Skip to content

Commit 49924cb

Browse files
Merge pull request #229128 from miwithro/patch-218
Update workload-identity-migrate-from-pod-identity.md
2 parents 2a89603 + 01c916e commit 49924cb

File tree

1 file changed

+4
-3
lines changed

1 file changed

+4
-3
lines changed

articles/aks/workload-identity-migrate-from-pod-identity.md

Lines changed: 4 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -6,12 +6,10 @@ ms.custom: devx-track-azurecli
66
ms.date: 03/14/2023
77
---
88

9-
# Migrate from pod managed-identity to workload identity (preview)
9+
# Migrate from pod managed-identity to workload identity
1010

1111
This article focuses on migrating from a pod-managed identity to Azure Active Directory (Azure AD) workload identity (preview) for your Azure Kubernetes Service (AKS) cluster. It also provides guidance depending on the version of the [Azure Identity][azure-identity-supported-versions] client library used by your container-based application.
1212

13-
[!INCLUDE [preview features callout](./includes/preview/preview-callout.md)]
14-
1513
## Before you begin
1614

1715
- The Azure CLI version 2.40.0 or later. Run `az --version` to find the version, and run `az upgrade` to upgrade the version. If you need to install or upgrade, see [Install Azure CLI][install-azure-cli].
@@ -116,6 +114,9 @@ az identity federated-credential create --name federatedIdentityName --identity-
116114
117115
## Deploy the workload with migration sidecar
118116

117+
> [!NOTE]
118+
> The migration sidecar is **not supported for production usage**. This feature was designed to give customers time to migrate there application SDK's to a supported version and not be a long running process.
119+
119120
If your application is using managed identity and still relies on IMDS to get an access token, you can use the workload identity migration sidecar to start migrating to workload identity. This sidecar is a migration solution and in the long-term applications, you should modify their code to use the latest Azure Identity SDKs that support client assertion.
120121

121122
To update or deploy the workload, add these pod annotations only if you want to use the migration sidecar. You inject the following [annotation][pod-annotations] values to use the sidecar in your pod specification:

0 commit comments

Comments
 (0)