Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Crossplane: Enable Workload Identity for provider-gcp when running on GKE #1496

Closed
github-actions bot opened this issue Dec 13, 2021 · 1 comment
Closed
Labels
area/kubernetes Kubernetes cloud/gcp Cloud Provider / Google Cloud Provider kind/feature Categorizes issue or PR as related to a new feature lifecycle/frozen Indicates that an issue or PR should not be auto-closed due to staleness. lifecycle/stale Denotes an issue or PR has remained open with no activity and has become stale. priority/low This issue can probably be picked up by anyone looking to contribute to the project, as an entry fix

Comments

@github-actions
Copy link
Contributor

Crossplane: Enable Workload Identity for provider-gcp when running on GKE

crossplane-contrib/provider-gcp#173

iam.gke.io/gcp-service-account: portefaix-prod-crossplane@portefaix-prod.iam.gserviceaccount.com

https://github.com/portefaix/portefaix/blob/ce13ffcf0bfa9a2f4051f6e4a52bed8cd57f1a26/kubernetes/overlays/gcp/prod/crossplane/crossplane/provider/gcp-controller-config.yaml#L20

# Copyright (C) 2021 Nicolas Lamirault <nicolas.lamirault@gmail.com>
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

---
apiVersion: pkg.crossplane.io/v1alpha1
kind: ControllerConfig
metadata:
  name: crossplane-gcp
  # TODO: Crossplane: Enable Workload Identity for provider-gcp when running on GKE
  # labels: kind/feature, priority/low, lifecycle/frozen, area/kubernetes, cloud/gcp
  # https://github.com/crossplane/provider-gcp/issues/173

  # annotations:
  #   iam.gke.io/gcp-service-account: portefaix-prod-crossplane@portefaix-prod.iam.gserviceaccount.com
spec:
  podSecurityContext:
    fsGroup: 2000
  # https://github.com/crossplane/crossplane/blob/master/docs/reference/troubleshoot.md
  args:
    - --debug
  # replicas: 0

5dd02ca3b205623ca90f04463ad45d56e4c27568

@github-actions github-actions bot added area/kubernetes Kubernetes cloud/gcp Cloud Provider / Google Cloud Provider kind/feature Categorizes issue or PR as related to a new feature lifecycle/frozen Indicates that an issue or PR should not be auto-closed due to staleness. priority/low This issue can probably be picked up by anyone looking to contribute to the project, as an entry fix todo labels Dec 13, 2021
@stale
Copy link

stale bot commented Feb 11, 2022

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

@stale stale bot added the lifecycle/stale Denotes an issue or PR has remained open with no activity and has become stale. label Feb 11, 2022
@stale stale bot closed this as completed Feb 19, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/kubernetes Kubernetes cloud/gcp Cloud Provider / Google Cloud Provider kind/feature Categorizes issue or PR as related to a new feature lifecycle/frozen Indicates that an issue or PR should not be auto-closed due to staleness. lifecycle/stale Denotes an issue or PR has remained open with no activity and has become stale. priority/low This issue can probably be picked up by anyone looking to contribute to the project, as an entry fix
Projects
None yet
Development

No branches or pull requests

0 participants