Skip to content

Conversation

@mwalser
Copy link
Member

@mwalser mwalser commented Jun 6, 2025

Description

Add the option to provide a custom client-id when using workload identity based authentication. Since the DefaultAzureCredentialOptions is not providing an option to do this, use the AZURE_CLIENT_ID environment variable.

This environment variable is then evaluated by the WorkloadIdentityCredential.

Type of change

  • New feature (non-breaking change which adds functionality)

Documentation

  • the change is mentioned in the ## [Unreleased] section of <plugin>/CHANGELOG.md
  • the configuration options in <plugin>/README.adoc were updated

@d-rk
Copy link
Collaborator

d-rk commented Jun 12, 2025

@mwalser just out of curiosity, whats the use-case for this?

@mwalser
Copy link
Member Author

mwalser commented Jun 12, 2025

@d-rk It's useful when you have a cross-tenant workload identity setup.

For example, we have an App Registration for data ingestion. Customers can then create a service principal for that App in their Tenant and assign it the permission to read data from an event hub. To access that EventHub using kafkactl we need to set the tenant-id and client-id (of the service principal in the customer tenant).

@d-rk d-rk merged commit e1482ab into deviceinsight:main Jun 16, 2025
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants