Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add docs on managed identity for Azure Blob #752

Merged
merged 1 commit into from
Jun 3, 2022

Conversation

somtochiama
Copy link
Member

Part of: website/961

This documentation is mostly on accessing Azure Blob using managed identities and aad-pod-identity

Signed-off-by: Somtochi Onyekwere somtochionyekwere@gmail.com

Comment on lines 450 to 452
Create an `AzureIdentity` object that references the identity created above:
```yaml
Copy link
Member

@hiddeco hiddeco Jun 2, 2022

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
Create an `AzureIdentity` object that references the identity created above:
```yaml
Create an `AzureIdentity` object that references the identity created above:

Comment on lines 464 to 467
Create an `AzureIdentityBinding` object that binds pods with a specific selector with the `AzureIdentity` created.
```yaml
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
Create an `AzureIdentityBinding` object that binds pods with a specific selector with the `AzureIdentity` created.
```yaml
Create an `AzureIdentityBinding` object that binds pods with a specific selector with the `AzureIdentity` created.
```yaml
Suggested change
Create an `AzureIdentityBinding` object that binds pods with a specific selector with the `AzureIdentity` created.
```yaml
Create an `AzureIdentityBinding` object that binds pods with a specific selector with the `AzureIdentity` created:
```yaml

type: 0 # user-managed identity
```

Create an `AzureIdentityBinding` object that binds pods with a specific selector with the `AzureIdentity` created.
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
Create an `AzureIdentityBinding` object that binds pods with a specific selector with the `AzureIdentity` created.
Create an `AzureIdentityBinding` object that binds pods with a specific selector with the `AzureIdentity` created:

type: 0 # user-managed identity
```

Create an `AzureIdentityBinding` object that binds pods with a specific selector with the `AzureIdentity` created.
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
Create an `AzureIdentityBinding` object that binds pods with a specific selector with the `AzureIdentity` created.
Create an `AzureIdentityBinding` object that binds pods with a specific selector with the `AzureIdentity` created:

selector: ${IDENTITY_NAME}
```

Label the source-controller correctly so that it can match an identity binding.
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
Label the source-controller correctly so that it can match an identity binding.
Label the source-controller correctly so that it can match an identity binding:

selector: ${IDENTITY_NAME}
```

Label the source-controller correctly so that it can match an identity binding.
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
Label the source-controller correctly so that it can match an identity binding.
Label the source-controller correctly so that it can match an identity binding:

aadpodidbinding: ${IDENTITY_NAME} # match the AzureIdentity name
```

Then you don't need to reference a secret
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

What does "then" refer to? "Now"?

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It refers to when you have aad-pod-identity set up and you have created the identities and labeled the SC pod

aadpodidbinding: ${IDENTITY_NAME} # match the AzureIdentity name
```

Then you don't need to reference a secret
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

What does "then" refer to? "Now"?

Signed-off-by: Somtochi Onyekwere <somtochionyekwere@gmail.com>
Copy link
Member

@stefanprodan stefanprodan left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Thanks @somtochiama

@stefanprodan stefanprodan added area/docs Documentation related issues and pull requests area/bucket Bucket related issues and pull requests labels Jun 3, 2022
@stefanprodan stefanprodan mentioned this pull request Jun 3, 2022
@stefanprodan stefanprodan merged commit b7281de into fluxcd:main Jun 3, 2022
@pjbgf pjbgf added this to the GA milestone Jun 6, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/bucket Bucket related issues and pull requests area/docs Documentation related issues and pull requests
Projects
Status: Done
Development

Successfully merging this pull request may close these issues.

None yet

4 participants