1.5-rc2
As part of our official 1.5 release that's coming soon, we have made 1.5-rc2
available for testing and feedback. The following file contains the deployment manifest for trying out the rc -
kubectl apply -f https://raw.githubusercontent.com/Azure/aad-pod-identity/master/deploy/infra/master/replicaset/deployment-rbac.yaml
Features and improvements included:
- Support for system assigned identity clusters.
- Improved error handling by including states(CREATED, ASSIGNED, UNASSIGNED) for AzureAssignedIdentity.
- Improved performance by assigning identities to nodes in parallel.
- Leader election and scaled up to 2 replicas for MIC.
- Health probe and reporting of states(Active, Not Active) for MIC and NMI.
- Retries in NMI for more resilient token fetching.
- Update to latest azure sdk.
- Application whitelisting capability.
- Enable caching to reduce load on kube-api server.
- Ability to use separate service principal instead of cluster service principal(
azure.json
).
- Cleanup iptable rules and chains on exit.
- Other bug fixes and improvements.
Please try it out and provide feedback/open issues.