Azure / Azure/azure-cli

az login support for Azure AD workload identity with Azure Kubernetes Service

Open
#26,858 18 comments 43 reactions 1 assignee Claimed by @jiasli View on GitHub
Account act-identity-squad Auto-Assign Azure CLI Team customer-reported feature-request
Dominant language
Python
Stars
4.6k
Forks
3.5k
Avg merge
3d 2h
Merged PRs (30d)
60

Description

**Related command**
az login

**Is your feature request related to a problem? Please describe.**
Currently if using workload identity and azure cli, az login must be specifically configured for login

**Describe the solution you'd like**
similar to az login --identity, maybe something like az login --workflow-identity
**Describe alternatives you've considered**
You can work around it currently using
az login --federated-token "$(cat $AZURE_FEDERATED_TOKEN_FILE)" --service-principal -u $AZURE_CLIENT_ID -t $AZURE_TENANT_ID

**Additional context**
For the client libraries a specific class is available `WorkloadIdentityCredential`

More generally it would be nice if az login had a way to use something similar to `DefaultAzureCredential` which would allow scripts to be more portable depending on execution context

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.