Skip to content

[FEATURE] Support for Azure AD Workload Identities #566

@agchang

Description

@agchang

Problem Statement
As far as I can tell, databricks-sdk-go supports managed identities, but not Azure AD Workload Identities.

Proposed Solution
Perhaps we could integrate with https://pkg.go.dev/github.com/Azure/azure-sdk-for-go/sdk/azidentity

Additional Context
We are trying to deploy an Azure Databricks instance with a workload identity. This is supposed to supersede what was previously know as "pod identity", which allows more fine-grained associations of managed identities to K8S workloads. The process of obtaining a token is different than regular managed identities. There is no communication with the Azure Instance Metadata Service, i.e. IMDS, which is what databricks-sdk-go does when using AzureUseMsi: true is set.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions