based on: https://github.com/orgs/deployKF/discussions/58
After checking the Azure docs, I think there is a typo in the cert-manager AKS docs.
Based on Azure's docs, the required labels/annotations to use AKS Workload Identity are:
- Pod - LABEL:
azure.workload.identity/use: "true"
- ServiceAccount - ANNOTATION:
azure.workload.identity/client-id: "...."
Currently, we only provide deploykf_dependencies.cert_manager.controller.serviceAccount.annotations, which sets ServiceAccount annotations. It should be relatively straightforward for us to add a deploykf_dependencies.cert_manager.controller.podLabels value in the next release.
based on: https://github.com/orgs/deployKF/discussions/58
After checking the Azure docs, I think there is a typo in the cert-manager AKS docs.
Based on Azure's docs, the required labels/annotations to use AKS Workload Identity are:
azure.workload.identity/use: "true"azure.workload.identity/client-id: "...."Currently, we only provide
deploykf_dependencies.cert_manager.controller.serviceAccount.annotations, which sets ServiceAccount annotations. It should be relatively straightforward for us to add adeploykf_dependencies.cert_manager.controller.podLabelsvalue in the next release.