Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Hello !
First of all, thanks for this project ! We were having problems with argocd syncing mutated secrets with our ancient controller and this will be an amazing piece of code to run in our clusters :)
But since we are on azure and use managed aks we also use the Managed System Identities to authenticate against the Vault API, so the aim of this PR is to be able to get this identity on aks and send the token to the vault
I've basically copy/pasted the kubernetes auth method and changed the jwt retrival with a curl to azure services.
I'm quite not sure about the name of the environment variables, I tried to keep a cohesion with what was existing
I've updated the chart and the readme accordingly but if there's anything wrong I can correct that :)
Also this support only managed
system
identities present on azure VM and VMScaleSet Microsoft docThanks :)