Merge pull request #5667 from nojnhuh/fic-audience

Add audience for FIC create

Author: nojnhuh

scripts/kind-with-registry.sh

@@ -191,13 +191,15 @@ EOF
       --identity-name "${USER_IDENTITY}" \
       -g "${AZWI_RESOURCE_GROUP}" \
       --issuer "${SERVICE_ACCOUNT_ISSUER}" \
+      --audiences "api://AzureADTokenExchange" \
       --subject "system:serviceaccount:capz-system:capz-manager" --output none --only-show-errors
 
     echo "Creating federated credentials for aso-federated-identity"
     az identity federated-credential create -n "aso-federated-identity" \
       --identity-name "${USER_IDENTITY}" \
       -g "${AZWI_RESOURCE_GROUP}" \
       --issuer "${SERVICE_ACCOUNT_ISSUER}" \
+      --audiences "api://AzureADTokenExchange" \
       --subject "system:serviceaccount:capz-system:azureserviceoperator-default" --output none --only-show-errors
   fi
 }