-
Task
-
Resolution: Unresolved
-
Normal
-
None
-
None
-
None
-
None
-
False
-
None
-
False
-
OCPSTRAT-979 - Integrate Azure Workload Identities and Managed Service Identity (MSI) for Operators (control plane/data plane) - Part I
-
-
-
Hypershift Sprint 263
-
0
-
0
-
0
Filewatcher was initially created during development of HyperShift's managed Azure service. Due to the Azure Cloud API authentication type used by this service, client certificate, whenever the certificate rotates, the pod needs to reauthenticate with Azure since Azure SDK for Go currently does not support re-authenticating with Azure with the new certificate.
This functionality was individually added to several OpenShift repos - CNCC, CIO, and CIRO - through the PRs mentioned below:
- https://github.com/openshift/cloud-network-config-controller/pull/156
- https://github.com/openshift/cluster-ingress-operator/pull/1151
- https://github.com/openshift/cluster-image-registry-operator/pull/1155
These repos should use the same codebase for this functionality rather than having 3 different instances of filewatcher.