az aks get-credentials --format "exec" default to azurecli?

[ehrnst]

Related command
az aks get-credentials --format "exec"

Is your feature request related to a problem? Please describe.

After the release of kubelogin and the deprecation of Azure credentials. I assume most people use azurecli token as their default access . Today the --format "exec" defaults to device code.
Describe the solution you'd like

Instead of being forced to do a kubeconfig convert, I would like to have azure cli as the default.

Describe alternatives you've considered

either change the --format "exec" to be azure CLI, or allow other formats so we can choose what method we want to use without the convert

[yonzhan]

route to CXP team

Thanks for the feedback! We are routing this to the appropriate team for follow-up. cc @Azure/aks-pm.

Issue Details

---

Related command
az aks get-credentials --format "exec"

Is your feature request related to a problem? Please describe.

After the release of kubelogin and the deprecation of Azure credentials. I assume most people use azurecli token as their default access . Today the --format "exec" defaults to device code.
Describe the solution you'd like

Instead of being forced to do a kubeconfig convert, I would like to have azure cli as the default.

Describe alternatives you've considered

either change the --format "exec" to be azure CLI, or allow other formats so we can choose what method we want to use without the convert

Author:	ehrnst
Assignees:	-
Labels:	Service Attention, AKS, customer-reported, needs-team-attention, feature-request, Auto-Assign
Milestone:	-

[navba-MSFT]

@Azure/aks-pm Could you please look into this request and provide some pointers ? Thanks in advance.

[huf1]

would also prefer to use "azurecli" as default or an option to provide the needed "exec" format

[bizrad]

IMO az aks get-credentials should set up the kubeconfig to use the default credentials of the already signed in azure cli. How someone logs into azure cli using az login is up to them. But I doubt anyone wants this set to device code, that should be an override option if needed.

Perhaps this should follow a similar pattern to the DefaultAzureCredential Class?

If the instructions always involve running kubelogin convert-kubeconfig -l azurecli then why not just set it up right in the first place? Adding an additional step is unintuitive.

[ehrnst]

Is this still relevant? i'm not sure if we still need to do the convert dance, or not, I just do it (hopefully) out of old habits.

[asinitson]

Just tested it on Linux (openSUSE 15.5) and by default I get devicelogin with latest Azure CLI (2.64.0) and az aks get-credentials command without any additional parameters.

By accident I got to know from a colleague that I could just use active Azure CLI token (but I am not 100% sure of behavior on macOS/Windows, I guess it is the same?). Luckily I found this bug report and found out that you need to do the convert thing.

So yeah, this issue is still relevant.