Why do we need to create a Service Principal to assign to the cluster

[mtarng]

Topic: Following the first workload guide and documentation, we have to create a SP to assign to a cluster.

Question: Could we instead use the output from a SystemAssigned identity? https://www.terraform.io/docs/providers/azurerm/r/kubernetes_cluster.html#principal_id

[sarath-p]

The identity attribute in tf provider enables Azure Managed Identity functionality, which is not supported in bedrock yet. This PR https://github.com/microsoft/bedrock/pull/1368 implements MSI.

[jmspring]

I think this needs to be part of the discussion of MSI rework #1355