Using WorkloadIdentity for Azure DNS or Azure Private DNS

To use WorkloadIdentity for Azure DNS or Azure Private DNS, you can create a WorkloadIdentity resource in the project namespace in the Garden cluster with the necessary configuration for Azure authentication.

Note that the spec.targetSystem.type has to be set to azure although the type of the DNS provider is azure-dns or azure-privatedns. This allows to use the same WorkloadIdentity for different types of Azure resources, e.g., for infrastructure purposes and for DNSProvider purposes.

To create a WorkloadIdentity, follow the instructions in the Azure Workload Identity Federation documentation of the Azure Provider extension.

For the required permissions, please refer to the Azure DNS Provider and the Azure Private DNS Provider.