export APPDEV_ID=$(az ad group create --display-name appdev --mail-nickname appdev --query objectId -o tsv)
 
export OPSSRE_ID=$(az ad group create --display-name opssre --mail-nickname opssre --query objectId -o tsv)
 
az role assignment create --assignee $APPDEV_ID --role "Azure Kubernetes Service Cluster User Role" --scope $AKS_ID
 
az role assignment create --assignee $OPSSRE_ID --role "Azure Kubernetes Service Cluster User Role" --scope $AKS_ID
 
export AAD_DEV_UPN=aks-dev
export AAD_DEV_PW=aks-dev
az ad user create --display-name "AKS Dev" --user-principal-name $AAD_DEV_UPN --password $AAD_DEV_PW
 
export RESOURCE_GROUP="teamResources"
export IDENTITY_RESOURCE_GROUP=$RESOURCE_GROUP
export IDENTITY_NAME="key-vault-user"
export CLUSTER_NAME="open-hack-containers-v4"
 
export POD_IDENTITY_NAME="key-vault-user-pod-identity"
export POD_IDENTITY_NAMESPACE="tripinsights"
 
az aks pod-identity add --resource-group $RESOURCE_GROUP --cluster-name $CLUSTER_NAME --namespace ${POD_IDENTITY_NAMESPACE} --name ${POD_IDENTITY_NAME} --identity-resource-id ${IDENTITY_RESOURCE_ID}
 
export PROJECT_NAMESPACE=tripinsights
helm install ingress-nginx ingress-nginx/ingress-nginx \
 --create-namespace \
 --namespace $PROJECT_NAMESPACE \
 --set controller.service.annotations."service\.beta\.kubernetes\.io/azure-load-balancer-health-probe-request-path"=/healthz