[azidentity] Allow Identity Binding mode to be set via configuration options instead of env vars #25663
Description
Feature Request
Follow-up to: #25056
Background
Tody the identity binding mode in workload identity is controlled only via environment variables defined in:
In addition, the Azure Federated Token for workload identity is currently only read from a file on disk:
azure-sdk-for-go/sdk/azidentity/workload_identity.go
Lines 70 to 72 in 4620071
This makes the behavior hard to configure from code and hard to integrate into libiraries that already have their own configuration and/or use non-file token sources.
Request
- Add a configuration option to set the identity binding proxy from code with explicit options taking precedence over env vars.
- Keep env-var behavior as the default when the option is not set.
- For workload identity, allow callers to provide a
GetFederatedTokenstyle override so that the token can come from non-file sources (e.g., token from request in csi scenario), while preserving the current file-based behavior as the default.
Metadata
Metadata
Assignees
Labels
This issue points to a problem in the data-plane of the library.Issues that are reported by GitHub users external to the Azure organization.Workflow: This issue needs attention from Azure service team or SDK teamThe issue doesn't require a change to the product in order to be resolved. Most issues start as that