Skip to content

Commit 9814dc9

Browse files
authored
Update workload-identity-overview.md
1 parent 6a0b66a commit 9814dc9

File tree

1 file changed

+23
-10
lines changed

1 file changed

+23
-10
lines changed

articles/aks/workload-identity-overview.md

Lines changed: 23 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22
title: Use an Azure AD workload identities (preview) on Azure Kubernetes Service (AKS)
33
description: Learn about Azure Active Directory workload identity (preview) for Azure Kubernetes Service (AKS) and how to migrate your application to authenticate using this identity.
44
ms.topic: article
5-
ms.date: 03/27/2023
5+
ms.date: 03/28/2023
66

77
---
88

@@ -30,22 +30,35 @@ This article helps you understand this new authentication feature, and reviews t
3030

3131
- The `aks-preview` extension version 0.5.102 or later.
3232

33-
- The following are the minimum versions of the [Azure Identity][azure-identity-libraries] client library supported:
33+
## Azure Identity SDK
3434

35-
* [.NET][dotnet-azure-identity-client-library] 1.5.0
36-
* [Java][java-azure-identity-client-library] 1.4.0
37-
* [JavaScript][javascript-azure-identity-client-library] 2.0.0
38-
* [Python][python-azure-identity-client-library] 1.7.0
35+
The following client libraries are the **minimum** version required
36+
37+
| Language | Library | Minimum Version | Example |
38+
|-----------|-----------|----------|----------|
39+
| Go | [azure-sdk-for-go](https://github.com/Azure/azure-sdk-for-go) | [sdk/azidentity/v1.3.0-beta.1](https://github.com/Azure/azure-sdk-for-go/releases/tag/sdk/azidentity/v1.3.0-beta.1)| [Link](https://github.com/Azure/azure-workload-identity/tree/main/examples/azure-identity/go) |
40+
| C# | [azure-sdk-for-net](https://github.com/Azure/azure-sdk-for-net) | [Azure.Identity_1.5.0](https://github.com/Azure/azure-sdk-for-net/releases/tag/Azure.Identity_1.5.0)| [Link](https://github.com/Azure/azure-workload-identity/tree/main/examples/azure-identity/dotnet) |
41+
| JavaScript/TypeScript | [azure-sdk-for-js](https://github.com/Azure/azure-sdk-for-js) | [@azure/identity_2.0.0](https://github.com/Azure/azure-sdk-for-js/releases/tag/@azure/identity_2.0.0) | [Link](https://github.com/Azure/azure-workload-identity/tree/main/examples/azure-identity/node) |
42+
| Python | [azure-sdk-for-python](https://github.com/Azure/azure-sdk-for-python) | [azure-identity_1.7.0](https://github.com/Azure/azure-sdk-for-python/releases/tag/azure-identity_1.7.0) | [Link](https://github.com/Azure/azure-workload-identity/tree/main/examples/azure-identity/python) |
43+
| Java | [azure-sdk-for-java]() | [azure-identity_1.4.0](https://github.com/Azure/azure-sdk-for-java/releases/tag/azure-identity_1.4.0) | [Link](https://github.com/Azure/azure-workload-identity/tree/main/examples/azure-identity/java) |
44+
45+
## Microsoft Authentication Library (MSAL)
46+
47+
The following client libraries are the **minimum** version required
48+
49+
| Language | Library | Image | Example | Has Windows |
50+
|-----------|-----------|----------|----------|----------|
51+
| Go | [microsoft-authentication-library-for-go](https://github.com/AzureAD/microsoft-authentication-library-for-go) | ghcr.io/azure/azure-workload-identity/msal-go | [Link](https://github.com/Azure/azure-workload-identity/tree/main/examples/msal-go) | Yes |
52+
| C# | [microsoft-authentication-library-for-dotnet](https://github.com/AzureAD/microsoft-authentication-library-for-dotnet) | ghcr.io/azure/azure-workload-identity/msal-net | [Link](https://github.com/Azure/azure-workload-identity/tree/main/examples/msal-net/akvdotnet) | Yes |
53+
| JavaScript/TypeScript | [microsoft-authentication-library-for-js](https://github.com/AzureAD/microsoft-authentication-library-for-js) | ghcr.io/azure/azure-workload-identity/msal-node | [Link](https://github.com/Azure/azure-workload-identity/tree/main/examples/msal-node) | No |
54+
| Python | [microsoft-authentication-library-for-python](https://github.com/AzureAD/microsoft-authentication-library-for-python) | ghcr.io/azure/azure-workload-identity/msal-python | [Link](https://github.com/Azure/azure-workload-identity/tree/main/examples/msal-python) | No |
55+
| Java | [microsoft-authentication-library-for-java](https://github.com/AzureAD/microsoft-authentication-library-for-java) | ghcr.io/azure/azure-workload-identity/msal-java | [Link](https://github.com/Azure/azure-workload-identity/tree/main/examples/msal-java) | No |
3956

4057
## Limitations
4158

4259
- You can only have 20 federated identity credentials per managed identity.
4360
- It takes a few seconds for the federated identity credential to be propagated after being initially added.
4461

45-
## Language SDK examples
46-
- [Azure Identity SDK](https://azure.github.io/azure-workload-identity/docs/topics/language-specific-examples/azure-identity-sdk.html)
47-
- [MSAL](https://azure.github.io/azure-workload-identity/docs/topics/language-specific-examples/msal.html)
48-
4962
## How it works
5063

5164
In this security model, the AKS cluster acts as token issuer, Azure Active Directory uses OpenID Connect to discover public signing keys and verify the authenticity of the service account token before exchanging it for an Azure AD token. Your workload can exchange a service account token projected to its volume for an Azure AD token using the Azure Identity client library or the Microsoft Authentication Library.

0 commit comments

Comments
 (0)