fluxcd
/
kustomize-controller
mirror of https://github.com/fluxcd/kustomize-controller.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #1152 from dipti-pai/remove-deprecated-aad-podidentity-ref 

Remove deprecated aad pod identity from API docs
This commit is contained in:
Stefan Prodan 2024-05-04 08:14:34 +03:00 committed by GitHub
parent f0f9b032b0 fc663de87f
commit 99792deb25
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 0 additions and 26 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

26
docs/spec/v1/kustomizations.md
View File

@ -1412,32 +1412,6 @@ patches:
azure.workload.identity/use: "true"
```
##### AAD Pod Identity
While making use of [AAD Pod Identity](https://github.com/Azure/aad-pod-identity),
you can bind a Managed Identity to Flux's kustomize-controller. Once the
`AzureIdentity` and `AzureIdentityBinding` for this are created, you can patch
the controller's Deployment with the `aadpodidbinding` label set to the
selector of the binding.
```yaml
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: kustomize-controller
namespace: flux-system
spec:
template:
metadata:
labels:
aadpodidbinding: sops-akv-decryptor # match the AzureIdentityBinding selector
```
In addition to this, the [default SOPS Azure Key Vault flow is
followed](https://github.com/mozilla/sops#encrypting-using-azure-key-vault),
allowing you to specify a variety of other environment variables.
##### Kubelet Identity
If the kubelet managed identity has `Decrypt` permissions on Azure Key Vault,