AKS Deployment in Azure Stack Hub - Service principal identity (SPN)

[zohebs341]

Hi Team,

I am planning to deploy the k8s cluster using the AKS engine in Azure Stack Hub. In order to deploy the cluster, we need Service Principal details. My question is, can I create it using the below command and use it in the cluster creation process? How can I renew it in the future as the validation will be one year for that secret?

az ad sp create-for-rbac --name azurestack-aks-sp --query password -o tsv ----> It will be valid for 1 year, how about renewal?

As in documentation, it has been said that if the secret is expired then the cluster will not be operational/functional. Or do I need to contact the Azure Stack Hub cloud operator to provide Service Principal name/secret details by adding it to a contributor role at the subscription level?