<p>I have installed <code>Azure Workload Identity</code>, e.g. like that:</p>
<p><code>az aks create -g myResourceGroup -n myAKSCluster --node-count 1 --enable-oidc-issuer --enable-workload-identity --generate-ssh-keys</code></p>
<p>This has installed a mutating webhook that is of version <code>0.15.0</code> in <code>kube-system</code>. Now when the new versions will come out, how do I keep it updated?</p>
<p>Does this happen automatically or I would need to uninstall/install again or do something like that?</p>

Ilya Chernomordik
<p>yes, addons are maintained by Microsoft. Any update/upgrades will be rolled out automatically.</p>
<p>As <a href="https://learn.microsoft.com/en-us/azure/aks/integrations#add-ons" rel="nofollow noreferrer">mentioned here</a>:</p>
<blockquote>
<p>Add-ons are a fully supported way to provide extra capabilities for
your AKS cluster. Add-ons' installation, configuration, and lifecycle
is managed by AKS</p>
</blockquote>
<p>Workload Identity is not even considered as an additional feature, but the same thing applies since it's a managed component of the cluster, and Microsoft is responsible for the lifecycle of it.</p>
<p>Generally, any out of box resource in the kube-system namespace is managed by Microsoft and will receive the updates automatically.</p>
