-
Notifications
You must be signed in to change notification settings - Fork 3k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[Identity] az identity federated-credential
: Add subgroup to support managing federated identity credentials of existing user assigned identities
#23681
Conversation
Compute |
az identity federated-credential
: Add subgroup to support managing federated identity credentials of existing user assigned identitiesaz identity federated-credential
: Add subgroup to support managing federated identity credentials of existing user assigned identities
helps['identity federated-credential create'] = """ | ||
type: command | ||
short-summary: Create a federated identity credential under an existing user assigned identity. | ||
examples: | ||
- name: Create a federated identity credential under a specific user assigned identity. | ||
text: | | ||
az identity federated-credential create --name myFicName --identity-name myIdentityName --resource-group myResourceGroup --issuer myIssuer --subject mySubject --audiences myAudiences | ||
""" |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This command az identity federated-credential create
acts on managed identity: https://learn.microsoft.com/en-us/azure/active-directory/workload-identities/workload-identity-federation-create-trust-user-assigned-managed-identity?pivots=identity-wif-mi-methods-azcli
az ad app federated-credential create
(#23122) acts on AAD application: https://learn.microsoft.com/en-us/azure/active-directory/workload-identities/workload-identity-federation-create-trust?pivots=identity-wif-apps-methods-azcli
However, they expose different command interfaces:
az identity federated-credential create
uses separated arguments--issuer
,--subject
and--audiences
az ad app federated-credential create
uses--parameters
which includesissuer
,subject
andaudiences
in a JSON payload. This decision was made in email thread: federatedIdentityCredentials's implementation in Azure CLI
In my opinion, this causes inconsistency and increases users' learning cost.
Related command
create FIC:
az identity federated-credential create --name myFicName --identity-name myIdentityName --resource-group myResourceGroup --issuer myIssuer --subject mySubject --audiences myAudiences
update FIC:
az identity federated-credential update --name myFicName --identity-name myIdentityName --resource-group myResourceGroup --issuer myIssuer --subject mySubject --audiences myAudiences
read FIC:
az identity federated-credential show --name myFicName --identity-name myIdentityName --resource-group myResourceGroup
read all FICs associated with the user-assigned identity:
az identity federated-credential list --identity-name myIdentityName --resource-group myResourceGroup
delete FIC:
az identity federated-credential delete --name myFicName --identity-name myIdentityName --resource-group myResourceGroup
Description
In
az identity
group, add subgroupaz identity federated-credential
to support managing federated identity credentials of existing user assigned identitiesClose #23152
Testing Guide
History Notes
[Compute]
az identity federated-credential
: Add subgroup to support managing federated identity credentials of existing user assigned identitiesThis checklist is used to make sure that common guidelines for a pull request are followed.
The PR title and description has followed the guideline in Submitting Pull Requests.
I adhere to the Command Guidelines.
I adhere to the Error Handling Guidelines.