File tree Expand file tree Collapse file tree 1 file changed +27
-0
lines changed
config/jobs/kubernetes/kops Expand file tree Collapse file tree 1 file changed +27
-0
lines changed Original file line number Diff line number Diff line change @@ -44,3 +44,30 @@ presets:
44
44
- name : service
45
45
mountPath : /etc/service-account
46
46
readOnly : true
47
+
48
+ - labels :
49
+ preset-kops-azure-cred-wi : " true"
50
+ env : # below env values are not secrets
51
+ - name : AZURE_CLIENT_ID # AZURE_CLIENT_ID is being overloaded with Azure Workload ID
52
+ value : " cabf5f22-ec7e-4e84-9e35-c02e57ca555d"
53
+ - name : AZURE_SUBSCRIPTION_ID
54
+ value : " 0e46bd28-a80f-4d3a-8200-d9eb8d80cb2e"
55
+ - name : AZURE_TENANT_ID
56
+ value : " 097f89a0-9286-43d2-9a1a-08f1d49b1af8"
57
+ - name : AZURE_FEDERATED_TOKEN_FILE
58
+ value : " /var/run/secrets/azure-token/serviceaccount/token"
59
+ - name : AZURE_STORAGE_ACCOUNT
60
+ value : " stkopsstatestore"
61
+ volumes :
62
+ - name : azure-token
63
+ projected :
64
+ defaultMode : 420
65
+ sources :
66
+ - serviceAccountToken :
67
+ expirationSeconds : 86400
68
+ path : token
69
+ audience : api://AzureADTokenExchange
70
+ volumeMounts :
71
+ - mountPath : /var/run/secrets/azure-token/serviceaccount
72
+ name : azure-token
73
+ readOnly : true
You can’t perform that action at this time.
0 commit comments