search

Azure / AML-Kubernetes

AzureML customer managed k8s compute samples
MIT License
80 stars 33 forks source link

Update on ml extension with Azure AD and without local accounts availability #275

Open RoFz opened 1 year ago

RoFz commented 1 year ago

Hi,

would you be able to share an update on the status of the latest extension version that supports Azure AD and, most importantly, does not have the local accounts enabled as a requirement, please?

Reference: https://github.com/Azure/AML-Kubernetes/issues/261

Cheers, Rofz

jiaochenlu commented 1 year ago

Hi @RoFz, it will be able to provide public preview at the beginning of February, now it still in private preview stage, if you are interested to participate the private preview, please submit this form to request the whitelist. We'll get back to you once the whitelist finished, while sharing the guideline with you.

jiaochenlu commented 1 year ago

Hi @RoFz, want to update with you that your subscritption has been whitelisted, you can run this command "az aks trustedaccess role list --location " under your sub to check. Then you can follow this doc to try out the preview feature.

RoFz commented 1 year ago

Hi @jiaochenlu, I'm resuming this effort today and while reinstalling the extension I noticed that the version I got was:

"currentVersion": "1.1.26"

Is this the extension version the one that does not requires local accounts enabled at the cluster? Or, is it the case that with Trusted Access installed, this azureml extension is not needed any longer? I'm a bit lost here.

Any clarification would be greatly appreciated.

Cheers

jiaochenlu commented 1 year ago

Hi @RoFz , the version 1.1.26 you installed is our latest extension release, if your didn't specify version when install extension, will install the latest one by default. However, to use the local account enabled AKS in aml, as long as you follow the doc to install the Trusted Access role binding in AKS which with local accounts enabled, then re-attach it to the workspace. This has nothing to do with the extension version, all extension versions support Trust access.