Azure Workload Identity support

[nraooptum]

We're looking to pair up each agent-sandbox kagent with a unique workload (managed) identity in Azure. This makes it possible for us to strongly audit and granularly authorize agent tool call activity against certain internal APIs. I noticed that the implementation for token provider / managed identity support is marked TBD:

kagent/go/api/v1alpha2/modelconfig_types.go

Line 254 in d00138c

// AzureADTokenProvider interface{} `json:"azureAdTokenProvider,omitempty"`

Just wanted to ask if there is any ETA for this yet, as we are tracking this for a few (very large) projects in our org.

[nraooptum]

Never mind, I see that there's a separate FoundryConfig that does support Workload Identity. I will try that approach, and re-open if I run into issues.