Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[FEATURE REQ] Managed Identity support for Backends #725

Open
Jeroen-VdB opened this issue Jan 31, 2025 · 1 comment
Open

[FEATURE REQ] Managed Identity support for Backends #725

Jeroen-VdB opened this issue Jan 31, 2025 · 1 comment

Comments

@Jeroen-VdB
Copy link
Contributor

Please describe the feature.

In the Azure Portal I configured my backend credentials using a Managed Identity like this:

backend_screenshot

When I extract the artifacts, the managed identity configuration is not included in the backendInformation.json file:

{
  "properties": {
    "credentials": {
      "header": {},
      "query": {}
    },
    "protocol": "http",
    "tls": {
      "validateCertificateChain": true,
      "validateCertificateName": true
    },
    "url": "https://test.com"
  }
}

Would credentials be the place to store the managed identity properties?
For example:

{
  "properties": {
    "credentials": {
      "managedIdentity": {
         "clientId":"my-managed-identity-client-id",
         "resourceId":"api://example-scope", // I used the name from the portal as a property name, which makes sense for Azure resource backends (e.g. Service Bus, Key Vault, etc), but from an app reg OAuth perspective the name "scope" would be better suited in my opinion
      },
    },
    "protocol": "http",
    "tls": {
      "validateCertificateChain": true,
      "validateCertificateName": true
    },
    "url": "https://test.com"
  }
}

I am open to contributing it myself if the maintainers find it a good idea and we can agree on the implementation details before I start developing.

Copy link

  Thank you for opening this issue! Please be patient while we will look into it and get back to you as this is an open source project. In the meantime make sure you take a look at the [closed issues](https://github.com/Azure/apiops/issues?q=is%3Aissue+is%3Aclosed) in case your question has already been answered. Don't forget to provide any additional information if needed (e.g. scrubbed logs, detailed feature requests,etc.).
  Whenever it's feasible, please don't hesitate to send a Pull Request (PR) our way. We'd greatly appreciate it, and we'll gladly assess and incorporate your changes.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant