There is a general effort to support Azure Managed Identities in OCP.
- Enable customers to create and manage OpenShift clusters using managed identities for Azure resources (a.k.a. Managed Service Identity or MSI) for authentication.
- A customer using ARO wants to spin up an OpenShift cluster with "az aro create" without needing additional input, i.e. without the need for an AD account or service principal credentials, and the identity used is never visible to the customer and cannot appear in the cluster.
The epic tracks the work required in Azure Disk Operator to support Azure Managed Identities.
- Add support to Azure Disk Operator for the Installation and Upgrade using both UPI and IPI methods with managed identities for Azure resources / Managed Service Identity (MSI).
- Support for HyperShift and non-HyperShift clusters.