Major 1. Proposed title of this feature request
Keyless authentication in Quay requires setting up Robot Federation for all namespaces using individual namespaces in a cluster instead of *
2. What is the nature and description of the request?
We are using `QuayAccessToken` and an `ExternalSecret` to enable keyless authentication for images to pull from our Quay registry.
3. Why does the customer need this?
To integrate keyless authentication with a Robot account using Robo Federation, we need to set the subject & issuer. When integrating for a single namespace, it works as follows: ``` system:serviceaccount:testframework:pipeline ``` However, we want to avoid setting this for each namespace in the cluster. Instead, we aim to use a wildcard (`*`) to apply it to all namespaces in the Robo Federation subject value: ``` system:serviceaccount:*:pipeline ``` Unfortunately, this approach is not working as expected.
4. List any affected packages or components.
quay
