Hello! I want to attach ACR repository to a new AKS cluster. I can do that via 

cli

 using 

--attach-acr <acr_name>

 (ex. 

az aks ... create --attach-acr <acr_name>

 ) . How can I do the same via Pulumi? I haven't found anything related to it in 

KubernetesCluster

 or 

KubernetesClusterArgs

 . Thanks!

const acrRole = new azure.authorization.Assignment(`Cluster-${args.Name}-ACR-Role`, {
        principalId: ClusterServicePrincipal.id,
        scope: ContainerRegistry.id,
        roleDefinitionName: "AcrPull"
    });

i believe all it does is this -- grants AcrPull against the cluster's Service Principal

Thank you! Will check it out!

hmm not sure then sorry, does anything like that get populated in the return object from new azureaks.cluster()

Hmm.. Actually, I don't know if Azure returning any info about

acr

when you create a cluster. I need to check. Thanks!

sorry - I meant details of the identity the cluster runs as so that you could do the above but pointing something different. perhaps cluster.identity.principalId ?

oh, I see. So, Pulumi uses terraform under the hood. I'll check the docs. Thanks!