Skip to content

Commit e3ca3b7

Browse files
committed
Updated Wokload Identity Migration article
1 parent fcace02 commit e3ca3b7

File tree

1 file changed

+4
-4
lines changed

1 file changed

+4
-4
lines changed

articles/aks/workload-identity-migrate-from-pod-identity.md

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@ title: Migrate your Azure Kubernetes Service (AKS) pod to use workload identity
33
description: In this Azure Kubernetes Service (AKS) article, you learn how to configure your Azure Kubernetes Service pod to authenticate with workload identity.
44
ms.topic: article
55
ms.custom: devx-track-azurecli, devx-track-linux
6-
ms.date: 07/26/2023
6+
ms.date: 07/31/2023
77
---
88

99
# Migrate from pod managed-identity to workload identity
@@ -37,16 +37,16 @@ If your cluster is already using the latest version of the Azure Identity SDK, p
3737

3838
If your cluster isn't using the latest version of the Azure Identity SDK, you have two options:
3939

40-
- You can use a migration sidecar that we provide within your Linux applications, which proxies the IMDS transactions your application makes over to [OpenID Connect][openid-connect-overview] (OIDC). The migration sidecar isn't intended to be a long-term solution, but a way to get up and running quickly on workload identity. Perform the following steps to:
40+
- You can use a migration sidecar that we provide within your Linux applications, which proxies the IMDS transactions your application makes over to [OpenID Connect][openid-connect-overview] (OIDC). The migration sidecar isn't intended to be a long-term solution, but a way to get up and running quickly on workload identity. Perform the following steps to:
4141

4242
- [Deploy the workload with migration sidecar](#deploy-the-workload-with-migration-sidecar) to proxy the application IMDS transactions.
4343
- Verify the authentication transactions are completing successfully.
4444
- Schedule the work for the applications to update there SDK's to a supported version.
4545
- Once the SDK's are updated to the supported version, you can remove the proxy sidecar and redeploy the application.
4646

4747
> [!NOTE]
48-
> The migration sidecar is **not supported for production use**. This feature is meant to give you time to migrate your application SDK's to a supported version, and not meant or intended to be a long-term solution.
49-
> The migration sidecar is only for Linux containers as pod-managed identities was available on Linux node pools only.
48+
> The migration sidecar is **not supported for production use**. This feature is meant to give you time to migrate your application SDK's to a supported version, and not meant or intended to be a long-term solution.
49+
> The migration sidecar is only available for Linux containers, due to only providing pod-managed identities with Linux node pools.
5050
5151
- Rewrite your application to support the latest version of the [Azure Identity][azure-identity-supported-versions] client library. Afterwards, perform the following steps:
5252

0 commit comments

Comments
 (0)