azure-policy
azure-policy copied to clipboard
Enabling AKS Azure Policy Addon when workload identity is enabled. Pods start showing error "Multiple user assigned identities exist, please specify the clientId / resourceId of the identity in the token request"
A second identity is created and attached to each node when enabling Azure Policy on an AKS cluster that uses workload identity. Any pod that then tries to authenticate to Azure starts showing the error:-
"Multiple user assigned identities exist, please specify the clientId / resourceId of the identity in the token request"
Is it possible to configure Azure Policy to use the same identity that is used by workload identity? I see that you can view the identity but don't see a way to change it