Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

many:1 serviceaccounts to Azure AD service principal #572

Closed
NillsF opened this issue Sep 27, 2022 · 1 comment
Closed

many:1 serviceaccounts to Azure AD service principal #572

NillsF opened this issue Sep 27, 2022 · 1 comment
Labels
enhancement New feature or request

Comments

@NillsF
Copy link

NillsF commented Sep 27, 2022

Is your feature request related to a problem? Please describe.
This is a feature request to support many:1 serviceAccounts in Kubernetes to Azure AD service principals. The use case is to have different serviceAccounts in Kubernetes being able to use the same identity in Azure.

Describe the solution you'd like
Ability to configure workload identity in such a way that multiple serviceAccounts map to a single service principal.

Describe alternatives you've considered
Having 1:1 serviceAccount to service principal. This works only to a certain scale. There's a limit on roleAssignments in Azure, and for applications with many serviceAccounts that needs to share the same Azure access; consolidating to less service principals in Azure works best to avoid this limit.

@NillsF NillsF added the enhancement New feature or request label Sep 27, 2022
@aramase
Copy link
Member

aramase commented Sep 27, 2022

Hello 👋🏻

Thank you for opening the issue!

The support for configuring wildcards in Federated Identity Credentials is an AAD feature that's not available today. There is already another issue requesting the same feature that has more context: #373. Please feel free to add to that issue.

Closing this as duplicate.

@aramase aramase closed this as completed Sep 27, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

2 participants