rstudio / helm

Helm Resources for RStudio Products
MIT License
30 stars 27 forks source link

enable service accounts and workload identity #481

Closed jonlinca closed 1 month ago

jonlinca commented 3 months ago

Enable service accounts for Posit Workbench and Connect. Enhance Posit Package Manager, add Workbench and Connect workload identity compatibility with automountServiceAccountToken.

Use case: supports Azure Workload Identity.

Azure specifics

Specify the specific workload identity

serviceAccount:
  create: true
  annotations:
    azure.workload.identity/client-id: "guid"

Then pod labels in various spots with azure.workload.identity/use: true to allow pod to use workload identity. Source: https://learn.microsoft.com/en-us/azure/aks/workload-identity-overview?tabs=dotnet#pod-labels

CLAassistant commented 3 months ago

CLA assistant check
All committers have signed the CLA.