[CCO-234] Azure workload identity e2e testing - Red Hat Issue Tracker

Type: Story
Resolution: Done
Priority: Blocker
Fix Version/s: openshift-4.14
Affects Version/s: None
Labels:
- Azure
- OCPBU-8
- ServiceDelivery
- no-doc
- no-qe

Work Type:
Strategic Product Work
Blocked:
False
Blocked Reason:
None
Ready:
False
Epic Link:
Azure Managed Identity (Workload Identity) Support
Git Pull Request:
https://github.com/openshift/release/pull/39906, https://github.com/openshift/release/pull/40537, https://github.com/openshift/release/pull/40551, https://github.com/openshift/release/pull/40608, https://github.com/openshift/release/pull/41039, https://github.com/openshift/release/pull/41116, https://github.com/openshift/release/pull/42080

Target Version:

openshift-4.14

SFDC Cases Links:
SFDC Cases Open:
SFDC Cases Counter:

Add an e2e test for cluster installation in manual mode using Azure workload identity.

Within the test ccoctl will create the necessary credentials infrastructure (service accounts and OIDC provider) and then we install OpenShift cluster in manual mode where operators impersonate service accounts to get required access.

blocks

NE-1244 Update Azure Credentials Request manifest of the Cluster Ingress Operator to use new API field for requesting permissions

Closed

is blocked by

CCO-232 Implement ccoctl command to create infrastructure required for Azure workload identity

Closed

is depended on by

CCO-187 Azure Managed Identity (Workload Identity) Support

Closed

links to

https://github.com/openshift/release/pull/40537

openshift/cluster-ingress-operator#929: NE-1244: Use fine-grained roles in Azure CredentialsRequest

openshift/release#39906: CCO-234: Azure: add workload identity oidc workflow.

openshift/release#40537: Azure oidc to use proper environment variables for ccoctl authentication

openshift/release#40551: azure oidc: basic validation of authentication env variables

openshift/release#40608: azure oidc: specify storage-account-name on deprovision

openshift/release#41039: CCO-234: azure manual-oidc-workload-identity to use preconfigured resourcegroup

openshift/release#41116: CCO-234: azure-oidc-creds-provision: create manual credentials for capi

openshift/release#41406: Fix ipi-conf-azure-oidc-creds-provision release image issue

(7 links to)

Assignee:: Jeremiah Stuever

Reporter:: Andrew Butcher

Votes:: 0 Vote for this issue

Watchers:: 4 Start watching this issue

Created:: 2022/07/21 1:26 PM

Updated:: 2024/09/04 8:01 PM

Resolved:: 2023/07/10 8:54 PM

Details

Description

Attachments

Issue Links

Easy Agile Planning Poker

Activity

People

Dates

Hide