No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.

Pulumi Community

run az login before you run pulumi up and follow the instructions

And I’d like to get kubeconfig from AKS 

```{
  "environmentName": "AzureCloud",
  "homeTenantId": "xxxxxxxxxx",
  "id": "xxxxxxxx",
  "isDefault": true,
  "managedByTenants": [],
  "name": "AAAAA",
  "state": "Enabled",
  "tenantId": "xxxxxx",
  "user": {
    "name": "sergiii",
    "type": "user"
  }
}```

do you have any env vars set which might be overriding that? check `env | grep -i azure`

I have other clusters in my local kubeconfig

i just ran something like your code without any issues, there has to be something locally that's upsetting the auth process

Thanks. Looks like something with provider
```const devsGroupRole = new k8s.rbac.v1.Role("pulumi-devs",{...},{provider: aksProvider})```


if you comment that out, does everything work?

Looks like provider is added successful
``` const aksProvider = new k8s.Provider("aks", {
  kubeconfig: kubeconfig
})```

Once I added a Role - got `To sign in, use a web browser to open the page`

i would remove this:
`const devsGroupRole = new k8s.rbac.v1.Role("pulumi-devs",{...})`

and then export your kubeconfig:

```export const kubeconfig = encoded.apply(enc =&gt; Buffer.from(enc, "base64").toString());```
Then do `pulumi stack output kubeconfig` and examine what's there

have a valid config in output
```apiVersion: v1
clusters:
- cluster:
    certificate-authority-data: CERT
    server: <https://api:443>
  name: dev
contexts:
- context:
    cluster: dev
    user: clusterUser_aks_dev
  name: dev
current-context: dev
kind: Config
preferences: {}
users:
- name: clusterUser_aks-dev
    auth-provider:
      config:
        apiserver-id:cccc
        client-id: xxxx
        config-mode: "1"
        environment: AzurePublicCloud
        tenant-id: cccc
      name: azure```

but once i’m trying to run `pulumi up` without update got auth message

if you set the `kubeconfig` up to and run `kubectl` does it work?

Oh, looks like it comes from config
```pulumi stack output kubeconfig --show-secrets &gt; kubeconfig.yaml
➜  pulumi-aks git:(poc) ✗ KUBECONFIG=./kubeconfig.yaml kubectl get nodes
To sign in, use a web browser to open the page <https://microsoft.com/devicelogin> and enter the code XXXXXX to authenticate.```

yeah that's what I've been trying to say :slightly_smiling_face: your environment isn't set up correctly to auth with a kubeconfig

Thank you much!
wondering hw to setup it now