Skip to content

Conversation

@bcho
Copy link
Member

@bcho bcho commented Nov 7, 2025

This pull request introduces a new example for the Identity Binding feature in AKS, providing documentation and configuration files to help users set up and test managed identity access in their clusters. The changes are grouped into documentation and configuration for RBAC and pod deployment.

Documentation and Instructions:

  • Added a comprehensive README.md explaining prerequisites, setup steps, and verification for using Identity Binding in AKS clusters, including notes on required Azure CLI and AKS features, RBAC setup, and pod deployment.

Configuration for RBAC and Pod Deployment:

  • Added cluster-role-and-cluster-role-binding.yaml to define a ClusterRole and ClusterRoleBinding that grant the default service account permission to use a specific managed identity via the new verb use-managed-identity.
  • Added pod.yaml manifest for deploying a sample pod that demonstrates access to Azure Key Vault using the managed identity and the new identity binding annotation.

@bcho bcho requested review from a team and palma21 as code owners November 7, 2025 20:08
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR introduces a comprehensive example for the Identity Binding feature in AKS, providing users with step-by-step instructions and configuration files to set up managed identity access in their clusters. The example demonstrates how to configure RBAC permissions and deploy pods that authenticate to Azure services using managed identities.

Key Changes

  • Added complete documentation with prerequisites, setup steps, and verification instructions for using Identity Binding
  • Provided Kubernetes RBAC configurations to grant service accounts permission to use specific managed identities
  • Included a sample pod manifest demonstrating Azure Key Vault access via Identity Binding

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated 14 comments.

File Description
examples/identity-binding/README.md Comprehensive guide covering prerequisites, Azure CLI commands for identity binding creation, RBAC setup, pod deployment, and verification steps
examples/identity-binding/cluster-role-and-cluster-role-binding.yaml Kubernetes RBAC configuration defining ClusterRole with use-managed-identity verb and ClusterRoleBinding for the default service account
examples/identity-binding/pod.yaml Sample pod manifest with identity binding annotations for accessing Azure Key Vault using managed identity

bcho and others added 6 commits December 3, 2025 10:23
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Copy link

Copilot AI commented Dec 3, 2025

@bcho I've opened a new pull request, #5487, to work on those changes. Once the pull request is ready, I'll request review from you.

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
@bcho bcho requested a review from Copilot December 3, 2025 18:27
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 3 out of 3 changed files in this pull request and generated 9 comments.

bcho and others added 6 commits December 3, 2025 10:36
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants