Managed Identity

Question

Does ManagedIdentityCredential Class , needs write access to environment (VM,AKS etc) from where it is called?

I have used Managed Identity and deployed in AKS pod with readonly Access to server. It is giving me following error

"FileNotFoundError: [Errno 2] No usable temporary directory found in ['/tmp', '/var/tmp', '/usr/tmp']"

Answer 1

It depends on what actions you are trying to perform. Some will only require Read while others will require write access. It will most definitely need access to the resource group that the VM or any other service is residing in.

Attempts authentication using a managed identity that has been assigned to the deployment environment. This authentication type works for all Azure hosted environments that support managed identity. More information about configuring managed identities can be found here: https://docs.microsoft.com/azure/active-directory/managed-identities-azure-resources/overview

More information:

ManagedIdentityCredential Class

https://learn.microsoft.com/en-us/dotnet/api/azure.identity.managedidentitycredential?view=azure-dotnet