Skip to content

Commit d0a411a

Browse files
authored
Update workload-identity-overview.md
1 parent e86a1dc commit d0a411a

File tree

1 file changed

+9
-1
lines changed

1 file changed

+9
-1
lines changed

articles/aks/workload-identity-overview.md

Lines changed: 9 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@ title: Use an Azure AD workload identity on Azure Kubernetes Service (AKS)
33
description: Learn about Azure Active Directory workload identity for Azure Kubernetes Service (AKS) and how to migrate your application to authenticate using this identity.
44
ms.topic: article
55
ms.custom: build-2023
6-
ms.date: 08/24/2023
6+
ms.date: 09/03/2023
77
---
88

99
# Use Azure AD workload identity with Azure Kubernetes Service (AKS)
@@ -21,6 +21,12 @@ This article helps you understand this new authentication feature, and reviews t
2121
- AKS supports Azure AD workload identities on version 1.22 and higher.
2222
- The Azure CLI version 2.47.0 or later. Run `az --version` to find the version, and run `az upgrade` to upgrade the version. If you need to install or upgrade, see [Install Azure CLI][install-azure-cli].
2323

24+
## Limitations
25+
26+
The following limitations apply when you deploy Azure AD workload identity on AKS:
27+
* Creation of federated identity credentials is not supported on user-assigned managed identities in these [regions.][unsupported-regions-user-assigned-managed-identities]
28+
* A maximum of [20 federated identity credentials][general-federated-identity-credential-considerations] can be added to an application or user-assigned managed identity
29+
2430
## Azure Identity client libraries
2531

2632
In the Azure Identity client libraries, choose one of the following approaches:
@@ -319,3 +325,5 @@ The following table summarizes our migration or deployment recommendations for w
319325
[workload-identity-migration-sidecar]: workload-identity-migrate-from-pod-identity.md
320326
[auto-rotation]: certificate-rotation.md#certificate-auto-rotation
321327
[aks-virtual-nodes]: virtual-nodes.md
328+
[unsupported-regions-user-assigned-managed-identities]: ../active-directory/workload-identities/workload-identity-federation-considerations.md#unsupported-regions-user-assigned-managed-identities
329+
[general-federated-identity-credential-considerations]: ../active-directory/workload-identities/workload-identity-federation-considerations.md#general-federated-identity-credential-considerations

0 commit comments

Comments
 (0)