What happened:
I followed the Azure DNS tutorial to configure external-dns using the Managed identity using Workload Identity
section. external-dns would fail with an Entra error AADSTS700016 stating that the client ID may be misconfigured.
What you expected to happen:
external-dns does not fail with an error after following the tutorial.
How to reproduce it (as minimally and precisely as possible):
Follow the Azure DNS tutorial to configure external-dns using the Managed identity using Workload Identity
section.
What happened: I followed the Azure DNS tutorial to configure external-dns using the Managed identity using Workload Identity section.
external-dns
would fail with an Entra error AADSTS700016 stating that the client ID may be misconfigured.What you expected to happen:
external-dns
does not fail with an error after following the tutorial.How to reproduce it (as minimally and precisely as possible): Follow the Azure DNS tutorial to configure external-dns using the Managed identity using Workload Identity section.
Anything else we need to know?: The code for configuring external dns configurations uses the
clientID
configuration which is resolved fromaadClientId
in the azure.json configuration file: https://github.com/kubernetes-sigs/external-dns/blob/709f3f4ce24eafdb9b5307262c6486d8a4f0b051/provider/azure/config.go#L121The documentation tells you to use the
userAssignedIdentityID
, but this is only used for the "Managed identity using AAD Pod Identities" section: https://github.com/kubernetes-sigs/external-dns/blob/709f3f4ce24eafdb9b5307262c6486d8a4f0b051/provider/azure/config.go#L139Environment:
external-dns --version
): 1.15.0