Add IsMtlsPopSupportedByHost to ManagedIdentitySourceResult#6026
Open
bgavrilMS wants to merge 2 commits into
Open
Add IsMtlsPopSupportedByHost to ManagedIdentitySourceResult#6026bgavrilMS wants to merge 2 commits into
bgavrilMS wants to merge 2 commits into
Conversation
During IMDS discovery, after the v1 probe succeeds, fetch compute metadata from /metadata/instance/compute to determine if the host VM supports mTLS PoP. The flag is true when the VM is Windows and has a TVM (TrustedLaunch) or CVM (ConfidentialVM) security profile. - Add internal ComputeMetadataResponse/ComputeSecurityProfile models - Add ImdsComputeMetadataManager to fetch and evaluate compute metadata - Add IsMtlsPopSupportedByHost public property on ManagedIdentitySourceResult - Add 5 tests covering Windows TVM/CVM, Linux, no security profile, 404 Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
bgavrilMS
commented
May 22, 2026
| } | ||
| catch (OperationCanceledException) | ||
| { | ||
| throw; |
bgavrilMS
commented
May 22, 2026
| } | ||
| catch (Exception ex) | ||
| { | ||
| logger.Info($"[Managed Identity] IMDS compute metadata request failed with exception: {ex.Message}"); |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
During IMDS discovery (GetManagedIdentitySourceAsync), after the v1 probe succeeds, fetch compute metadata from /metadata/instance/compute to determine if the host VM supports mTLS PoP.
New public API
IsMtlsPopSupportedByHost is true when:
Returns false when:
Implementation
Tests (5 new)
All 388 ManagedIdentity tests pass.