Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Azure DNS tutorial incorrectly defines azure.json property for "Managed identity using Workload Identity" #4898

Closed
EvanSchallerer opened this issue Nov 25, 2024 · 0 comments · Fixed by #4899
Labels
kind/bug Categorizes issue or PR as related to a bug.

Comments

@EvanSchallerer
Copy link
Contributor

What happened:
I followed the Azure DNS tutorial to configure external-dns using the Managed identity using Workload Identity
section. external-dns would fail with an Entra error AADSTS700016 stating that the client ID may be misconfigured.

What you expected to happen:
external-dns does not fail with an error after following the tutorial.

How to reproduce it (as minimally and precisely as possible):
Follow the Azure DNS tutorial to configure external-dns using the Managed identity using Workload Identity
section.

Anything else we need to know?:
The code for configuring external dns configurations uses the clientID configuration which is resolved from aadClientId in the azure.json configuration file:

ClientID: cfg.ClientID,

The documentation tells you to use the userAssignedIdentityID, but this is only used for the "Managed identity using AAD Pod Identities" section:

msiOpt.ID = azidentity.ClientID(cfg.UserAssignedIdentityID)

Environment:

  • External-DNS version (use external-dns --version): 1.15.0
  • DNS provider: Azure
  • Others:
@EvanSchallerer EvanSchallerer added the kind/bug Categorizes issue or PR as related to a bug. label Nov 25, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
kind/bug Categorizes issue or PR as related to a bug.
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant