azure-policy icon indicating copy to clipboard operation
azure-policy copied to clipboard

Enabling AKS Azure Policy Addon when workload identity is enabled. Pods start showing error "Multiple user assigned identities exist, please specify the clientId / resourceId of the identity in the token request"

Open atedsimple opened this issue 2 years ago • 0 comments

A second identity is created and attached to each node when enabling Azure Policy on an AKS cluster that uses workload identity. Any pod that then tries to authenticate to Azure starts showing the error:-

"Multiple user assigned identities exist, please specify the clientId / resourceId of the identity in the token request"

Is it possible to configure Azure Policy to use the same identity that is used by workload identity? I see that you can view the identity but don't see a way to change it

image

image

atedsimple avatar Jan 24 '24 11:01 atedsimple