Skip to content

Azure: Support for Azure Active directory Override - #263

Open
npapapietro wants to merge 2 commits into
thanos-io:mainfrom
npapapietro:azure-workload-identity-ad-host
Open

Azure: Support for Azure Active directory Override#263
npapapietro wants to merge 2 commits into
thanos-io:mainfrom
npapapietro:azure-workload-identity-ad-host

Conversation

@npapapietro

@npapapietro npapapietro commented Jul 11, 2026

Copy link
Copy Markdown
  • I added CHANGELOG entry for this change.
  • Change is not relevant to the end user.

Changes

  • Add active_directory_endpoint configuration for overriding the Microsoft Entra ID authority host, enabling authentication in sovereign environments such as Azure US Secret Cloud.
  • Add explicit workload identity authentication with use_workload_identity.
  • Ensure workload identity and client-secret authentication are mutually exclusive.
  • Preserve the existing authentication behavior when the new options are not configured.
  • Document the new Azure configuration options and add validation and credential tests.

Verification

  • Ran go test ./providers/azure.
  • Verified that existing Azure provider tests continue to pass.
  • Added tests covering workload identity configuration, mutually exclusive client-secret authentication, and custom authority endpoint handling.
  • Ran make docs to update the generated Azure configuration documentation.

@npapapietro npapapietro changed the title Support for Azure Active directory Override Azure: Support for Azure Active directory Override Jul 11, 2026
Signed-off-by: Nathan Papapietro <npapapietro95@gmail.com>
Signed-off-by: Nathan Papapietro <npapapietro95@gmail.com>
@npapapietro
npapapietro force-pushed the azure-workload-identity-ad-host branch from d8b91a6 to 2476a62 Compare July 11, 2026 18:25
@npapapietro
npapapietro marked this pull request as ready for review July 11, 2026 18:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant