e5%bb%ba%e5%92%8c%e9%85%8d%e7%bd%aeaks%e5%b7%a5%e4%bd%9c%e8%b4%9f%e8%bd%bdid%e7%8e%af%e5%a2%83%e7%9a%84%e7%a4%ba%e4%be%8b%ef%bc%8c%e4%bb%a5azure-openai%e4%b8%ba\/","name":"\u4f7f\u7528terraform\u6784\u5efa\u548c\u914d\u7f6eAKS\u5de5\u4f5c\u8d1f\u8f7dID\u73af\u5883\u7684\u793a\u4f8b\uff0c\u4ee5Azure OpenAI\u4e3a\u4f8b - Blog - Silicon Cloud","isPartOf":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/#website"},"datePublished":"2023-02-17T07:21:51+00:00","dateModified":"2024-04-29T08:33:28+00:00","author":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/64d5cc7727fffbff2f9a2a8da1de3e5c"},"breadcrumb":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8terraform%e6%9e%84%e5%bb%ba%e5%92%8c%e9%85%8d%e7%bd%aeaks%e5%b7%a5%e4%bd%9c%e8%b4%9f%e8%bd%bdid%e7%8e%af%e5%a2%83%e7%9a%84%e7%a4%ba%e4%be%8b%ef%bc%8c%e4%bb%a5azure-openai%e4%b8%ba\/#breadcrumb"},"inLanguage":"zh-Hans","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8terraform%e6%9e%84%e5%bb%ba%e5%92%8c%e9%85%8d%e7%bd%aeaks%e5%b7%a5%e4%bd%9c%e8%b4%9f%e8%bd%bdid%e7%8e%af%e5%a2%83%e7%9a%84%e7%a4%ba%e4%be%8b%ef%bc%8c%e4%bb%a5azure-openai%e4%b8%ba\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8terraform%e6%9e%84%e5%bb%ba%e5%92%8c%e9%85%8d%e7%bd%aeaks%e5%b7%a5%e4%bd%9c%e8%b4%9f%e8%bd%bdid%e7%8e%af%e5%a2%83%e7%9a%84%e7%a4%ba%e4%be%8b%ef%bc%8c%e4%bb%a5azure-openai%e4%b8%ba\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u9996\u9875","item":"https:\/\/www.silicloud.com\/zh\/blog\/"},{"@type":"ListItem","position":2,"name":"\u4f7f\u7528terraform\u6784\u5efa\u548c\u914d\u7f6eAKS\u5de5\u4f5c\u8d1f\u8f7dID\u73af\u5883\u7684\u793a\u4f8b\uff0c\u4ee5Azure OpenAI\u4e3a\u4f8b"}]},{"@type":"WebSite","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#website","url":"https:\/\/www.silicloud.com\/zh\/blog\/","name":"Blog - Silicon Cloud","description":"","inLanguage":"zh-Hans"},{"@type":"Person","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/64d5cc7727fffbff2f9a2a8da1de3e5c","name":"\u6587, \u7fd4","image":{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/920c3d673e0bccacc98e5e6b7149bb3c22edd8d39cb753e5d7d7e471498118a1?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/920c3d673e0bccacc98e5e6b7149bb3c22edd8d39cb753e5d7d7e471498118a1?s=96&d=mm&r=g","caption":"\u6587, \u7fd4"},"url":"https:\/\/www.silicloud.com\/zh\/blog\/author\/wenxiang\/"},{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8terraform%e6%9e%84%e5%bb%ba%e5%92%8c%e9%85%8d%e7%bd%aeaks%e5%b7%a5%e4%bd%9c%e8%b4%9f%e8%bd%bdid%e7%8e%af%e5%a2%83%e7%9a%84%e7%a4%ba%e4%be%8b%ef%bc%8c%e4%bb%a5azure-openai%e4%b8%ba\/#local-main-organization-logo","url":"","contentUrl":"","caption":"Blog - Silicon Cloud"}]}},"_links":{"self":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/35487","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/comments?post=35487"}],"version-history":[{"count":2,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/35487\/revisions"}],"predecessor-version":[{"id":86389,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/35487\/revisions\/86389"}],"wp:attachment":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/media?parent=35487"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/categories?post=35487"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/tags?post=35487"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}