使用MS Graph中的服务主体在ARM中创建AKS集群时出错

# 为服务主体分配角色
New-AzRoleAssignment -ObjectId <service-principal-object-id> -RoleDefinitionName "Azure Kubernetes Service Contributor" -Scope /subscriptions/<subscription-id>

# 获取服务主体的凭据
$creds = Get-Credential
Connect-AzAccount -ServicePrincipal -Credential $creds -TenantId <tenant-id>

# 检查订阅的资源限制
Get-AzResourceQuota -Location <location> -SubscriptionId <subscription-id>

{
  "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
  "contentVersion": "1.0.0.0",
  "parameters": {
    "clusterName": {
      "type": "string"
    },
    ...
  },
  "resources": [
    {
      "type": "Microsoft.ContainerService/managedClusters",
      "apiVersion": "2020-09-01",
      "name": "[parameters('clusterName')]",
      ...
    }
  ]
}

# 使用curl测试API端点
curl -X POST https://management.azure.com/subscriptions/<subscription-id>/resourcegroups/<resource-group>/providers/Microsoft.ContainerService/managedClusters/<cluster-name>?api-version=2020-09-01 -d @request-body.json -H "Authorization: Bearer <access-token>"

# 安装Azure PowerShell模块
Install-Module Az -Scope CurrentUser

# 登录到Azure
Connect-AzAccount

# 创建资源组
New-AzResourceGroup -Name myResourceGroup -Location eastus

# 创建AKS集群
New-AzAksCluster -ResourceGroupName myResourceGroup -Name myAKSCluster -NodeCount 3 -ServicePrincipal <service-principal-object-id> -ClientSecret <client-secret>