Skip to content

Commit

Permalink
docs: update tenant id step in quick start (#612)
Browse files Browse the repository at this point in the history
Signed-off-by: Anish Ramasekar <[email protected]>
  • Loading branch information
aramase committed Oct 27, 2022
1 parent 0444b7b commit f855688
Showing 1 changed file with 3 additions and 3 deletions.
6 changes: 3 additions & 3 deletions docs/book/src/quick-start.md
Original file line number Diff line number Diff line change
Expand Up @@ -185,13 +185,13 @@ serviceaccount/workload-identity-sa created

</details>

If the AAD application is not in the same tenant as the default tenant defined during installation, then annotate the service account with the application tenant ID:
If the AAD application or user-assigned managed identity is not in the same tenant as the default tenant defined during installation, then annotate the service account with the application or user-assigned managed identity tenant ID:

```bash
kubectl annotate sa ${SERVICE_ACCOUNT_NAME} -n ${SERVICE_ACCOUNT_NAMESPACE} azure.workload.identity/tenant-id="${APPLICATION_TENANT_ID}" --overwrite
kubectl annotate sa ${SERVICE_ACCOUNT_NAME} -n ${SERVICE_ACCOUNT_NAMESPACE} azure.workload.identity/tenant-id="${APPLICATION_OR_USER_ASSIGNED_IDENTITY_TENANT_ID}" --overwrite
```

## 6. Establish federated identity credential between the AAD application and the service account issuer & subject
## 6. Establish federated identity credential between the identity and the service account issuer & subject

<details>
<summary>Azure Workload Identity CLI</summary>
Expand Down

0 comments on commit f855688

Please sign in to comment.