📣 AAD Pod Identity is deprecated

[sozercan]

❗ IMPORTANT: As of Monday 10/24/2022, AAD Pod Identity is deprecated. As mentioned in the announcement, AAD Pod Identity has been replaced with Azure Workload Identity. Going forward, we will no longer add new features to this project in favor of Azure Workload Identity. We will continue to provide critical bug fixes until Azure Workload Identity reaches general availability. Following that, we will provide CVE patches until September 2023, at which time the project will be archived.

[64J0]

Is there any tutorial teaching how to migrate to this new project?

Related to Azure/azure-workload-identity#731.

[sozercan]

Workload Identity (OSS) has reached stable (v1.0.0) milestone: https://github.com/Azure/azure-workload-identity/releases/tag/v1.0.0

Workload Identity for AKS is now generally available (GA): https://techcommunity.microsoft.com/t5/apps-on-azure-blog/general-availability-for-azure-active-directory-ad-workload/ba-p/3798292

📢 As mentioned in the announcement, reaching these milestones transitions the maintenance of AAD Pod Identity to CVE patches only until September 2023, at which time the project will be archived.

How to migrate from Azure Pod Identity to Azure Workload Identity:
https://learn.microsoft.com/en-us/azure/aks/workload-identity-migrate-from-pod-identity

[timown]

is there a solution for EAS data centers?
https://learn.microsoft.com/en-us/azure/active-directory/workload-identities/workload-identity-federation-considerations#unsupported-regions-user-assigned-managed-identities

[aramase]

is there a solution for EAS data centers? https://learn.microsoft.com/en-us/azure/active-directory/workload-identities/workload-identity-federation-considerations#unsupported-regions-user-assigned-managed-identities

There is context in the issue and response from AAD team.

cc @isolenov who last responded on the other issue.

[michalfotyga]

Following that, we will provide CVE patches until September 2023, at which time the project will be archived.

Hi folks, what does "archived" mean in practice? AAD Pod Identity, as a solution, will still be working, just no more effort will go into maintaining it, right?

[sozercan]

@michalfotyga GitHub repo will be read-only, there will be no changes made (https://docs.github.com/en/repositories/archiving-a-github-repository/archiving-repositories)