Federated credential doesn't work

[Vermyndax]

I am trying to use your code, but it's dying on the federated identity credential. I am getting this error:

│ User Assigned Identity Name: "azure-alb-identity"
│ Federated Identity Credential Name: "azure-alb-identity"): unexpected
│ status 400 (400 Bad Request) with error: BadRequest: The request format was
│ unexpected. Federated Identity Credential must specify 'issuer', 'subject'
│ and 'audience'.

[zioproto]

Hello @Vermyndax
thanks for reporting this issue.

I understand you are doing the following steps on the main branch:

cd istio-aks-example/istio-on-aks/aks-tf
terraform init -upgrade
terraform apply

Do you get that error during the terraform apply ?

Can you share what is your Terraform plan for this resource:

istio-aks-example/istio-on-aks/aks-tf/identity.tf

Lines 19 to 27 in 02e090a

	resource "azurerm_federated_identity_credential" "alb_controller" {
	name = "azure-alb-identity"
	resource_group_name = azurerm_resource_group.this.name
	audience = ["api://AzureADTokenExchange"]
	issuer = module.aks.oidc_issuer_url
	parent_id = azurerm_user_assigned_identity.alb_controller.id
	subject = "system:serviceaccount:azure-alb-system:alb-controller-sa"
	depends_on = [module.aks]
	}

Could you try to add a depends_on = [module.aks] at the above resource ? It could be it fails randomly if the value for module.aks.oidc_issuer_url is not available yet ?