Skip to content

Commit 17e1ff1

Browse files
authored
Update workload-identity-static-pv-mount.md
1 parent 1b6bfc7 commit 17e1ff1

File tree

1 file changed

+6
-3
lines changed

1 file changed

+6
-3
lines changed

docs/workload-identity-static-pv-mount.md

Lines changed: 6 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,10 +1,13 @@
1-
# workload identity support on static provisioning (Preview)
1+
# workload identity support on static provisioning
22
- supported from v1.24.0 (from AKS 1.29 with `tokenRequests` field support in `CSIDriver`)
33

44
### Note
5-
- This feature is in **Preview**
65
- This feature is not supported for NFS mount since NFS mount does not need credentials.
7-
- This feature would retrieve storage account key using federated identity credentials.
6+
- This feature would retrieve storage account key using federated identity credentials by default.
7+
- This feature supports mounting with workload identity token only (**Preview**) by configuring the following:
8+
> limitation: the workload identity token would expire after 24 hours, make sure the blobfuse volume would be remounted by your application before it expires
9+
- set `mountWithWorkloadIdentityToken: "true"` in parameters of storage class or persistent volume
10+
- set `Storage Blob Data Contributor` role on the identity
811

912
## Prerequisites
1013
### 1. Create a cluster with oidc-issuer enabled and get the credential

0 commit comments

Comments
 (0)