AKS Learn feedback:

[msftksadineni]

Type of issue

Missing information

Feedback

customers could overlook the step of enabling the workload identity parameter when setting up workload identity using this doc. It's mentioned in the documentation here, https://learn.microsoft.com/en-us/azure/aks/csi-secrets-store-driver#create-an-aks-cluster-with-azure-key-vault-provider-for-secrets-store-csi-driver-support but to make it more clearer, we could add a note at the beginning of Step 1 that looks like "This step assumes you have an existing AKS cluster with the Workload identity enabled. If you don't have it enabled, see https://learn.microsoft.com/en-us/azure/aks/workload-identity-deploy-cluster#update-an-existing-aks-cluster to enable it", This would prevent any confusion before users begin step 1.

Page URL

https://learn.microsoft.com/en-us/azure/aks/csi-secrets-store-identity-access#configure-workload-identity

Content source URL

https://github.com/MicrosoftDocs/azure-docs/blob/main/articles/aks/csi-secrets-store-identity-access.md

Author

@Nickomang

Document Id

f553a5a4-a20f-8efd-3712-e64112c35676

---

Document Details

⚠ Do not edit this section. It is required for learn.microsoft.com ➟ GitHub issue linking.

• ID: ec9ff712-aa4c-4e95-ba96-2405010d9f83
• Version Independent ID: f553a5a4-a20f-8efd-3712-e64112c35676
• Content: Access Azure Key Vault with the CSI Driver Identity Provider - Azure Kubernetes Service
• Content Source: articles/aks/csi-secrets-store-identity-access.md
• Service: azure-kubernetes-service
• Sub-service: aks-security
• GitHub Login: @Nickomang
• Microsoft Alias: nickoman

[PesalaPavan]

@msftksadineni
Thanks for your feedback! I've assigned this issue to the author who will investigate and update as appropriate.