APIM Self-hosted key rotation

Question

We are attempting to run apim inside of a AKS cluster. The problem comes into key-rotation. We have found several projects to run as a cron job to accomplish this, but they are now all using the now deprecated aadpodidentity. Converting this to a workload identity has not gone well. Does anyone have any solutions for automated key rotation for apim self-hosted?

Answer 1

Hi @Jonathan Thanks for reaching out. We don't have a Microsoft standard /official method of rotating secrets. Most customers use what's available on GitHub and they customize according to their needs. If the problem with the existing samples is purely lack of workload identity, It's still in preview.

Do let me know if you have any queries.

Please 'Accept as answer' and ‘Upvote’ if it helped so that it can help others in the community looking for help on similar topics.

Answer 2

As stated in the original post, all of the Github solutions use aadpodidentity, which is now deprecated. All of the official Microsoft documents now say to migrate to workload identity. "It's still in preview" isn't an acceptable answer when the official documentation says to migrate to it.