ac76c8b375
chore: use goimports for import grouping ( #809 )
...
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2023-03-28 09:35:35 -07:00
8c37dc1d8b
feat: remove pod/service account labeled check in webhook ( #720 )
...
With the objectselector set in mwh, only pods that have the label
`azure.workload.identity/use: "true"` will be sent to the webhook for
mutation. We no longer need the check for pod/service account labeled.
This also changes the default behavior when service account is not
found; the mutation is done with the defaults and client id env var will
be empty.
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2023-01-26 20:01:26 +00:00
d397826a77
feat: add `azwi podidentity` detect subcommand ( #432 )
...
* chore: use controller-runtime client instead of kubernetes.Interface
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
* feat: implement detection
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
* feat: complete logic for writing to file
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
* refactor: define localobject interface
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
* test: add unit test for podidentity pkg
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
* review feedback
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
* chore: make list return slice and refactor to unit test
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2022-05-06 01:45:17 +05:30
fe8cc7244a
chore: change variable name from pod to workload identity ( #421 )
...
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2022-04-18 16:29:00 +00:00
465fef5ed3
feat: add --token-expiration flag in azwi serviceaccount create ( #204 )
...
Signed-off-by: GitHub <noreply@github.com>
2021-10-12 16:52:42 +00:00
35bd704346
feat: add initial framework for azwi-cli ( #180 )
...
* feat: add azure-workload-identity CLI
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
feat: add service account and federated credential creation
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
* feat: add auth_method flag and cli option
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2021-10-08 10:24:04 -07:00
Anish Ramasekar
Ernest Wong