Do you have to use az aks pod-identity add CLI in order to create pod-identity?

[orionstudt]

I have my cluster configured for pod-identity with a specific user-assigned identity.

I want to be able to create the AzureIdentity and the AzureIdentityBinding from within a helmchart because the namespace is fully managed by the helmchart.

If I run the az aks pod-identity add command manually than I can see the identity that I want to use get added to the podIdentityProfile under userAssignedIdentities for the cluster.

But if I create the pod-identity via YAML in the helmchart, the podIdentityProfile never gets updated as it should and as such my NMI containers log Identity not found because the identity it needs isn't present.

Is this expected or should I be able to create a pod-identity via YAML?