azure-workload-identity v1.0.0 released 🎉

[aramase]

https://github.com/Azure/azure-workload-identity/releases/tag/v1.0.0

[brandongodby78]

@aramase Hi Anish, does this mean that official GA for workload identity is immanent? Very excited to deploy this feature.

[brandongodby78]

Forgive me if this is the announcement of GA :-)

[aramase]

This is the stable release for the OSS project. If you're using the AKS add-on, the GA announcement will be before end of March.

[aramase]

AKS GA announcement: https://techcommunity.microsoft.com/t5/apps-on-azure-blog/general-availability-for-azure-active-directory-ad-workload/ba-p/3798292

[mo-saeed]

Hi @aramase

did I understand the breaking change correctly, that from version 1, the label "azure.workload.identity/use" must be now on the pod level not on the service account?

[aramase]

That's right! We made the change in backward compatible way in v0.15.0. With v1.0.0 only if the pod is labelled, the pod will be mutated by the mutating webhook. The label in service account is no longer required.

azure-workload-identity/deploy/azure-wi-webhook.yaml

Lines 254 to 256 in 4ce591e

	objectSelector:
	matchLabels:
	azure.workload.identity/use: "true"