How can I find the service principal secret of my AKS cluster? : <p>Okay, so I messed up, I accidentally ran <code>az ad sp reset-credentials</code> against the Service Principal that our AKS cluster runs under. And now we are getting errors like: </p>

<blockquote>
  <p>Error creating load balancer (will retry): error getting LB for service test/admin-api: azure.BearerAuthorizer#WithAuthorization: Failed to refresh the Token for request to <a href="https://management.azure.com/subscriptions/" rel="noreferrer">https://management.azure.com/subscriptions/</a>****/resourceGroups/MC_****/providers/Microsoft.Network/loadBalancers?api-version=2017-09-01: StatusCode=0 -- Original Error: adal: Refresh request failed. Status Code = '401'. Response body: {"error":"invalid_client","error_description":"AADSTS70002: Error validating credentials. AADSTS50012: Invalid client secret is provided.\r\nTrace ID:****\r\nCorrelation ID:**** \r\nTimestamp: 2018-08-23 12:01:33Z","error_codes":[70002,50012],"timestamp":"2018-08-23 12:01:33Z","trace_id":"****","correlation_id":"****"}</p>
</blockquote>

<p>and</p>

<blockquote>
  <p>Failed to pull image "****.azurecr.io/****:****": rpc error: code = Unknown desc = Error response from daemon: Get https://****.azurecr.io/v2/****/manifests/****: unauthorized: authentication required</p>
</blockquote>

<p>So now I want to find the original client secret that the Service Principal uses, so that I can re-add that as a key to the Service Principal. That's the only solution I can think of other than recreating the entire cluster.</p>

<p>Any ideas?</p>
