Loading...

XML

Word

Printable

Details

Type: Story
Resolution: Done
Priority: Blocker
Fix Version/s: openshift-4.14
Affects Version/s: None
Labels:
- Azure
- OCPBU-8
- ServiceDelivery
- no-doc
- no-qe

Blocked:
False
Blocked Reason:
None
Ready:
False
Epic Link:
Azure Managed Identity (Workload Identity) Support
Feature Link:
OCPSTRAT-506 - ARO Managed Identity
Git Pull Request:
https://github.com/openshift/release/pull/39906, https://github.com/openshift/release/pull/40537, https://github.com/openshift/release/pull/40551, https://github.com/openshift/release/pull/40608, https://github.com/openshift/release/pull/41039, https://github.com/openshift/release/pull/41116, https://github.com/openshift/release/pull/42080

Target Version:

openshift-4.14

SFDC Cases Links:
SFDC Cases Counter:

Description

Add an e2e test for cluster installation in manual mode using Azure workload identity.

Within the test ccoctl will create the necessary credentials infrastructure (service accounts and OIDC provider) and then we install OpenShift cluster in manual mode where operators impersonate service accounts to get required access.

Attachments

Issue Links

blocks

NE-1244 Update Azure Credentials Request manifest of the Cluster Ingress Operator to use new API field for requesting permissions

Closed

is blocked by

CCO-232 Implement ccoctl command to create infrastructure required for Azure workload identity

Closed

is depended on by

CCO-187 Azure Managed Identity (Workload Identity) Support

Closed

links to

https://github.com/openshift/release/pull/40537

openshift/cluster-ingress-operator#929: NE-1244: Use fine-grained roles in Azure CredentialsRequest

openshift/release#39906: CCO-234: Azure: add workload identity oidc workflow.

openshift/release#40537: Azure oidc to use proper environment variables for ccoctl authentication

openshift/release#40551: azure oidc: basic validation of authentication env variables

openshift/release#40608: azure oidc: specify storage-account-name on deprovision

openshift/release#41039: CCO-234: azure manual-oidc-workload-identity to use preconfigured resourcegroup

openshift/release#41116: CCO-234: azure-oidc-creds-provision: create manual credentials for capi

openshift/release#41406: Fix ipi-conf-azure-oidc-creds-provision release image issue

(7 links to)

Activity

People

Assignee:: Jeremiah Stuever

Reporter:: Andrew Butcher

Votes:: 0 Vote for this issue

Watchers:: 4 Start watching this issue

Dates

Created:: 2022/07/21 1:26 PM

Updated:: 2023/08/09 10:10 PM

Resolved:: 2023/07/10 8:54 PM