add projected sa token config

[sonasingh46]

What this PR does / why we need it:

This PR adds helm config to project service account token for cloud controller manager which is required for workload identity.

Which issue(s) this PR fixes:

Partially Fixes kubernetes-sigs/cluster-api-provider-azure#3589

Special notes for your reviewer:

Does this PR introduce a user-facing change?

Add config to project service account token for workload identity

Additional documentation e.g., KEPs (Kubernetes Enhancement Proposals), usage docs, etc.:

None

[MartinForReal]

@sonasingh46 Could you please update the readme as well? I think additional config for workload identity is required if we want to enable workload identity for cloud provider.

[sonasingh46]

@MartinForReal -- How can I fix the test-helm errors? I updated the readme.

[MartinForReal]

/assign @lzhecheng

[feiskyer]

/lgtm

[feiskyer]

Just noticed an existing chart is bumped in this PR. Could you bump the chart version and re-generate again?

/lgtm cancel

[sonasingh46]

@feiskyer -- Done

[nilo19]

/lgtm

[MartinForReal]

/retest

[CecileRobertMichon]

/kind feature

[CecileRobertMichon]

@lzhecheng @feiskyer PTAL this is blocking CAPZ workload identity

[lzhecheng]

/approve

[k8s-ci-robot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: lzhecheng, sonasingh46

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [lzhecheng]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[andyzhangx]

@sonasingh46 we are hitting lots of following errors in the csi driver e2e test:

Release "cloud-provider-azure" does not exist. Installing it now.
Error: 1 error occurred:
	* Deployment.apps "cloud-controller-manager" is invalid: spec.template.spec.containers[0].volumeMounts[3].name: Not found: "projectedToken"
CCM cluster CIDR: 192.168.0.0/16
Installing cloud-provider-azure components via helm
WARNING: Kubernetes configuration file is group-readable. This is insecure. Location: /home/prow/go/src/sigs.k8s.io/cluster-api-provider-azure/kubeconfig
WARNING: Kubernetes configuration file is world-readable. This is insecure. Location: /home/prow/go/src/sigs.k8s.io/cluster-api-provider-azure/kubeconfig
Error: UPGRADE FAILED: failed to create resource: Deployment.apps "cloud-controller-manager" is invalid: spec.template.spec.containers[0].volumeMounts[3].name: Not found: "projectedToken"

https://storage.googleapis.com/kubernetes-jenkins/pr-logs/pull/kubernetes-sigs_azuredisk-csi-driver/2035/pull-azuredisk-csi-driver-e2e-capz/1720087417538482176/build-log.txt

it's on v1.25.6, how can I overcome this issue?

[andyzhangx]

ok, I see it's fixed by #4921