https://paulyu.dev/categories/identity/Recent content in Identity on PAUL'S BLOGHugoenFri, 25 Aug 2023 13:00:00 +0000https://paulyu.dev/article/cross-tenant-workload-identity-on-aks/Fri, 25 Aug 2023 13:00:00 +0000https://paulyu.dev/article/cross-tenant-workload-identity-on-aks/<h2 id="introduction">Introduction</h2> <p>An interesting use case for Workload Identity came up recently. I was asked if a Pod in an AKS cluster that was deployed in one tenant can access Azure resources within another tenant.</p> <p>I&rsquo;ve configured Workload Identity on AKS many times, and I thought &ldquo;in theory&rdquo; it should &ldquo;just work&rdquo;, but I never tested it across tenants. So I decided to give it a try.</p> <p><strong>TL;DR: Yes, it does work.</strong></p>