-
Notifications
You must be signed in to change notification settings - Fork 66
[FEATURE] Support for Azure AD Workload Identities #566
Description
Problem Statement
As far as I can tell, databricks-sdk-go supports managed identities, but not Azure AD Workload Identities.
Proposed Solution
Perhaps we could integrate with https://pkg.go.dev/github.com/Azure/azure-sdk-for-go/sdk/azidentity
Additional Context
We are trying to deploy an Azure Databricks instance with a workload identity. This is supposed to supersede what was previously know as "pod identity", which allows more fine-grained associations of managed identities to K8S workloads. The process of obtaining a token is different than regular managed identities. There is no communication with the Azure Instance Metadata Service, i.e. IMDS, which is what databricks-sdk-go does when using AzureUseMsi: true is set.