How can I use azure workload identity with different resource groups for snapshotter and storage

[papanito]

We want to use Azure Managed Identity for creating velero backups: https://github.com/vmware-tanzu/velero-plugin-for-microsoft-azure/blob/main/README.md#option-3-use-azure-ad-workload-identity

Currently our setup is that we have 2 different resource groups - 1 for the storage account and 1 for aks (disk snaphost). Looking trough the documentation, this seems not a supported setup for Azure Managed Identity!?

The main problem I see, is that we only can specify one resource group in ./credentials-velero

Is that correct or is there a ways where we can use Azure Managed Identity for our use case

[blackpiglet]

@anshulahuja98
Could you please take a look?

[papanito]

I found a way. The docu is a bit misleading. Will post more details on Monday

[anshulahuja98]

Will wait for @papanito to get back before I investigate this further.
Any update to docs will be appreciated @papanito!