Revert the svc KV access for the AKS agentpool MSI (#2487)

pkg/deploy/assets/rp-development-predeploy.json

@@ -290,18 +290,6 @@
                             ]
                         }
                     },
-                    {
-                        "tenantId": "[subscription().tenantId]",
-                        "objectId": "[reference(resourceId('Microsoft.ContainerService/managedClusters', 'aro-aks-cluster-001'), '2020-12-01', 'Full').properties.identityProfile.kubeletidentity.objectId]",
-                        "permissions": {
-                            "secrets": [
-                                "get"
-                            ],
-                            "certificates": [
-                                "get"
-                            ]
-                        }
-                    },
                     {
                         "tenantId": "[subscription().tenantId]",
                         "objectId": "[parameters('adminObjectId')]",

pkg/deploy/assets/rp-production-predeploy.json

@@ -51,18 +51,6 @@
                         "list"
                     ]
                 }
-            },
-            {
-                "tenantId": "[subscription().tenantId]",
-                "objectId": "[reference(resourceId('Microsoft.ContainerService/managedClusters', 'aro-aks-cluster-001'), '2020-12-01', 'Full').properties.identityProfile.kubeletidentity.objectId]",
-                "permissions": {
-                    "secrets": [
-                        "get"
-                    ],
-                    "certificates": [
-                        "get"
-                    ]
-                }
             }
         ]
     },

pkg/deploy/generator/resources_rp.go

@@ -721,18 +721,6 @@ func (g *generator) rpServiceKeyvaultAccessPolicies() []mgmtkeyvault.AccessPolic
 				},
 			},
 		},
-		{
-			TenantID: &tenantUUIDHack,
-			ObjectID: to.StringPtr("[reference(resourceId('Microsoft.ContainerService/managedClusters', 'aro-aks-cluster-001'), '2020-12-01', 'Full').properties.identityProfile.kubeletidentity.objectId]"),
-			Permissions: &mgmtkeyvault.Permissions{
-				Secrets: &[]mgmtkeyvault.SecretPermissions{
-					mgmtkeyvault.SecretPermissionsGet,
-				},
-				Certificates: &[]mgmtkeyvault.CertificatePermissions{
-					mgmtkeyvault.Get,
-				},
-			},
-		},
 	}
 }