Generated on: August 29, 2026 Target period: Within the last 24 hours Processing mode: Details Mode Number of updates: 2 items
Published: August 28, 2026 20:25:22 UTC Link: Generally Available: Workload identity support for Azure Files CSI driver (SMB) in Azure
Update ID: 570120 Data source: Azure Updates API
Categories: Launched, Storage, Compute, Containers, Azure Files, Azure Kubernetes Service (AKS), Security, Feature
Summary:
What was updated
Workload identity support is now generally available for the Azure Files CSI driver (SMB) in Azure Kubernetes Service (AKS).
Key changes or new features
The Azure Files CSI driver now enables pod-level authentication to SMB file shares using workload identity. Previously, only managed identity was supported, which limited authentication granularity. With this update, each Kubernetes pod can authenticate to Azure Files SMB shares using its own workload identity, improving security and access control. This enhancement aligns with Azure’s best practices for identity management and enables more secure, fine-grained authentication scenarios for containerized workloads.
Target audience affected
AKS developers, DevOps engineers, and IT professionals who manage Kubernetes clusters and require secure access to Azure Files SMB shares from their workloads.
Important notes if any
To leverage this feature, clusters must be configured for workload identity. This update is particularly relevant for organizations with multi-tenant clusters or those needing strict access controls at the pod level. Review the official documentation for configuration steps and compatibility requirements.
For more details, see the official update: https://azure.microsoft.com/updates?id=570120
Details:
Azure Update Report: Workload Identity Support for Azure Files CSI Driver (SMB) in Azure Kubernetes Service (AKS)
Background and Purpose of the Update
The Azure Files Container Storage Interface (CSI) driver enables Kubernetes workloads running in Azure Kubernetes Service (AKS) to mount Azure Files shares as persistent volumes. Previously, authentication for mounting Azure Files SMB shares relied on managed identity at the node or cluster level, which limited granularity and flexibility. This update introduces workload identity support, allowing pod-level authentication to SMB file shares. The purpose is to enhance security and provide more granular access control, aligning with modern Kubernetes best practices for identity management.
Specific Features and Detailed Changes
With this update, the Azure Files CSI driver (SMB) now supports workload identity, enabling each pod to authenticate directly to Azure Files using its own identity. This eliminates the need for sharing managed identities across multiple workloads and allows for distinct access permissions per workload. The change brings parity with other Azure storage drivers and improves compliance with least privilege principles.
Technical Mechanisms and Implementation Methods
The technical implementation leverages Azure’s workload identity framework, which integrates Kubernetes service accounts with Azure Active Directory (AAD) identities. When a pod is configured with a Kubernetes service account mapped to an AAD identity, the Azure Files CSI driver uses this identity to authenticate to Azure Files SMB shares. This is achieved through the CSI driver’s support for workload identity tokens, which are exchanged for AAD access tokens at mount time. The process ensures that each pod mounts the file share using its own credentials, without relying on node-level managed identities.
Use Cases and Application Scenarios
Important Considerations and Limitations
Integration with Related Azure Services
This update tightly integrates with Azure Active Directory for identity management and Azure Files for storage provisioning. It also aligns with AKS’s workload identity features, enabling seamless authentication and authorization workflows across Azure services. The CSI driver acts as the bridge between Kubernetes and Azure Files, leveraging AAD for secure access.
Summary Sentence
The Azure Files CSI driver (SMB) in AKS now supports workload identity, enabling secure pod-level authentication to SMB file shares and enhancing access control, security, and integration with Azure Active Directory.
Published: August 28, 2026 15:45:32 UTC Link: Generally Available: Azure VM Image Builder in sovereign and air-gapped clouds
Update ID: 570105 Data source: Azure Updates API
Categories: Launched, Compute, Azure VM Image Builder, Features, Management, Operating System, Regions & Datacenters, SDK and Tools, Services, Feature
Summary:
What was updated
Azure VM Image Builder is now generally available in sovereign and air-gapped Azure clouds, including Azure Government, China North 3, Azure Government Secret, and Azure Government Top Secret.
Key changes or new features
The managed Azure VM Image Builder service can now be used in highly regulated and isolated cloud environments. This enables automated creation, customization, and management of VM images within sovereign and air-gapped clouds, ensuring compliance with strict security and regulatory requirements.
Target audience affected
This update is relevant for developers, IT professionals, and organizations operating in government, defense, and other highly regulated sectors that utilize sovereign or air-gapped Azure environments.
Important notes if any
Organizations can now standardize VM image creation processes across both public and sovereign Azure clouds, improving consistency and compliance. The service supports integration with existing DevOps pipelines and security controls. This release ensures that image-building capabilities are available even in environments with restricted internet connectivity.
For more details, see the official update: https://azure.microsoft.com/updates?id=570105
Details:
Azure Update Report
Title: Generally Available: Azure VM Image Builder in sovereign and air-gapped clouds
Background and Purpose of the Update: Azure VM Image Builder is a managed service that automates the creation, customization, and management of virtual machine (VM) images. Previously, this service was primarily available in public Azure regions. The update announces its general availability in sovereign and air-gapped cloud environments, specifically Azure Government, China North 3, Azure Government Secret, and Azure Government Top Secret. The purpose of this update is to extend image-building capabilities to customers operating in highly regulated, isolated, or compliance-driven environments, enabling consistent image management across both public and sovereign Azure clouds.
Specific Features and Detailed Changes: With this update, Azure VM Image Builder is now accessible in the following regions:
This expansion allows IT professionals to use the same managed image-building workflows and automation features in sovereign and air-gapped environments as in public Azure. Key features include:
Technical Mechanisms and Implementation Methods: Azure VM Image Builder leverages Azure Resource Manager (ARM) templates and REST APIs to define image-building pipelines. The service orchestrates the provisioning of temporary build resources, applies customizations (such as software installation, configuration, and security hardening), and outputs managed images to Azure Compute Gallery or other supported repositories. In sovereign and air-gapped clouds, the service operates within the isolated Azure infrastructure, ensuring compliance with regional security and data sovereignty requirements.
Use Cases and Application Scenarios:
Important Considerations and Limitations:
Integration with Related Azure Services: Azure VM Image Builder integrates with Azure Compute Gallery for managed image storage and distribution. It also works with Azure Resource Manager for automation and orchestration. In sovereign and air-gapped clouds, integration is subject to regional compliance and isolation policies, but the service maintains consistent workflows with public Azure, facilitating cross-region image management where permitted.
Summary Sentence:
Azure VM Image Builder is now generally available in Azure Government, China North 3, Azure Government Secret, and Azure Government Top Secret, enabling automated, managed VM image creation and customization in sovereign and air-gapped Azure environments.
This report was automatically generated - 2026-08-29 03:01:39 UTC