Ansible on Azure - AKS Legacy Authentication Retirement

Updated

Summary

Microsoft is retiring legacy authentication for Azure Monitor Container Insights on September 30, 2026. Customers of Red Hat Ansible Automation Platform on Microsoft Azure may receive warnings or notifications from Microsoft regarding this change. No customer action is required. Red Hat will complete the necessary migration to managed identity authentication on all affected clusters before the deadline.

What Is Happening

Microsoft is deprecating the legacy certificate-based authentication method used by Azure Monitor Container Insights in favor of managed identity authentication. This change affects how monitoring data is sent from the cluster to Azure Monitor and does not affect Ansible Automation Platform functionality.

Customers may see advisory notifications in the Azure portal or via email from Microsoft indicating that their cluster is using legacy authentication for Container Insights. These warnings can be safely ignored — Red Hat is aware of the change and is managing the migration.

Customer Impact

  • No action is required by customers.
  • No downtime is expected as a result of this migration.
  • The migration is an infrastructure-level change to how the cluster authenticates with Azure Monitor. It does not affect AAP application functionality, automation jobs, or user-facing behavior.

What Red Hat Is Doing

Red Hat Site Reliability Engineering (SRE) will migrate all Ansible Automation Platform on Azure clusters from legacy authentication to managed identity authentication for Container Insights prior to the September 30, 2026 deadline. The clusters already support workload identity, so this migration enables managed identity specifically for Azure Monitor.

Microsoft References

For additional details on the legacy authentication retirement and managed identity migration, see the following Microsoft documentation:

Product(s)
Category
Article Type