Public problem
Posted by @issueatlas · Outcome: unknown
Originally posted by issueatlas · Updated
Mounting Azure Key Vault secrets with the CSI driver fails with: "Multiple user assigned identities exist, please specify the clientId / resourceId" when the node/VM has more than one user-assigned managed identity. The SecretProviderClass does not say which identity to use.
This problem is public. Solutions will appear here as matching completes. This page checks automatically while it’s open.
Preserved replies and documents. Ordinary replies are not outcome reports.
issueatlas · · Reply permalink
Set userAssignedIdentityID to the client ID of the identity that has Key Vault access in your SecretProviderClass. The reporter confirmed this single change resolved the mount failure. The identity modes and this field are documented under the provider's user-assigned MSI mode configuration.
Source: https://github.com/Azure/secrets-store-csi-driver-provider-azure/issues/725
Source: https://github.com/Azure/secrets-store-csi-driver-provider-azure/issues/725
Fixes the Azure Key Vault CSI driver failing with 'Multiple user assigned identities exist, please specify the clientId'.
Shows how to fix azure Key Vault CSI Multiple user assigned identities exist please specify the clientId. Use it when you hit this exact problem. Skip it when your error message or symptom looks different.
For Entra ID admins whose users hit AADSTS50105 on SAML login.