vmware-tanzu / velero

Backup and migrate Kubernetes applications and their persistent volumes
https://velero.io
Apache License 2.0
8.79k stars 1.41k forks source link

Support for workload identity #6272

Closed asubmani closed 1 year ago

asubmani commented 1 year ago

Describe the problem/challenge you have Enable support for Federated identity/workload identity

Describe the solution you'd like Pod identity is deprecated and AKS now uses "AKS workload Identity"

Please add steps to star using "workload identity" with Velero instead of podidentity. Workload identity uses MSAL and does not rely on CRD like podidentity does. https://learn.microsoft.com/en-us/azure/aks/workload-identity-overview https://github.com/Azure/AKS/issues/1480

Anything else you would like to add:

Environment:

Vote on this issue!

This is an invitation to the Velero community to vote on issues, you can see the project's top voted issues listed here.
Use the "reaction smiley face" up to the right of this comment to vote.

anshulahuja98 commented 1 year ago

Hi @asubmani We'll update the docs post this PR is checked in into Azure Plugin - https://github.com/vmware-tanzu/velero-plugin-for-microsoft-azure/pull/188

anshulahuja98 commented 1 year ago

Already tracked as part of https://github.com/vmware-tanzu/velero/issues/5116