Enhance managed identity authentication logic #876
Merged
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Added a using directive for
Azure.Provisioning.Rolesand refactored theConfigureForManagedIdentityAuthenticationmethod. The method now retrieves provisionable resources more efficiently and correctly uses thePrincipalIdfromUserAssignedIdentityfor setting theazureClientIdmetadata.Closes #874
This pull request updates the managed identity authentication logic for Azure Redis Cache in Dapr hosting extensions. The main change is to ensure that the correct
UserAssignedIdentityis used for authentication metadata, rather than relying on the managed environment's identity. This improves reliability and correctness when configuring Dapr components for Redis.Managed Identity Authentication Improvements:
UserAssignedIdentityfrom provisionable resources instead of using the identity fromContainerAppManagedEnvironment, ensuring the correct principal is used for Azure Redis authentication.azureClientIdmetadata value to use the principal ID from the selectedUserAssignedIdentityrather than the managed environment's identity.Dependency Updates:
Azure.Provisioning.Rolesto support working with user-assigned identities.PR Checklist
Other information