Skip to content

Conversation

@somtochiama
Copy link
Member

Part of: website/961

This documentation is mostly on accessing Azure Blob using managed identities and aad-pod-identity

Signed-off-by: Somtochi Onyekwere [email protected]

Comment on lines 450 to 452
Create an `AzureIdentity` object that references the identity created above:
```yaml
Copy link
Member

@hiddeco hiddeco Jun 2, 2022

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
Create an `AzureIdentity` object that references the identity created above:
```yaml
Create an `AzureIdentity` object that references the identity created above:

Comment on lines 464 to 467
Create an `AzureIdentityBinding` object that binds pods with a specific selector with the `AzureIdentity` created.
```yaml
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
Create an `AzureIdentityBinding` object that binds pods with a specific selector with the `AzureIdentity` created.
```yaml
Create an `AzureIdentityBinding` object that binds pods with a specific selector with the `AzureIdentity` created.
```yaml
Suggested change
Create an `AzureIdentityBinding` object that binds pods with a specific selector with the `AzureIdentity` created.
```yaml
Create an `AzureIdentityBinding` object that binds pods with a specific selector with the `AzureIdentity` created:
```yaml

type: 0 # user-managed identity
```

Create an `AzureIdentityBinding` object that binds pods with a specific selector with the `AzureIdentity` created.
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
Create an `AzureIdentityBinding` object that binds pods with a specific selector with the `AzureIdentity` created.
Create an `AzureIdentityBinding` object that binds pods with a specific selector with the `AzureIdentity` created:

type: 0 # user-managed identity
```

Create an `AzureIdentityBinding` object that binds pods with a specific selector with the `AzureIdentity` created.
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
Create an `AzureIdentityBinding` object that binds pods with a specific selector with the `AzureIdentity` created.
Create an `AzureIdentityBinding` object that binds pods with a specific selector with the `AzureIdentity` created:

selector: ${IDENTITY_NAME}
```

Label the source-controller correctly so that it can match an identity binding.
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
Label the source-controller correctly so that it can match an identity binding.
Label the source-controller correctly so that it can match an identity binding:

selector: ${IDENTITY_NAME}
```

Label the source-controller correctly so that it can match an identity binding.
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
Label the source-controller correctly so that it can match an identity binding.
Label the source-controller correctly so that it can match an identity binding:

aadpodidbinding: ${IDENTITY_NAME} # match the AzureIdentity name
```

Then you don't need to reference a secret
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

What does "then" refer to? "Now"?

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It refers to when you have aad-pod-identity set up and you have created the identities and labeled the SC pod

aadpodidbinding: ${IDENTITY_NAME} # match the AzureIdentity name
```

Then you don't need to reference a secret
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

What does "then" refer to? "Now"?

Copy link
Member

@stefanprodan stefanprodan left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Thanks @somtochiama

@stefanprodan stefanprodan added area/docs Documentation related issues and pull requests area/bucket Bucket related issues and pull requests labels Jun 3, 2022
@stefanprodan stefanprodan mentioned this pull request Jun 3, 2022
@stefanprodan stefanprodan merged commit b7281de into fluxcd:main Jun 3, 2022
@pjbgf pjbgf added this to the GA milestone Jun 6, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/bucket Bucket related issues and pull requests area/docs Documentation related issues and pull requests

Projects

Status: Done

Development

Successfully merging this pull request may close these issues.

4 participants