Uploaded image for project: 'OpenShift Request For Enhancement'
  1. OpenShift Request For Enhancement
  2. RFE-7031

Request for Unified Interface for Workload Identity Across Azure and AWS in OpenShift4

XMLWordPrintable

    • False
    • None
    • False
    • Not Selected

      1. Proposed title of this feature request
      ->
      Request to have a consistent interface for workload identity on AWS and Azure in RHOCP cluster.

      2. What is the nature and description of the request?
      ->
      Currently, an azure mutatingConfigurationWebhook listens for a label on a pod:
      ~~~
          objectSelector:
            matchLabels:
              azure.workload.identity/use: "true"
      ~~~

      While an aws identity pod webhook listens for a namespace label :
      ~~~
          namespaceSelector:
            matchExpressions:
              - key: openshift.io/run-level 
                operator: NotIn
                values:
                  - "0"
      ~~~

      3. Why does the customer need this? (List the business requirements here)
      ->
      Customer wants to have a consistent interface to use workload identity, independently of the CSP where cloud resources are being manipulated.

      Additionally, customer want the workload identity feature not to use "run-levels" as this is a deprecated feature (according to this 2021 article https://www.redhat.com/en/blog/exactly-what-are-openshift-runlevels-and-should-you-really-use-them)

      4. List any affected packages or components.

              julim Ju Lim
              rhn-support-sdharma Suruchi Dharma
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated:
                Resolved: