Skip to content

NLB-6626: Add documentation for dataplane managed identity#1748

Draft
rnandwal-f5 wants to merge 3 commits intomainfrom
NLB-6626-use-mi-at-dataplane
Draft

NLB-6626: Add documentation for dataplane managed identity#1748
rnandwal-f5 wants to merge 3 commits intomainfrom
NLB-6626-use-mi-at-dataplane

Conversation

@rnandwal-f5
Copy link
Contributor

Summary

This MR adds a quickstart guide for using managed identity (MI) from the NGINXaaS dataplane to access Azure resources via the Instance Metadata Service (IMDS).

Proposed changes

  • Add a quickstart guide for using managed identity (MI) from the NGINXaaS dataplane to access Azure resources via IMDS.
  • Document the requirement for system-assigned managed identity (system MI) support only.
  • Provide a sample njs script to fetch tokens from IMDS and query Azure Blob Storage.
  • Include security considerations for IMDS endpoint exposure.

Checklist

Before sharing this pull request, I completed the following checklist:

Footnotes

  1. Potentially sensitive information includes personally identify information (PII), authentication credentials, and live URLs. Refer to the style guide for guidance about placeholder content.

Add quickstart guide explaining how to use managed identity from
NGINXaaS dataplane to access Azure resources via IMDS.

Includes:
- Overview of MI support on dataplane
- Sample njs script to fetch tokens and query blob storage
- Security considerations for IMDS endpoint exposure
@github-actions github-actions bot added documentation Improvements or additions to documentation product/nginxaas-azure Issues related to NGINX as a Service for Azure labels Feb 26, 2026
… identity

Update quickstart to state that managed identity access from dataplane only works with system-assigned identities, and reference managed identity docs for legacy deployment details.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

documentation Improvements or additions to documentation product/nginxaas-azure Issues related to NGINX as a Service for Azure

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant