{aks-agent}: remove user MSI from aks-agent

[mainred]

---

This checklist is used to make sure that common guidelines for a pull request are followed.

Related command

General Guidelines

• Have you run azdev style <YOUR_EXT> locally? (pip install azdev required)
• Have you run python scripts/ci/test_index.py -q locally? (pip install wheel==0.30.0 required)
• My extension version conforms to the Extension version schema

For new extensions:

• My extension description/summary conforms to the Extension Summary Guidelines.

About Extension Publish

There is a pipeline to automatically build, upload and publish extension wheels.
Once your pull request is merged into main branch, a new pull request will be created to update src/index.json automatically.
You only need to update the version information in file setup.py and historical information in file HISTORY.rst in your PR but do not modify src/index.json.

[azure-client-tools-bot-prd]

️✔️Azure CLI Extensions Breaking Change Test

️✔️Non Breaking Changes

[azure-client-tools-bot-prd]

Hi @mainred,
Please write the description of changes which can be perceived by customers into HISTORY.rst.
If you want to release a new extension version, please update the version in setup.py as well.

[yonzhan]

Thank you for your contribution! We will review the pull request and get back to you soon.

[github-actions]

The git hooks are available for azure-cli and azure-cli-extensions repos. They could help you run required checks before creating the PR.

Please sync the latest code with latest dev branch (for azure-cli) or main branch (for azure-cli-extensions).
After that please run the following commands to enable git hooks:

pip install azdev --upgrade
azdev setup -c <your azure-cli repo path> -r <your azure-cli-extensions repo path>

[github-actions]

• For more info about extension versioning, please refer to Extension version schema

[Copilot]

Pull request overview

Removes the interactive “managed identity client ID” configuration path from az aks agent-init and stops emitting the corresponding workload identity values into the Helm values, shifting guidance toward service-account-based configuration.

Changes:

• Remove managed identity client ID prompts from the init/Helm deployment interactive flow and update console guidance.
• Remove managed identity client ID state/loading and workloadIdentity/azure.clientId Helm values generation from AKSAgentManager.
• Add a changelog entry documenting the behavior change.

Reviewed changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated 4 comments.

File	Description
src/aks-agent/azext_aks_agent/custom.py	Removes managed identity prompting during Helm setup and adds guidance about annotating the service account for Azure access.
src/aks-agent/azext_aks_agent/agent/k8s/aks_agent_manager.py	Removes managed identity client ID handling and stops generating workload identity-related Helm values.
src/aks-agent/HISTORY.rst	Documents the change in the release history (new 1.0.0b17 entry).

[Copilot]

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.

[azclibot]

[Release] Update index.json for extension [ aks-agent-1.0.0b17 ] : https://dev.azure.com/msazure/One/_build/results?buildId=151068359&view=results