Workload Identity Example?

[thepaulmacca]

Will there be an example of how to use this with workload identity?

I'm looking at the current docs here which is currently suited to the helm chart install, and not if you use the add-on.

I've also seen this issue, but the docs haven't been updated yet

---

Document Details

⚠ Do not edit this section. It is required for learn.microsoft.com ➟ GitHub issue linking.

• ID: 8dbb0979-78e4-9db8-6aaf-96c6240a8043
• Version Independent ID: 2c87a036-5f1f-2f34-2243-abbcc0d3269f
• Content: Kubernetes Event-driven Autoscaling (KEDA) - Azure Kubernetes Service
• Content Source: articles/aks/keda-about.md
• Service: azure-kubernetes-service
• GitHub Login: @tomkerkhove
• Microsoft Alias: tomkerkhove

[SaibabaBalapur-MSFT]

@thepaulmacca
Thanks for your feedback! We will investigate and update as appropriate.

[raorugan]

For enabling AKS cluster with KEDA add-on and workload identity refer this - KEDA Add-on for AKS docs

Once above is completed deploy [Trigger Auth] (https://keda.sh/docs/1.4/concepts/authentication/#re-use-credentials-and-delegate-auth-with-triggerauthentication) in AKS with provider & identityId

triggerauth name needs to be referenced in the corresponding scaled objects under authenticationRef config property

authenticationRef:
name

[thepaulmacca]

Thanks for coming back to me, this is more to do with the application side of things more than the add-on install

It feels to me like at the moment, the only way this will really work is via the helm chart, as we then have an identity for role assignments - but that's also another thing, how do the role assignments work for the KEDA identity in this scenario?

[tomkerkhove]

@AjayBathini-MSFT please assign to @raorugan who is PM for this

[raorugan]

the detail instruction to configure managed identity with an app in AKS with KEDA add-on is available in this sample - https://github.com/Azure-Samples/aks-keda-addon-workload-identity

[thepaulmacca]

Thanks, I'll take a look and give it a go

[MGoedtel]

Thanks for providing feedback that helps improve our documentation. It looks like we've answered your questions and helped you with your configuration scenario. I'm going to proceed with closing the issue. #please-close