-
Feature Request
-
Resolution: Done
-
Normal
-
None
-
None
-
False
-
None
-
False
-
Not Selected
-
-
-
-
1. Proposed title of this feature request
->
Request to have a consistent interface for workload identity on AWS and Azure in RHOCP cluster.
2. What is the nature and description of the request?
->
Currently, an azure mutatingConfigurationWebhook listens for a label on a pod:
~~~
objectSelector:
matchLabels:
azure.workload.identity/use: "true"
~~~
While an aws identity pod webhook listens for a namespace label :
~~~
namespaceSelector:
matchExpressions:
- key: openshift.io/run-level
operator: NotIn
values:
- "0"
~~~
3. Why does the customer need this? (List the business requirements here)
->
Customer wants to have a consistent interface to use workload identity, independently of the CSP where cloud resources are being manipulated.
Additionally, customer want the workload identity feature not to use "run-levels" as this is a deprecated feature (according to this 2021 article https://www.redhat.com/en/blog/exactly-what-are-openshift-runlevels-and-should-you-really-use-them)
4. List any affected packages or components.
- relates to
-
RFE-7030 Request for Multi-Cloud Workload Identity Support for OpenShift Pods (Azure & AWS)
-
- Refinement
-