Skip to content

Support vm_managed_identity for Azure #2608

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
May 7, 2025

Conversation

r4victor
Copy link
Collaborator

@r4victor r4victor commented May 7, 2025

Closes #2606

This PR adds a new vm_managed_identity property to the Azure backend config:

- type: azure
  ...
  vm_managed_identity: dstack-rg/my-managed-identity

The specified managed identity is assigned to provisioned VMs, which can be used to access Azure resources from runs without passing credentials explicitly.

New permissions

The changes require new Azure permissions for the Azure backend credentials:

"Microsoft.ManagedIdentity/userAssignedIdentities/assign/action"
"Microsoft.ManagedIdentity/userAssignedIdentities/read"

@r4victor r4victor merged commit f00aeae into master May 7, 2025
25 checks passed
@r4victor r4victor deleted the issue_2606_azure_managed_identity branch May 7, 2025 10:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

[Feature]: Azure Managed Identity support for dstack instances
1 participant