Questions tagged [aad-pod-identity]

16 questions
3
votes
1 answer

How to edit/patch kubernetes deployment to add label using python

I am fairly new to kubernetes - I have developed web UI/API that automates model deployment using Azure Machine Learning Services to Azure Kubernetes Services (AKS). As a hardening measure, I am tying to set up managed identity for deployed pods in…
2
votes
1 answer

How to work with Keda using Azure pod identity

I'm trying to use pod identity in conjunction with KEDA to access some Azure resources, Azure Service Bus & Keyvaults to be precise. I noticed the aadpodbinding should be set when deploying the operator according to these instructions. I am probably…
Kim Lindqvist
  • 363
  • 4
  • 15
1
vote
0 answers

Issue with aad-pod-identity and nmi on same cluster

i have a cluster where i have aad-pod-identity installed like the instructions found here: https://azure.github.io/aad-pod-identity/docs/getting-started/installation/#helm That seemed to work fine for the most part, but because of other issues i…
Phil
  • 1,852
  • 2
  • 28
  • 55
1
vote
2 answers

Integrate Azure Key Vault With Azure Kubernetes Service using Managed Identity

I'm setting up Keyvault integration with k8s in Azure. I can mount a volume with secrets using the csi driver in Azure using Managed identities. I can verify the secret is mounted by exec-ing into the pod and cat-ing out the secrets. However, now I…
Gerb
  • 883
  • 12
  • 31
1
vote
1 answer

Azure AAD pod identity with Azure event hub

I have a requirement to use Managed identity mechanism to access event hub from Spark streaming application running in kubernetes I am going through azure AAD pod managed identity to connect to Azure event hub and didn’t find any doc regarding event…
nagendra
  • 1,885
  • 3
  • 17
  • 27
0
votes
0 answers

multiple Namespace support in AKS with AGIC

I am following the instruction to enable multiple Namespace support in an AKS with AGIC. https://learn.microsoft.com/en-us/azure/application-gateway/ingress-controller-multiple-namespace-support Step 1 - Install AAD Pod Identity on the default…
0
votes
0 answers

Running aks pod-identity add command fails with Managed Identity Operator error despite having permissions

Currently battling a permissions issue when trying to assign a managed identity as part of an install/config of external-dns using pod identity. Worked through the instructions to assign the DNS private zone contributor role to the user assigned…
John Fox
  • 747
  • 1
  • 13
  • 28
0
votes
1 answer

What happens to Azure AD Pod identity once the pod dies

I am planning to assign pod identity to one of my applications. However, I am unable to understand the part where what happens to the assigned pod identity when the pod restarts/dies on its own ? Does the pod get assigned a new identity on its own?
0
votes
1 answer

Azure AAD pod identity related logs in Azure Portal

I tried to use the Azure AAD pod identity and bind a Managed Identity to it. Then I used this pod identity to perform some azure resource actions like creating a resource group. It seems from the log analytics the log entry only contains info that…
0
votes
1 answer

Azure AD pod-managed identities vs Azure AD workload identity managed

I'm about to create a new Azure AKS cluster and I want to integrate AKS with Azure Key Vault. A few months ago, during the study phase, I saw that it was necessary to use Azure AD pod-managed identities to do this, but now I found that this will be…
Salvatore Calla'
  • 113
  • 2
  • 16
0
votes
1 answer

Adding CustomResourceDefinition throwing error when trying to execute using V1 version in aks

I'm trying to add customresourcedeployment in aks. Earlier we used V1beta1 version which I think, deprecated. Now I am trying with v1 version which is throwing schema validation error. The V1beta1 version is as follows. { 'apiVersion':…
0
votes
1 answer

pod identity on aks cluster crreation

Right now, it's impossible to have assigned user assigned identities on arm templates (and terraform) on cluster creation. I already tried a lot of things, and updates works great, after inserting manually with: az aks pod-identity add…
andre-lx
  • 312
  • 3
  • 14
0
votes
1 answer

Secure access Azure file share with pod identities

I used Azure files to share storage between many pods in AKS. In this Cluster we have multiple applications, I want access to this storage to be secure, each storage account is accessible only via one user managed identity assigned to these pods…
0
votes
2 answers

Azure Key Vault integration with AKS works for nginx tutorial Pod, but not actual project deployment

Per the title, I have the integration working following the documentation. I can deploy the nginx.yaml and after about 70 seconds I can print out secrets with: kubectl exec -it nginx -- cat /mnt/secrets-store/secret1 Now I'm trying to apply it to a…
cjones
  • 8,384
  • 17
  • 81
  • 175
0
votes
0 answers

Proper deployment of AAD Pod Identity

I intend to use AAD Pod Identity so that my kubernetes workloads can leverage managed identities that I create in Azure. Currently, I create my identities and role assignment through ARM templates. Afterwards, I need to create an instance of the…
1
2