gateway icon indicating copy to clipboard operation
gateway copied to clipboard

improvement: handle azure workload identity authentication

Open abestel opened this issue 9 months ago • 4 comments

Title:

  • Handle azure workload identity authentication

Description: (optional) So far the Azure OpenAI integration was handling authentication using Client ID / Client Secret and Managed identity using the IMDS endpoint which is deprecated in favor of Workload Identity (using the public OAuth2 endpoint of Entra ID).

This changeset aims at handling this new authentication type.

Note that this requires reading environment variables set by the Azure runtime onto the virtual machine / pod using a workload identity. It also needs to read a file on disk (containing an assertion to use to exchange against a JWT).

Motivation: (optional)

  • managed identity authentication using IMDS is deprecated and should be replaced by Workload Identity authentication

Related Issues: (optional) /

abestel avatar Feb 17 '25 16:02 abestel