Skip to content

Commit 6ff24f8

Browse files
authored
Merge pull request #35147 from ameukam/kops-preset-azure
kops: add preset for tests running on Azure
2 parents e48e664 + 84bef34 commit 6ff24f8

File tree

1 file changed

+27
-0
lines changed

1 file changed

+27
-0
lines changed

config/jobs/kubernetes/kops/kops-presets.yaml

Lines changed: 27 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -44,3 +44,30 @@ presets:
4444
- name: service
4545
mountPath: /etc/service-account
4646
readOnly: true
47+
48+
- labels:
49+
preset-kops-azure-cred-wi: "true"
50+
env: # below env values are not secrets
51+
- name: AZURE_CLIENT_ID # AZURE_CLIENT_ID is being overloaded with Azure Workload ID
52+
value: "cabf5f22-ec7e-4e84-9e35-c02e57ca555d"
53+
- name: AZURE_SUBSCRIPTION_ID
54+
value: "0e46bd28-a80f-4d3a-8200-d9eb8d80cb2e"
55+
- name: AZURE_TENANT_ID
56+
value: "097f89a0-9286-43d2-9a1a-08f1d49b1af8"
57+
- name: AZURE_FEDERATED_TOKEN_FILE
58+
value: "/var/run/secrets/azure-token/serviceaccount/token"
59+
- name: AZURE_STORAGE_ACCOUNT
60+
value: "stkopsstatestore"
61+
volumes:
62+
- name: azure-token
63+
projected:
64+
defaultMode: 420
65+
sources:
66+
- serviceAccountToken:
67+
expirationSeconds: 86400
68+
path: token
69+
audience: api://AzureADTokenExchange
70+
volumeMounts:
71+
- mountPath: /var/run/secrets/azure-token/serviceaccount
72+
name: azure-token
73+
readOnly: true

0 commit comments

Comments
 (0)