ContainerService: podIdentityProfile can't be specified at creation

[mikhailshilkov]

When I try to create a managed AKS cluster with podIdentityProfile enabled, I get the following error:

Code="PodIdentityAddonUserAssignedIdentitiesNotAllowedInCreation" Message="PodIdentity addon does not support assigning pod identities on creation."

However, nothing in the specification that acknowledges this behavior. Suggested fixes:

• (ideally) Fix the API to allow specifying podIdentityProfiles properties at the creation time
• (for now) Mark podIdentityProfile with x-ms-mutability: [update, read]

Thanks for the feedback! We are routing this to the appropriate team for follow-up. cc @Azure/aks-pm.

Issue Details

---

When I try to create a managed AKS cluster with podIdentityProfile enabled, I get the following error:

Code="PodIdentityAddonUserAssignedIdentitiesNotAllowedInCreation" Message="PodIdentity addon does not support assigning pod identities on creation."

However, nothing in the specification that acknowledges this behavior. Suggested fixes:

• (ideally) Fix the API to allow specifying podIdentityProfiles properties at the creation time
• (for now) Mark podIdentityProfile with x-ms-mutability: [update, read]

Author:	mikhailshilkov
Assignees:	zhenglaizhang, leni-msft
Labels:	AKS, Service Attention, needs-triage, question
Milestone:	-