|
2 | 2 | title: Use an Azure AD workload identities (preview) on Azure Kubernetes Service (AKS)
|
3 | 3 | description: Learn about Azure Active Directory workload identity (preview) for Azure Kubernetes Service (AKS) and how to migrate your application to authenticate using this identity.
|
4 | 4 | ms.topic: article
|
5 |
| -ms.date: 03/27/2023 |
| 5 | +ms.date: 03/28/2023 |
6 | 6 |
|
7 | 7 | ---
|
8 | 8 |
|
@@ -30,22 +30,35 @@ This article helps you understand this new authentication feature, and reviews t
|
30 | 30 |
|
31 | 31 | - The `aks-preview` extension version 0.5.102 or later.
|
32 | 32 |
|
33 |
| -- The following are the minimum versions of the [Azure Identity][azure-identity-libraries] client library supported: |
| 33 | +## Azure Identity SDK |
34 | 34 |
|
35 |
| - * [.NET][dotnet-azure-identity-client-library] 1.5.0 |
36 |
| - * [Java][java-azure-identity-client-library] 1.4.0 |
37 |
| - * [JavaScript][javascript-azure-identity-client-library] 2.0.0 |
38 |
| - * [Python][python-azure-identity-client-library] 1.7.0 |
| 35 | +The following client libraries are the **minimum** version required |
| 36 | + |
| 37 | +| Language | Library | Minimum Version | Example | |
| 38 | +|-----------|-----------|----------|----------| |
| 39 | +| Go | [azure-sdk-for-go](https://github.com/Azure/azure-sdk-for-go) | [sdk/azidentity/v1.3.0-beta.1](https://github.com/Azure/azure-sdk-for-go/releases/tag/sdk/azidentity/v1.3.0-beta.1)| [Link](https://github.com/Azure/azure-workload-identity/tree/main/examples/azure-identity/go) | |
| 40 | +| C# | [azure-sdk-for-net](https://github.com/Azure/azure-sdk-for-net) | [Azure.Identity_1.5.0](https://github.com/Azure/azure-sdk-for-net/releases/tag/Azure.Identity_1.5.0)| [Link](https://github.com/Azure/azure-workload-identity/tree/main/examples/azure-identity/dotnet) | |
| 41 | +| JavaScript/TypeScript | [azure-sdk-for-js](https://github.com/Azure/azure-sdk-for-js) | [@azure/identity_2.0.0](https://github.com/Azure/azure-sdk-for-js/releases/tag/@azure/identity_2.0.0) | [Link](https://github.com/Azure/azure-workload-identity/tree/main/examples/azure-identity/node) | |
| 42 | +| Python | [azure-sdk-for-python](https://github.com/Azure/azure-sdk-for-python) | [azure-identity_1.7.0](https://github.com/Azure/azure-sdk-for-python/releases/tag/azure-identity_1.7.0) | [Link](https://github.com/Azure/azure-workload-identity/tree/main/examples/azure-identity/python) | |
| 43 | +| Java | [azure-sdk-for-java]() | [azure-identity_1.4.0](https://github.com/Azure/azure-sdk-for-java/releases/tag/azure-identity_1.4.0) | [Link](https://github.com/Azure/azure-workload-identity/tree/main/examples/azure-identity/java) | |
| 44 | + |
| 45 | +## Microsoft Authentication Library (MSAL) |
| 46 | + |
| 47 | +The following client libraries are the **minimum** version required |
| 48 | + |
| 49 | +| Language | Library | Image | Example | Has Windows | |
| 50 | +|-----------|-----------|----------|----------|----------| |
| 51 | +| Go | [microsoft-authentication-library-for-go](https://github.com/AzureAD/microsoft-authentication-library-for-go) | ghcr.io/azure/azure-workload-identity/msal-go | [Link](https://github.com/Azure/azure-workload-identity/tree/main/examples/msal-go) | Yes | |
| 52 | +| C# | [microsoft-authentication-library-for-dotnet](https://github.com/AzureAD/microsoft-authentication-library-for-dotnet) | ghcr.io/azure/azure-workload-identity/msal-net | [Link](https://github.com/Azure/azure-workload-identity/tree/main/examples/msal-net/akvdotnet) | Yes | |
| 53 | +| JavaScript/TypeScript | [microsoft-authentication-library-for-js](https://github.com/AzureAD/microsoft-authentication-library-for-js) | ghcr.io/azure/azure-workload-identity/msal-node | [Link](https://github.com/Azure/azure-workload-identity/tree/main/examples/msal-node) | No | |
| 54 | +| Python | [microsoft-authentication-library-for-python](https://github.com/AzureAD/microsoft-authentication-library-for-python) | ghcr.io/azure/azure-workload-identity/msal-python | [Link](https://github.com/Azure/azure-workload-identity/tree/main/examples/msal-python) | No | |
| 55 | +| Java | [microsoft-authentication-library-for-java](https://github.com/AzureAD/microsoft-authentication-library-for-java) | ghcr.io/azure/azure-workload-identity/msal-java | [Link](https://github.com/Azure/azure-workload-identity/tree/main/examples/msal-java) | No | |
39 | 56 |
|
40 | 57 | ## Limitations
|
41 | 58 |
|
42 | 59 | - You can only have 20 federated identity credentials per managed identity.
|
43 | 60 | - It takes a few seconds for the federated identity credential to be propagated after being initially added.
|
44 | 61 |
|
45 |
| -## Language SDK examples |
46 |
| - - [Azure Identity SDK](https://azure.github.io/azure-workload-identity/docs/topics/language-specific-examples/azure-identity-sdk.html) |
47 |
| - - [MSAL](https://azure.github.io/azure-workload-identity/docs/topics/language-specific-examples/msal.html) |
48 |
| - |
49 | 62 | ## How it works
|
50 | 63 |
|
51 | 64 | In this security model, the AKS cluster acts as token issuer, Azure Active Directory uses OpenID Connect to discover public signing keys and verify the authenticity of the service account token before exchanging it for an Azure AD token. Your workload can exchange a service account token projected to its volume for an Azure AD token using the Azure Identity client library or the Microsoft Authentication Library.
|
|
0 commit comments